Cascade Hack
What happened
On July 15, 2026, the decentralized trading platform Cascade suffered an economic exploit targeting its Collaborative Liquidity Provision (CLS) vault on Arbitrum, resulting in a loss of approximately $1.34 million USDC.
The exploit targeted thin liquidity trading markets where Cascade's CLS vault acted as the primary market maker, holding the short side of the order book. The attackers accumulated massive long positions on these specific pairs and then artificially manipulated the mark price upwards. This price spike triggered liquidations and close-outs for the CLS vault's short positions.
Due to Cascade's automatic deleveraging (ADL) mechanism, the vault's liquidated positions were closed out directly against the attackers' highly profitable longs at the inflated mark price. The attackers immediately withdrew the $1.34 million USDC in profit, bridged the assets through Solana, and converted them into DAI on Ethereum via Relay Protocol to prevent centralized asset freezing.
Attack Transaction: 0xcd801d24…578314
Case & protocol details
Evidence & learning
Sources and on-chain records
- report Report x.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.