Denaria Hack

On 5 April 2026 an attacker drained about 165,618 USDC from Denaria Finance, a perpetual futures DEX on Linea that prices trades with a virtual AMM combined with oracle prices. The attack ran in a single transaction funded by an Aave flash loan.

Verichains traced the root cause to two bugs in Denaria's LP accounting. Trade execution rounded additions down but subtractions up (divCeil), so each trade eroded an LP's accounting matrix by about 1 wei more than exact math. Once that drift made the LP balance formula evaluate to -1, an unchecked int256 to uint256 cast in internalPerpLogic.sol wrapped it to the maximum uint256 value, which was then clamped to the pool's total assets. Olympix gives the same root cause. The recently added Chainlink Data Streams feed for BTC/USD did not prevent the attack because the flaw was in internal accounting, not the price feed.

Denaria paused all user interfaces, began investigating with the Linea team and auditors, and said users with open trades or USDC in the Vault at the time would be refunded under a procedure still being finalized. It sent the attacker an on-chain offer of a 15% bounty (about $25,600) if the remaining roughly $140K was returned within 48 hours.