Venus Protocol has released an update on the abnormal activity in the THE liquidity pool. In addition to suspending THE lending and withdrawals as previously planned, the collateral factor for seven markets—BCH, LTC, UNI, AAVE, FIL, TWT, and LISUSD—has been reduced to 0. These preventative measures target markets where a single user holds an excessively high proportion of collateral; all other markets continue to operate normally. The initial assessment of the attack method is that the attacker slowly accumulated THE tokens through normal deposit processes starting in June 2025, eventually holding 84% of the maximum limit (approximately 12.2 million THE). The hacker then directly transferred THE tokens into the protocol contract, instantly inflating the supply to create a massive amount of collateral. They then exploited the extremely low on-chain liquidity of THE, coupled with TWAP oracle delays, to recursively manipulate the price: depositing THE, lending out other assets, using the lent assets to buy more THE on-chain, and waiting for TWAP oracle updates to further inflate the price. Venus stated that a full report will be released after the investigation is complete.