The decentralized lending protocol, ZEST PROTOCOL, within the STACKS ecosystem, has been attacked, resulting in the theft of 324,000 $STX tokens. The attacker successfully withdrew excess $STX by manipulating the collateral value. The ZEST team has frozen the smart contract and announced that the losses will be compensated from the treasury. Furthermore, the investigation revealed that the attacker used the XLINK cross-chain bridge to exchange BTC for $STX, with the BTC originating from withdrawal transactions on BINANCE. ZEST has temporarily suspended operations and is appealing to the public for assistance in identifying the attacker. The protocol is undergoing a re-audit and plans to resume services after confirming its security, with no impact on user balances.