Ethereum

Arcadia Finance, a non-custodial leveraged farming protocol, has suffered a security breach resulting in the loss of hundreds of thousands of dollars. The exploit was <a href="https://twitter.com/PeckShieldAlert/status/1678248292327763968" rel="noopener noreferrer nofollow">disclosed</a> by blockchain intelligence firm PeckShield, who identified vulnerabilities in Arcadia&#39;s code on Ethereum and Optimism networks. The hacker successfully drained approximately $455,000 from the protocol by exploiting the absence of &#34;untrusted input validation&#34; and the &#34;lack of reentrancy protection&#34; in Arcadia&#39;s program code. As a consequence, the attacker gained access to the darcWETH and darUSDC wallets of the DeFi protocol.PeckShield further highlighted a critical weakness in Arcadia Finance&#39;s security. The protocol lacked &#34;reentrancy protection,&#34; allowing the attacker to execute instant liquidation irrespective of the internal vault health status. This flaw provided the hacker with the opportunity to exploit the system&#39;s vulnerabilities effectively. PeckShield <a href="https://twitter.com/peckshield/status/1678263478774013952?s&#61;46&amp;t&#61;JAUmthpFclo8jS4VJkm3DQ" rel="noopener noreferrer nofollow">reports</a> that 179.03 ETH, taken from the Optimism chain, has been laundered using the Tornado Cash protocol. However, the funds obtained from the Ethereum chain remain in the possession of the hacker.Upon receiving the security alert from PeckShield, Arcadia Finance took immediate action by halting all ongoing contracts and initiating an investigation with the assistance of security experts. The team behind Arcadia has also reached out to law enforcement authorities in response to the incident. <a href="https://defillama.com/protocol/arcadia-finance" rel="noopener noreferrer nofollow">Data from DeFiLlama</a> reveals that the recent exploit has caused a significant decline in Arcadia&#39;s total value locked (TVL), plummeting by 76% from $604,440 to the current value of $142,824.This attack on Arcadia Finance is just one among several instances of crypto heists that have plagued the industry in 2023. Recently, the Multichain protocol suffered a similar breach resulting in the theft of $126 million. According to <a href="https://www.certik.com/resources/blog/6KJQKBrVJEwHR6Tc4PAvJo-hack3d-the-web3-security-quarterly-report-q2-2023" rel="noopener noreferrer nofollow">a report</a> from Certik Security, the second quarter of 2023 saw a total of over $313 million lost to crypto scams and hacks. While this figure marks a 58% decline compared to the same period in 2022, it remains consistent with the losses recorded in the first quarter of 2023, which amounted to $320 million. Notably, June recorded the highest losses in the second quarter, reaching $135.2 million, followed by April with $103 million.Arcadia Finance has <a href="https://twitter.com/ArcadiaFi/status/1678310473832312833" rel="noopener noreferrer nofollow">initiated contact</a> with the attacker and is actively working to minimize the damage caused by the exploit. The protocol is collaborating with security partners, law enforcement agencies, and the broader community to recover funds and ensure the safety of Arcadia protocol users.

Arcadia Finance Falls Victim to $455,000 Hack, Exposing Code Vulnerabilities

Coinlive

Other articles published on Jul 11, 2023

Major Defi Protocol Algofi Announces Cessation of Operations in Algorand Ecosystem

Analysis of the XRPL Token Market Performance: A Review of the Week

Ripple CTO Names Crucial Deadline for Lawsuit Ruling

AI Firms Warned Over Potential to Endanger Humanity

Alluvial, Developer of Liquid Staking Protocol Liquid Collective, Raises $12M in Series A Round

Starbucks Partners With Micah Johnson’s Aku NFT Collection

Join our free newsletter for daily crypto updates!