On February 12, 2025, zkLend, a prominent lending project on Starknet, experienced a security breach that resulted in the loss of approximately $9.6 million in assets. The exploit was attributed to a floating point precision loss vulnerability, which allowed the attacker to convert 1 wei into 6.1 wstETH through a flawed scaling mechanism in the minting process. The attack was executed using the address 0x93920786e0fda8496248c4447e2e082da69b6c40. In response to the incident, the privacy protocol Railgun successfully blocked the hacker's attempt to launder $9.5 million in stolen funds, highlighting a rare success for privacy technology in combating illicit activities. The zkLend team has acknowledged the incident and expressed gratitude to users and partners for their support during this challenging period.