The Hidden Hole in Privacy Tech: Forensic Analysis of the zkLend Hack

On February 11-12, 2025, zkLend, a Starknet-based lending protocol, suffered a $9.5 million exploit due to a decimal precision vulnerability in its smart contract's lending accumulator, which allowed an attacker to inflate their balance and drain assets. This incident, potentially linked to prior hacks and marked by the attacker ironically losing some stolen funds to a phishing scam, underscores the critical need for deep logical analysis in smart contract audits and robust real-time monitoring in DeFi.