Zentra Finance Loses $143,000 in Exploit Targeting ctUSD Reserve on Citrea

Zentra Finance, a lending protocol operating on the Citrea mainnet, has confirmed a security breach that resulted in the theft of approximately $143,000 from its ctUSD reserve. The attack occurred on September 9th, 2026, and was traced to a specific blockchain transaction. The team suspended all lending operations as soon as the breach was detected, and says other liquidity pools were not affected.

The company has not disclosed how the attacker gained access or what vulnerability was exploited, only confirming that the breach was isolated to the contract managing the ctUSD synthetic asset. Investigators identified the wallet holding the stolen funds and have asked for voluntary return of the assets to a treasury address, offering a negotiated bug bounty in exchange and a promise not to pursue legal action if the attacker cooperates by the deadline of September 14th, 2026.

If no agreement is reached, Zentra Finance says it will pursue onchain forensic tracing and formal legal action, and may redirect reward funds to anyone who provides verifiable information about the incident.

Key Takeaway: If your business holds or transacts in digital assets through third-party platforms, monitor the security status of those protocols closely and avoid leaving funds in reserves or pools during unresolved incidents.