Pac Finance users lost $24 million in a sudden change in borrowing rules
The protocol team has already contacted the victims to develop a compensation plan
12.04.2024 - 10:10
402
2 min
0
What’s new? Users of Pac Finance’s DeFi lending protocol on the Ethereum blockchain-based Layer 2 (L2) Blast network experienced liquidation of positions totaling $24 million after the project’s wallet administrator changed the parameters for Renzo Restaked Ether (ezETH) loans without warning on April 11. The Pac Finance team said it has already contacted the affected users and is working on a plan to recover the losses.
What else is known? The company explained that as part of adjusting the Loan-to-Value (LTV) ratio, it tasked a smart contract engineer to make the necessary changes. What led to the current problem was that this was done without prior notice. To avoid a recurrence in the future, the team will introduce a community-managed or time-locked contract, as well as a forum to announce future updates.
Pac Finance allows cryptocurrency holders to deposit funds and earn interest by lending their capital. To ensure repayment, the app only allows borrowers to borrow a certain percentage of their collateral, this percentage is called LTV. The development team can change the LTV, but this is usually only done after the announcement.
According to on-chain data, the developer’s wallet triggered a function in the PoolConfigurator-Proxy contract, setting the LTV for ezETH at 60%. As a result, the borrowers’ positions were automatically liquidated due to a violation of the collateral rules set in the protocol. Their assets were automatically sold off to repay loans due to this change.
Mass liquidations are a frequent problem for leverage traders. However, they usually occur due to sudden changes in the price of the cryptocurrency rather than a change in protocol.
Useful material?
Incidents
Developers warned of potential risks to bridges across the ecosystem and asked exchanges for assistance.
Jun 22, 2026
Incidents
The defendant helped move funds stolen through investment scams and earned at least $4 million for his role in the operation.
Jun 10, 2026
Incidents
The company is linking the incident to a compromised private key on a service wallet, rather than a smart contract exploit
May 22, 2026
Incidents
Following the incident, the project temporarily halted trading operations and node activity.
May 15, 2026
Incidents
The user spent weeks unsuccessfully trying to guess the password until Claude helped find an old wallet backup file
May 14, 2026
Crypto regulations
Authorities are introducing mandatory registration for companies handling cross-border crypto transactions
May 8, 2026

Telegram
Twitter