What happened
Quick Summary
Rosa Finance suffers $44,670 USD loss in flash loan attack on Arbitrum.
Details of the Exploit
On January 18th, 2024, Rosa Finance, a decentralized non-custodial liquidity market protocol on Arbitrum, fell victim to a flash loan attack. The attacker exploited the project, stealing various cryptocurrencies including 12,601 DAI, 2,749 USDC, 0.2317 WBTC, 97.12 GMX, 3,873 ARB, and 3,396 PENDLE, amounting to a total loss of $44,670 USD. At the time of this report, the stolen funds remain in the attacker's address.
Block Data Reference
Attacker Address:
Malicious Transaction:
Malicious Contract:
Protocol details
Classification
Borrowing and Lending
Protocol Type
Exploit/Flash Loan Attack
Affected asset / contract
ROSA
Protocol links
Website
@rosa_finance
Evidence
- report @rosa_finance incident report twitter.com
- analysis Web Archive archive.ph
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
