Rose Finance Hack

TOTAL LOST $45K
Low Flash Loan Attacks

What happened

Rosa Finance suffers $44,670 USD loss in flash loan attack on Arbitrum.

On January 18th, 2024, Rosa Finance, a decentralized non-custodial liquidity market protocol on Arbitrum, fell victim to a flash loan attack. The attacker exploited the project, stealing various cryptocurrencies including 12,601 DAI, 2,749 USDC, 0.2317 WBTC, 97.12 GMX, 3,873 ARB, and 3,396 PENDLE, amounting to a total loss of $44,670 USD. At the time of this report, the stolen funds remain in the attacker's address.

Attacker Address:

https://arbiscan.io/address/0x54949211…E4d1c8

Malicious Transaction:

https://arbiscan.io/tx/0xd54088b8…a02bf8

Malicious Contract:

https://arbiscan.io/address/0x6858f645…B946e6

Case & protocol details

Classification Borrowing and Lending
Protocol Type Exploit/Flash Loan Attack
Affected asset / contract ROSA
Official Website www.rosafinance.io/
Protocol Twitter/X @rosa_finance

Evidence & learning

Sources and on-chain records

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.