Security Incident · ETH Ecosystem
Arcadia Finance Contract Vulnerability: $455.00K Reported Loss
Arcadia Finance has been attacked on Ethereum and Optimism, with total profits of $400K.
- Reported loss
- $ 455,000
- Attack category
- Contract Vulnerability
Incident Overview
The root cause is that in function vaultManagementAction, the attacker can first transfer all the asset to his own controlled contract and re-entry the function liquidateVault to liquidiate the vault. In this case, the global variable "isTrustedCreditorSet" will be set as false and the Collateral check can be bypassed.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.