Loopscale Restores Priority Lending After Attacks
The Solana-based lending protocol reopened priority loans while vault withdrawals and other features remain restricted.
Updated on Nov. 8, 2026 in Cybersecurity
Loopscale has restored priority lending on its Solana protocol after containing two attack paths involving its SOL Genesis Vault and USDC Genesis Vault. Borrowers can now add collateral to all loans, but repayment remains unavailable for loans funded by the USDC Genesis Vault.
Why it matters
The attacks exposed how misconfigured asset-pricing parameters and bundled atomic transactions can be exploited in decentralized lending markets. The restoration of lending services shows how protocols attempt to recover while limiting further risk to user funds.
Protocol-reported figures show about $412,000 in undercollateralized loans from the SOL Genesis Vault flaw and an attempted $521,000 redemption against the USDC Genesis Vault that was blocked after about 30 seconds. The source does not say when restricted vault withdrawals will resume.
The players
Loopscale
Loopscale is a lending protocol built on the Solana blockchain that offers loans secured by crypto collateral and funded through vaults.
Solana
Solana is a high-throughput blockchain network that hosts a range of decentralized finance applications, including the Loopscale protocol.
The details
One attack path exploited misconfigured asset-pricing parameters that caused collateral to be valued as a different asset, enabling undercollateralized loans. A second path used bundled atomic transactions to sell very high-interest loans into the USDC Genesis Vault, raising its net asset value before a redemption attempt.
Timeline
November 7, 2026: Article published on the restoration of priority lending and the contained attacks.
Big Picture
The second attack path relied on bundled atomic transactions on Solana to push high-interest loans into the USDC Genesis Vault, illustrating how composability in decentralized finance can create new exploit routes. Such mechanics have become a recurring focus for security researchers evaluating lending protocols.
Users with loans funded by the USDC Genesis Vault cannot currently repay them, and those who repay in full can withdraw collateral only if the loan was not USDC-funded. Anyone holding deposits in the vaults should expect continued restrictions on withdrawals until the protocol lifts them.
The takeaway
Protocols that rely on automated pricing and composable transactions can be exploited through configuration errors and bundled operations, so users should watch for restricted features and confirm how a platform handles repayments and withdrawals before depositing.
Further reading
For broader context on how protocol exploits are investigated and defended against, see Cybersecurity coverage on Wisevoter.
Source note: This article includes information reported by TokenPost.
