---
id: 5691
title: "The story of the curious rent thief"
source_domain: osec.io
source_url: "https://osec.io/blog/solend-rent-thief/"
published_at: "2022-08-19T00:00:00Z"
tags: ["defi", "vulnerability", "solana", "solend", "rent", "bot"]
phying_url: "https://phying.com/item/5691"
lang: en
---

# The story of the curious rent thief

## Summary

OtterSec investigates a bot stealing rent from uninitialized Solana accounts, via a case study of an attack on Solend's permissionless pools exploiting the creation-initialization gap.

## Intelligence Metadata

- **Sources:** osec.io
- **Published:** 2022-08-19T00:00:00Z
- **Original:** https://osec.io/blog/solend-rent-thief/
- **Phying News:** https://phying.com/item/5691