Liquid staking protocol Prisma Finance appears to have been hacked in an ongoing exploit.

Web3 security platform Cyvers first detected the suspicious transactions, estimating a total loss of around $9 million so far, claiming the attacker funded via the crypto exchange FixedFloat. 

Blockchain security firm PeckShield also confirmed the attack, suggesting Prisma mkUSD and wrapped stETH are among the stolen assets.

“We are aware of a possible exploit on Prisma,” Prisma Finance responded on X. “Core engineering contributors will pause the protocol and investigate. We'll share an update and a post-mortem.”

The project also recommended that vault owners should disable delegate approval.

Prisma Finance did not immediately return a request for comment from The Block.

Disclaimer: The …