Kava Lend exploit drains 55M KAVA after BUSD market accounting bug
An exploit at Kava Lend drained about 55 million KAVA by exploiting an accounting edge case in a near-empty BUSD market. No infinite-mint occurred. On-chain analysis indicates the protocol overstated collateral value when the market’s effective net supply approached zero, enabling repeated borrowing. The incident and KAVA’s price drop occurred on November 14. The team said the issue was contained within Kava Lend. No full post-mortem or recovery plan had been published.
A nearly empty BUSD market became the weak point
According to The Block’s account, the attacker targeted Kava Lend’s BUSD market, which was largely inactive after BUSD minting ceased in 2023. By pushing effective net supply close to zero, the attacker triggered a calculation that inflated deposit accounting values by roughly 243,000 times. The software misvalued collateral, breaking borrowing limits that depend on accurate valuations.
Borrowing and bridging expanded the damage
The attacker executed 127 KAVA borrow transactions, withdrawing about 55.2 million tokens. At the pre-attack price, this equaled approximately $3.76 million. Around 49.2 million KAVA were bridged to BNB Chain via LayerZero and sold for about $2.09 million in BNB and USDT, based on published on-chain analysis. The pre-attack valuation, realized proceeds, lender losses and recoverable amounts differ. A definitive accounting depends on the protocol’s incident report.
The team’s response and unresolved issues
Kava stated the event was not an infinite-mint issue and was isolated to Kava Lend. The team introduced precautionary measures affecting bridging, and some venues restricted KAVA transfers. These steps can limit further damage but do not restore depositor balances or explain the missed edge case. Required clarifications: who bears the loss, whether any market remains impaired, what code changes are proposed and whether independent review has covered the fix.
DeFi’s persistent accounting risk
Lending protocols rely on collateral ratios, interest indexes, liquidity and oracle prices. As shown in NewsBTC’s coverage of Aave governance and institutional interest in lending infrastructure, risk and economic design require continuous management. The Kava case shows inactive or forgotten markets can become critical failure points. Depositors in a multi-asset lender are exposed to all supported collateral markets, not only the assets they use.
Written by the News Desk and edited by Samuel Rae.
Authors credited by the source: NewsBTC Editorial Team
Published by Holder based on an external source.
