Pendle officially released a post-mortem analysis of the Penpie attack on the X platform, the main content of which includes: "Earlier today, a security vulnerability against Penpie resulted in the loss of some funds. In response, Pendle quickly suspended our contracts, effectively protecting approximately $105 million. After many efforts, the Pendle contract has now been restored. Normal operations have been resumed. Funds on Pendle are still safe.
Since the attacker deployed the first contract for the attack at 17:45 UTC time, the Pendle team detected it through a real-time internal monitoring system, launched an investigation, defended Pendle and Pencosystem from any subsequent attacks, contacted security expert Seal 911 to help assess the situation, select and develop a security strategy, suspended all contracts on the Pendle platform to prevent the loss of Penpie assets, and actively contacted protocols that use Pendle PT as collateral and informed them that the contract has been suspended (PT cannot be liquidated during this period). Subsequently, the team discovered that the vulnerability was related to a function that allows Pendle markets to be listed on Penpie without permission. Finally, at UTC time At 00:50, the Pendle contract has been safely restored and is back to normal operation. During the incident, the Pendle team maintained active communication with security experts Seal 911 and Penpie to mitigate the losses. Thanks to Dan Caspi from @HypernativeLabs, @invlpgtbl and 0xc0ffeebabe for their help and professional support, and special thanks to @pcaversaccio.
We would like to assure Pendies that the funds on Pendle remain safe and unaffected, and we will continue to prioritize the safe operation of the platform. ”