On March 29, 2025 Venus Core Pool on zkSync Era suffered a donation attack when an attacker directly transferred tokens to the cToken contract, distorting exchange rates and accumulator calculations and bypassing collateral accounting and supply cap logic, resulting in $902,000 in losses and bad debt.