Digital Asset
Intelligence
Security Incident · ETH Ecosystem

Arcadia Finance Contract Vulnerability: $455.00K Reported Loss

·Historical incident record

Incident Overview

Arcadia Finance has been attacked on Ethereum and Optimism, with total profits of $400K. The root cause is that in function vaultManagementAction, the attacker can first transfer all the asset to his own controlled contract and re-entry the function liquidateVault to liquidiate the vault. In this case, the global variable "isTrustedCreditorSet" will be set as false and the Collateral check can be bypassed.

Sources & References

Original incident referencehttps://twitter.com/Phalcon_xyz/status/1678270672911605760 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodContract Vulnerability
    Reported loss$ 3,600,000
  2. Incident date
    Attack methodReentrancy Attack
    Reported loss$ 450,000
  3. Incident date
    Target

    CivFund

    Attack methodContract Vulnerability
    Reported loss$ 180,000
  4. Incident date
    Attack methodContract Vulnerability
    Reported loss$ 171,000
  5. Incident date
    Attack methodPrice Manipulation
    Reported loss$ 1,700,000