DeFi Platform Arcadia Finance Falls Victim to $455K Hack on Ethereum and Optimism

Ad Disclosure
Ad Disclosure

We believe in full transparency with our readers. Some of our content includes affiliate links, and we may earn a commission through these partnerships. However, this potential compensation never influences our analysis, opinions, or reviews. Our editorial content is created independently of our marketing partnerships, and our ratings are based solely on our established evaluation criteria. Read More
Last updated:
Ad Disclosure
Ad Disclosure

We believe in full transparency with our readers. Some of our content includes affiliate links, and we may earn a commission through these partnerships. However, this potential compensation never influences our analysis, opinions, or reviews. Our editorial content is created independently of our marketing partnerships, and our ratings are based solely on our established evaluation criteria. Read More
Author
Yuri Molchan
Author Categories
About Author

Last updated:
Why Trust Cryptonews
Cryptonews has covered the cryptocurrency industry topics since 2017, aiming to provide informative insights to our readers. Our journalists and analysts have extensive experience in market analysis and blockchain technologies. We strive to maintain high editorial standards, focusing on factual accuracy and balanced reporting across all areas - from cryptocurrencies and blockchain projects to industry events, products, and technological developments. Our ongoing presence in the industry reflects our commitment to delivering relevant information in the evolving world of digital assets. Read more about Cryptonews
Ad DisclosureWe believe in full transparency with our readers. Some of our content includes affiliate links, and we may earn a commission through these partnerships. Read more
Source: Pixabay

Arcadia Finance has joined the growing list of DeFi protocols to lose funds in hack exploitation. The hackers leveraged a code vulnerability to siphon about $455,000 from the protocol’s Ethereum and Optimism vaults.

Blockchain sleuth PeckShield alerted about Arcadia’s exploitation in a July 9 tweet. In the tweet, PeckShield also highlighted the cause of the attack.

Arcadia Finance Hacker Leveraged Contract Code Vulnerability to Sweep Funds

The tweet revealed that the attackers capitalized on “the lack of untrusted input validation” to carry out the illicit transaction. PeckShield noted that Arcadia Finance’s contract code lacked a validation mechanism to cross-check unverified inputs.

The loophole allowed the hacker to withdraw approximately $445,000 in crypto assets from the protocol’s Ethereum (darcWETH) and Optimism (darcUSDC) vaults.

Arcadia Finance has confirmed the hack attack, but lonely two hours after PeckShield’s update. The protocol noted that it paused the contracts to prevent further fund drainage. 

The team disclosed that it is working with security experts to investigate the root-cause of the incident and will share more information as soon as it comes.

While investigations into the root cause of the attack continue, PeckShield made another striking revelation. The blockchain security firm said it found another vulnerability in Arcadia’s code, which hackers could explore to steal more funds.

“In addition, there is a lack of reentrancy protection, which allows the instant liquidation to bypass the internal vault health check,” PeckShield said.

Most of the stolen funds, about 180 ETH, came from the Optimism vault. And according to PeckShield’s data, the hackers have already laundered the funds via Tornado Cash. 

But the stolen Ethereum, worth more than $103,000 at press time, is still in the suspected wallet address, as the hacker has yet to move it.

Q2 2023 Report On DeFi Hack Attacks

Hack exploitation on DeFi protocol has become increasingly problematic. In Q2 2023 alone, the DeFi space has lost over $300 million in crypto assets to hack attacks.

According to the blockchain security firm, CertiK’s quarterly report, Web3 protocols recorded 212 security breach incidents in Q2, leading to a loss of $313,566,528. However, CertiK discovered that crypto hack incidents declined by 58% from the $745 million recorded in Q2 2022. 

According to CertiK, most hack attacks happened on the BNB Smart Chain, amounting to 119 hack incidents with $70,711,385 million in fund losses. 

Ethereum, on the other hand, recorded 55 hack incidents, leading to $65,999,953 in losses.

In addition, losses from Oracle manipulation and flash loans drastically reduced in Q2 of 2023 than in the first quarter. 

The first quarter of 2023 saw 52 Oracle manipulation attacks, with $222 million in losses. Of this lot, the Euler Finance hack attack accounted for 85%. 

 






 

More Articles

Altcoin News
Central African Republic’s Meme Coin Experiment Raises Suspicion
Shalini Nagarajan
Shalini Nagarajan
2025-02-10 06:28:10
Price Analysis
Bitcoin Whales Are Shorting Hard—Will BTC Breakout or Drop Below $95K?
Arslan Butt
Arslan Butt
2025-02-10 06:00:08
Crypto News in numbers
editors
Authors List + 66 More
2M+
Active Monthly Users Around the World
250+
Guides and Reviews Articles
8
Years on the Market
70
International Team Authors