Loopscale Pauses Protocol After Genesis Vault Attack
On November 5, 2026, Loopscale paused its protocol activity following a sustained attack campaign against its $SOL and $USDC Genesis Vaults, though user deposits remained unaffected.
Loopscale confirmed the pause in protocol activity after detecting a significant escalation in a week-long attack campaign targeting its APIs. The affected Genesis Vaults, which hold both $SOL and $USDC, have been made whole with no user deposits incurring losses, though repayment functionality remained suspended at the time of the announcement.
The lending protocol attributed the campaign to a sophisticated actor but provided no transaction-level account of how the activity affected the vaults or the amount requiring reimbursement. While Loopscale assured users that deposits were safe, an independently verified balance reconciliation was still pending when the statement was issued.
Operational Response
Loopscale indicated that normal operations would resume only after establishing the complete scope of the attack and implementing additional security measures. The team separately mentioned plans to re-enable the protocol interface soon but gave no specific timeline for when repayment functionality would be restored.
The interruption in repayment services affects borrowers' ability to reduce liquidation exposure through early repayments, which under normal circumstances would decrease outstanding debt and improve loan health. The status of other borrower actions, such as adding collateral during the pause, remained unclear in the notice.
Affected vaults have been made whole and no user deposits have incurred a loss.
Lending Mechanics Exposed
Loopscale's lending system creates exposure through fixed-rate loans where collateral values can fluctuate while borrowing rates remain constant. Loan health depends on the current loan-to-value ratio compared to a lender-set liquidation threshold. When this threshold is exceeded, positions become eligible for liquidation.
The protocol documented several risk factors including liquidation through failed refinancing, oracle manipulation, and partial collateral sales. Despite these disclosed risks, Loopscale reported no completed liquidations resulting from the incident and did not identify any specific failure modes that had occurred during the pause.
Genesis Vaults and Parent Company
The Genesis Vaults represent managed lending products curated by Loopscale's core team, with credit risk isolated by vault. Under the default-handling model, any losses would be absorbed proportionally by depositors, though Loopscale stated the targeted vaults were made whole without explaining the settlement process.
The protocol operates under Formation, the merged entity with Orca that maintains separate product brands. Loopscale emphasized that the merger left its programs, upgrade authority, and risk controls unchanged, with no indication that Orca products or other Formation services were affected by the attack.
The team confirmed engagement with federal law enforcement and security professionals but has not provided a firm timeline for restoring repayments or publishing the transaction-level reconciliation behind their assurance of no user losses.
Related
