Loopscale API Attack Halts Lending After Malicious Requests - The Cryptonomist

Loopscale has paused its lending operations after what it describes as an API attack involving malicious requests, according to The Cryptonomist. The reported disruption targeted the protocol's application programming interface — the layer through which applications and automated systems submit requests to the lending service — rather than necessarily the underlying smart contracts. Halting lending is a standard containment measure in such situations, limiting further exposure while the team investigates.

The incident highlights a distinction worth keeping in mind: DeFi protocols rely not only on on-chain code but also on off-chain infrastructure such as APIs, which can be a separate attack surface. A compromise or abuse of that layer can disrupt service even when the core contracts behave as designed.

For market participants, the key items to watch are Loopscale's post-incident disclosures — including whether user funds are confirmed unaffected, the root cause, and any timeline for resuming lending. Broader implications will depend on whether the attack exploited a protocol-specific weakness or a pattern common to other lending platforms with similar interfaces. Until details are confirmed, the situation remains developing.