{"id":81506,"date":"2023-07-10T12:44:13","date_gmt":"2023-07-10T09:44:13","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=81506"},"modified":"2025-09-11T23:18:23","modified_gmt":"2025-09-11T20:18:23","slug":"defi-protocol-arcadia-finance-hacked-for-455000","status":"publish","type":"post","link":"https:\/\/u1f987.com\/en\/defi-protocol-arcadia-finance-hacked-for-455000\/","title":{"rendered":"DeFi protocol Arcadia Finance hacked for $455,000"},"content":{"rendered":"<p>PeckShield analysts reported a hack of the Arcadia Finance DeFi protocol, through which the hacker managed to withdraw digital assets totaling about $455,000.<\/p>\n<figure class=\\\"wp-block-image size-full\\\"><img decoding=\\\"async\\\" src=\\\"https:\/\/u1f987.com\/wp-content\/uploads\/Snimok-ekrana-2023-07-10-v-12.08.31.webp\\\" alt=\\\"Snimok-ekrana-2023-07-10-v-12.08.31\\\" class=\\\"wp-image-211202\\\"\/><figcaption class=\\\"wp-element-caption\\\">Data: <a href=\\\"https:\/\/twitter.com\/PeckShieldAlert\/status\/1678248292327763968\\\">Twitter<\/a>.<\/figcaption><\/figure>\n<p>According to experts, the exploit was possible due to \\&#8221;a lack of robust input validation.\\&#8221; The code allegedly lacked a cross-check mechanism for unverified inputs.<\/p>\n<p>The attack affected the Ethereum pools (darcWETH) and Optimism (darcUSDC).<\/p>\n<blockquote class=\\\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\\\">\n<p>\\&#8221;Moreover, [the protocol] lacks protection against reentrancy, which allows the instant-liquidation function to bypass the internal viability check of the storage,\\&#8221; PeckShield added.<\/p>\n<\/blockquote>\n<p>The Arcadia team confirmed the breach and, a few hours after the flaw was detected, halted contract executions.<\/p>\n<figure class=\\\"wp-block-image size-full\\\"><img decoding=\\\"async\\\" src=\\\"https:\/\/u1f987.com\/wp-content\/uploads\/Snimok-ekrana-2023-07-10-v-12.08.50.webp\\\" alt=\\\"Snimok-ekrana-2023-07-10-v-12.08.50\\\" class=\\\"wp-image-211203\\\"\/><figcaption class=\\\"wp-element-caption\\\">Data: <a href=\\\"https:\/\/twitter.com\/ArcadiaFi\/status\/1678285634727706625?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E1678285634727706625%7Ctwgr%5E481b6444a3814a71fd7c7ff297f57aa6fde0025d%7Ctwcon%5Es1_&#038;ref_url=https%3A%2F%2Fcointelegraph.com%2Fnews%2Farcadia-finance-hacked-on-ethereum-and-optimism-for-455k\\\">Twitter<\/a>.<\/figcaption><\/figure>\n<p>Most of the stolen funds were concentrated in Optimism \u2014 <a href=\\\"https:\/\/optimistic.etherscan.io\/tx\/0xca7c1a0fde444e1a68a8c2b8ae3fb76ec384d1f7ae9a50d26f8bfdd37c7a0afe\\\">180 ETH<\/a> (~$336,000 at the time of writing), which have already been sent to the crypto mixer <a href=\"https:\/\/u1f987.com\/en\/news\/what-is-the-tornado-cash-mixer-and-why-was-it-sanctioned\">Tornado Cash<\/a>. The assets withdrawn from the Ethereum pools remain at the hacker&#8217;s address <a href=\\\"https:\/\/etherscan.io\/tx\/0xefc4ac015069fdf9946997be0459db44c0491221159220be782454c32ec2d651\\\">address<\/a>.<\/p>\n<p>In July, the cross-chain protocol Multichain <a href=\"https:\/\/u1f987.com\/en\/news\/multichain-suspends-operations-amid-possible-hack\">suspended<\/a> operations due to a potential multi-million-dollar hack.<\/p>\n<p>Earlier, Beosin experts said that in the first half of 2023 the digital asset sector <a href=\"https:\/\/u1f987.com\/en\/news\/report-crypto-industry-losses-from-hacks-and-scams-total-655-million-in-six-months\">lost about $655.6 million<\/a> due to hacks, frauds and <span data-descr=\\\"practice of inflating the value of a token created in a liquidity pool followed by a sudden withdrawal of funds\\\" class=\\\"old_tooltip\\\">rug pull<\/span>.<\/p>\n<p>According to Immunefi analysts, the number of crypto-project hacks <a href=\"https:\/\/u1f987.com\/en\/news\/crypto-project-attacks-rise-63-in-q2-2023-immunefi-reports\">rose by 63%<\/a>. In the second quarter of 2023, such incidents reached 81.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>PeckShield analysts reported the hack of the Arcadia Finance DeFi protocol, through which the hacker managed to withdraw digital assets totalling about $455,000.<\/p>\n","protected":false},"author":1,"featured_media":81507,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[44],"class_list":["post-81506","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-cybercrime"],"aioseo_notices":[],"amp_enabled":true,"views":"44","promo_type":"1","layout_type":"1","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/81506","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/comments?post=81506"}],"version-history":[{"count":1,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/81506\/revisions"}],"predecessor-version":[{"id":81508,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/81506\/revisions\/81508"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media\/81507"}],"wp:attachment":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media?parent=81506"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/categories?post=81506"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/tags?post=81506"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}