Purrlend encountered a security incident: due to the administrator's multi-signature being compromised, a loss of approximately 1.52 million dollars occurred

Purrlend announced that it encountered a security incident during the deployment of HyperEVM and MegaETH, resulting in a loss of approximately $1.52 million.

The attacker breached the team's 2/3 multi-signature wallet, granting permissions such as BRIDGE_ROLE to a malicious EOA, and minted unbacked pUSDm and pUSDC through mintUnbacked, using them as collateral to borrow assets from the pool. Purrlend stated that it has suspended the protocol, revoked related permissions, and is working with security teams, law enforcement, and cross-chain bridge partners to track and attempt to recover the funds.