Arcadia V1 Hack

Arcadia Finance, a decentralized trading platform, was exploited through reentrancy on both Ethereum and Optimism, losing 459,094 $USD.

Arcadia Finance, a DEX on Ethereum and Optimism chain was exploited due to a code vulnerability leading to the loss of funds on both Ethereum and Optimism chains. The hacker utilized a loophole in the code which lacked proper validation of untrusted input, draining assets from Ethereum (darcWETH) and Optimism (darcUSDC) vaults. The exploit resulted in a loss of 459,094 $USD in total, of which 159.22 $ETH and 162,627 $USDC were lost.

103,200 $USDC and 11 $ETH were lost from the Ethereum chain, while 59,427 $USDC and 148.22 $ETH were lost from the Optimism chain. Funds on the Ethereum chain were swapped for $ETH and $DAI and remained at the attacker's address, while the Optimism chain funds were swapped for $ETH and then bridged through Stargate Finance.

Ethereum:

Attacker Address:

https://etherscan.io/address/0x5c75e94d…3c050d

Malicious Transaction:

https://etherscan.io/tx/0xefc4ac01…c2d651

Malicious Contract:

https://etherscan.io/address/0x56a35fae…1517cf

Optimism:

Attacker Address:

https://optimistic.etherscan.io/address/0xd3641c91…1a9467

Malicious Transaction:

https://optimistic.etherscan.io/tx/0xca7c1a0f…7a0afe

Malicious Contract:

https://optimistic.etherscan.io/address/0x01a4d908…3b83c6

Bridging Transaction:

https://optimistic.etherscan.io/tx/0x856c92df…6000da