Purrlend Loses $1.52M on HyperEVM and MegaETH After 2/3 Multisig Compromise

According to ChainCatcher, Purrlend suffered a security breach on HyperEVM and MegaETH on May 3, losing approximately $1.52 million. Attackers compromised the team's 2/3 multisig wallet and granted themselves the BRIDGE_ROLE permission, using it to mint unbacked pUSDm and pUSDC tokens that were then used as collateral to borrow assets from the protocol's lending pools.

Purrlend has halted the protocol and revoked the malicious permissions. The team is working with security experts and law enforcement to track and recover the stolen funds.