The zkSync ecological lending protocol EraLend confirms a theft of 2.76 million dollars

ChainCatcher news, the zkSync ecosystem lending protocol EraLend tweeted that, after a preliminary investigation, the illegal attack has been identified as a read-only reentrancy vulnerability. The attacker manipulated the oracle price, resulting in the theft of approximately $2.76 million from the USDC pool, while other pools remain unaffected.

In addition, to limit further impact, EraLend has temporarily halted lending, USDC supply, and SyncSwap LP supply, and significantly reduced the interest rates of the USDC pool to protect the affected borrowing positions from potential liquidation during this period.