Kava Lend Hack Drains $3.8 Million as KAVA Falls

The Kava Lend hack drained about 55.2 million KAVA, worth roughly $3.76 million at the token’s pre-attack price, from the lending protocol on November 14. The Block reported that KAVA was down about 39% over 24 hours at the time of publication. The attacker moved most of the tokens to BNB Chain and sold a large amount there, according to The Block and on-chain investigators.

What happened in the Kava Lend hack

The attacker used Kava Lend’s BUSD market, where a change to net supply reportedly triggered an extreme rise in the supply index. The Block’s account of the on-chain analysis said reducing net supply to a tiny positive amount increased that index roughly 243,000-fold. The attacker then used a second account to work around the borrowing cap, taking out 127 KAVA loans.

The result was a withdrawal of about 55.2 million KAVA. The Block reported that the pool’s balance dropped from 55.33 million KAVA to 0.19 KAVA. Kava later said the incident was “not an infinite mint.”

Kava’s November 14 statement said it was investigating unexpected activity that originated from a dApp in its ecosystem. In a follow-up, the team said the event was contained within Kava Lend. Kava’s incident updates are available on its official X account.

The attacker moved about 49.2 million KAVA to BNB Chain through LayerZero, The Block reported. Bitquery tracked 48.4 million KAVA sold there over 35 minutes for roughly $2.1 million in BNB and USDT.

Background and context for the Kava Lend hack

Kava Lend is the lending protocol involved in the incident. On-chain analysis described its BUSD market as nearly dormant. An advisory from 0xCERT characterized the issue as an interest-index arithmetic flaw in that market. The evidence available as of November 15 does not include Kava’s complete incident report, which the team said it would publish.

The incident also fits a wider run of lending-protocol losses reported during 2026. The Block cited a Tectonic exploit estimated at $75 million that led Cronos to halt its network in August, and a roughly $9 million loss at Hedera’s Bonzo Lend in July. Those incidents involved different protocols, so they do not show that the same weakness caused each loss.

In Kava’s case, the traced route crossed chains through LayerZero, and Bitquery reported a separate block of funds by Relay. The available evidence describes those transactions but does not establish the final status of the blocked funds.

Market reaction after the Kava Lend hack

The Block reported KAVA near $0.042 when its story was published at 23:07 UTC on November 14, down about 39% over 24 hours. Bitquery’s review found that the token price fell 36% during the 35-minute sale on BNB Chain. Those figures cover different periods and should not be treated as estimates for the same time window.

The wider market was also under pressure. At 06:13 UTC on November 15, Bitcoin was down 4.39% over 24 hours and Ether was down 5.96%, according to the supplied CoinGecko market snapshot. This provides broader market context, but the evidence does not establish how much of KAVA’s decline was attributable to wider market moves.

Asset or measure	Reported reading	Time basis
KAVA	Near $0.042, down about 39%	The Block, November 14, 23:07 UTC
Bitcoin	$64,279, down 4.39% in 24 hours	November 15, 06:13 UTC
Ether	$1,789.65, down 5.96% in 24 hours	November 15, 06:13 UTC

Bitquery said Relay blocked 612,416 USDT, about 29% of the traced sale proceeds, after marking a bridge order failed with the reason “BLOCKED_WALLET.” The investigation reported the block, but the supplied evidence does not say whether the funds were subsequently recovered. The Block also reported that partner exchanges paused deposits and withdrawals as a precaution.

The Crypto Fear & Greed Index stood at 10, classified as Extreme Fear, on November 15. That reading describes broad market sentiment, not a measure of Kava Lend’s security or the final size of its losses.

What to watch next

Kava said it would publish a complete incident report and paused the Axelar bridge as a precaution. As of November 15, 0xCERT said Kava had not published the report or an official loss figure. The roughly $3.76 million estimate is based on the pre-attack value of the KAVA taken, rather than an official loss figure from Kava.

Further details from Kava could clarify the contract flaw and the status of the paused bridge. Bitquery’s on-chain investigation of the Kava exploit documents the traced bridge activity and Relay block. The incident involved a smart-contract flaw and bridge activity; the supplied evidence does not confirm the final status of the blocked funds.

FAQ

How much did the Kava Lend hack take?

About 55.2 million KAVA, valued at approximately $3.76 million using the pre-attack price of $0.068, according to The Block. Kava had not published an official loss figure as of the November 15 update cited by 0xCERT.

What caused the Kava Lend hack?

On-chain analysis linked the exploit to an arithmetic flaw in the protocol’s nearly dormant BUSD market. Reducing net supply to a tiny positive amount reportedly caused the supply index to rise roughly 243,000-fold, enabling 127 KAVA loans using a second account to work around the borrowing cap.

Did the Kava Lend hack cause KAVA to fall?

KAVA was reported near $0.042, down about 39% over 24 hours, after the incident. Bitquery also reported a 36% price fall during the sale on BNB Chain. The wider crypto market was falling on November 15 as well, so the token’s move occurred amid broader market weakness.

Sources

• Kava Hack: 55.2M Coins Drained, $612K Blocked at Relay (bitquery.io)
• Kava on X: incident update (x.com)
• Kava Lend loses roughly $3.8 million to hack, sending KAVA token down nearly 40% (The Block)

This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrencies are highly volatile; always do your own research before investing.

Read More: Kava Lend Hack Drains $3.8 Million as KAVA Falls">Kava Lend Hack Drains $3.8 Million as KAVA Falls