Start now →

Venus’ XVS token plunges 9% as exploit leaves protocol with bad debt

By Francisco Rodrigues · Published March 19, 2026 · 5 min read · Source: CoinDesk
Security
MarketsShare this articleX (Twitter)LinkedInFacebookEmail

Venus’ XVS token plunges 9% as exploit leaves protocol with bad debt

The exploit, which occurred on March 16, didn’t appear to impact XVS prices until analysis showed major holders moving large amounts to exchanges.

By Francisco Rodrigues|Edited by Omkar GodboleUpdated Mar 19, 2026, 11:19 a.m. Published Mar 19, 2026, 11:18 a.m. GoogleMake us preferred on Google
Trading screen with price monitors and charts (Yashowardhan Singh/Unsplash)
(Yashowardhan Singh/Unsplash/Modified by CoinDesk)

What to know:

The governance token of Venus (XVS), a BNB Chain-based money market with over $1.4 billion in total value locked, has dropped more than 9% in 24 hours after an exploit that left it with $2.15 million in bad debt.

The drawdown comes amid a broad risk asset sell-off that has seen the broader CoinDesk 20 (CD20) index lose 4.6% of its value in the same period.

The exploit, which occurred on March 16, didn’t appear to impact XVS prices until analysis showed major holders, including wallets linked to Justin Sun, moving large amounts to exchanges.

Venus said the exploit, in its Thena market left about $2.15 million in bad debt or loans the system can no longer recover.

The attacker, according to the protocol, spent about nine months accumulating a large position in Thena's THE token. That accumulation, according to PeckShield, was funded with 7,400 ETH withdrawn from mixing protocol Tornado Cash.

The attacker then donated more than 36 million THE straight to the vTHE contract, skipping the normal cap checks and lifting the market’s exchange rate by about 3.8 times. The gap in code that allowed the attacker to skip these checks, Venus said, is being closed.

With that higher paper value, the attacker posted THE as collateral, borrowed other assets and bought more THE in a thin market, according to Venus.

The buying helped lift THE from about $0.26 to near $0.56. Venus said this was not a flash-loan attack, its oracles kept working and Venus Flux was not affected.

When the attacker later sold THE, the price dropped more than 17% in less than a day and liquidations followed. Analysis puts the value pulled before liquidations at roughly $3.7 million to $5.8 million, with assets including tokenized bitcoin, BNB, and stablecoins being taken.

The damage was mostly limited to THE token and, to a lesser extent, CAKE. It also said no user funds were lost outside the affected pools.

The protocol paused THE borrows and withdrawals, cut THE’s collateral value to zero and tightened rules on other markets identified as at-risk in response to the incident. Markets at-risk include those for BCH$455.79, LTC$55.37, aave AAVE$114.35, among others.

The attacking address had been flagged by the community before the incident. Venus did not act as “no rules had been broken, and no exploit had occurred," it said.

“Venus is a decentralized protocol. As a permissionless protocol, we cannot and should not freeze or blacklist addresses based on suspicion alone,” the protocol wrote on social media. “This is a tension inherent to DeFi, and one we take seriously.”

Governance is expected to decide how to cover the loss through Venus’s risk fund.


DeFiWeb3

More For You

Bitcoin slips to $70,000 as oil surge, Fed pause weigh on risk assets

By Oliver Knight, Omkar Godbole|Edited by Sheldon Reback1 hour ago
Oil rig operating during the sunset (Maria Lupan/Unsplash)

BTC dipped below $70,000 as energy prices spiked and the Fed held interest rates, pressuring crypto and equities.

What to know:

Read full storyLatest Crypto News Coinbase CEO Brian Armstrong (David Dee Delgado/Getty Images)

Coinbase faces a multibillion-dollar threat from D.C. but a 'rewards' loophole could protect its stablecoin revenue

1 minute ago
Crypto.com (Jesse Hamilton/Coindesk)

Crypto.com cuts 12% of staff as it integrates AI across the business for efficiency

17 minutes ago
Symbols of several stablecoins including USDT, USDC.

Capital is shifting into digital dollars as bitcoin wilts

33 minutes ago
Oil rig operating during the sunset (Maria Lupan/Unsplash)

Bitcoin slips to $70,000 as oil surge, Fed pause weigh on risk assets

1 hour ago
Galaxy Digital CEO Mike Novogratz (Danny Nelson/CoinDesk)

Bitcoin’s quantum threat is real, but far from an existential crisis, Galaxy says

1 hour ago
BTCUSD/Gold (TradingView)

Bitcoin, unusually, outperforms gold as hawkish Fed, oil price fuel risk-off sentiment

1 hour ago
Top StoriesNasdaq sign on a building

SEC approves Nasdaq's move to support tokenized securities trading

15 hours ago
A key market metric known as the "stETH discount" suggests market speculation that Celsius Network might dump a big stake. (Creative Commons, modified by CoinDesk)

Bitcoin OGs dump over $100 million in BTC after hawkish Fed dents rate cut hopes

4 hours ago
crypto, numbers, data

Forget market hours: Leading ETP firm just opened 24/7 liquidity for tokenized stocks, gold and money market funds

5 hours ago
FTX CEO Sam Bankman-Fried (Jesse Hamilton/CoinDesk)

Sam Bankman-Fried's bankrupt exchange FTX set to repay creditors $2.2 billion this month

16 hours ago
Fairshake PAC influenced 2024 congressional elections

Fairshake's $10 million Illinois misfire marks first big hitch in crypto political surge

15 hours ago
CoinDesk

Kalshi co-founder fights back against Arizona’s ‘overstep’ in what a lawyer calls a federal-state turf war

17 hours ago

In this article

BCHBCHBCH$455.791.45%LTCLTCLTC$55.372.12%AAVEAAVEAAVE$114.352.61%
This article was originally published on CoinDesk and is republished here under RSS syndication for informational purposes. All rights and intellectual property remain with the original author. If you are the author and wish to have this article removed, please contact us at [email protected].

NexaPay — Accept Card Payments, Receive Crypto

No KYC · Instant Settlement · Visa, Mastercard, Apple Pay, Google Pay

Get Started →