In early November 2026, Solana lending protocol Loopscale faced a sustained campaign involving high-volume malicious API requests. Attackers exploited misconfigured asset-pricing parameters to take undercollateralized loans and attempt disproportionate redemptions from the SOL and USDC Genesis Vaults. The team paused the protocol on November 5, stated that affected vaults were made whole, and confirmed no user deposit losses, while coordinating with law enforcement.