{"id":51104,"date":"2023-07-10T08:23:01","date_gmt":"2023-07-10T08:23:01","guid":{"rendered":"https:\/\/lydian.io\/?p=51104"},"modified":"2023-07-10T08:23:05","modified_gmt":"2023-07-10T08:23:05","slug":"defi-protocol-arcadia-finance-has-hacked-ethereum-and-optimism-for-455000","status":"publish","type":"post","link":"https:\/\/lydian.io\/defi-protocol-arcadia-finance-has-hacked-ethereum-and-optimism-for-455000\/","title":{"rendered":"DeFi protocol Arcadia Finance has hacked Ethereum and Optimism for $455,000","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
<\/p>\n
A hacker has drained about $455,000 from non-custodial decentralized finance (DeFi) protocol Arcadia Finance by exploiting a code vulnerability.<\/p>\n
Blockchain investigators PeckShield alarmed<\/a> in regards to the Arcadia Finance hack, citing \"lack of untrusted enter validation\" because the trigger. The code allegedly lacked a validation mechanism to cross-check unverified enter. This loophole allowed the hacker to collectively withdraw roughly $455,000 value of funds from Ethereum (darcWETH) and Optimism (darcUSDC) vaults.<\/p>\n Arcadia Finance code didn't require validation of untrusted enter. Supply: PeckShield<\/p>\n Arcadia Finance has not but responded to Cointelegraph's request for remark.<\/p>\n Arcadia Finance confirmed the hack two hours after PeckShield hinted after which paused the contracts to forestall additional lack of funds. <\/p>\n We're conscious of a possible exploit in our protocol. \u2014 Arcadia Finance (@ArcadiaFi) July 10, 2023<\/a><\/p>\n As investigations proceed, Arcadia's code reveals one other vulnerability that might show catastrophic to the protocol if exploited. After<\/a> to PeckShield:<\/p>\n \"Furthermore, it lacks the re-entry safety that permits bypassing the vault's inside sanity test on immediate liquidation.\"<\/p>\n
We've got paused the contracts and are presently investigating the basis trigger with safety consultants. Extra info will observe as quickly because it turns into obtainable.<\/p>\n