GoPlus Security 🚦 (@GoPlusSecurity): 1/4

1/4 ⚠️ Vulnerability Analysis: Purrlend Exploit Incident Analysis On April 25, 2026, the lending protocol @purrlend was exploited through its contracts on #MegaETH and #HyperEVM, resulting in a total loss of approximately $1.5M. Root cause: The Purrlend admin account with adminRole is suspected to have been compromised, which allowed the attacker address to obtain BRIDGE_ROLE permissions, pass the _onlyBridge() security check, and carry out the attack.