Cascade Hack

TOTAL LOST $1.3M
Medium Other

What happened

On July 15, 2026, the decentralized trading platform Cascade suffered an economic exploit targeting its Collaborative Liquidity Provision (CLS) vault on Arbitrum, resulting in a loss of approximately $1.34 million USDC.

The exploit targeted thin liquidity trading markets where Cascade's CLS vault acted as the primary market maker, holding the short side of the order book. The attackers accumulated massive long positions on these specific pairs and then artificially manipulated the mark price upwards. This price spike triggered liquidations and close-outs for the CLS vault's short positions.

Due to Cascade's automatic deleveraging (ADL) mechanism, the vault's liquidated positions were closed out directly against the attackers' highly profitable longs at the inflated mark price. The attackers immediately withdrew the $1.34 million USDC in profit, bridged the assets through Solana, and converted them into DAI on Ethereum via Relay Protocol to prevent centralized asset freezing.

Attack Transaction: 0xcd801d24…578314

Case & protocol details

Classification Exchange (DEX)
Protocol Type Exploit/Other
Official Website cascade.xyz/
Protocol Twitter/X @cascade_xyz

Evidence & learning

Sources and on-chain records

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.