Attackers managed to withdraw funds from Ethereum (darcWETH) and Optimism (darcUSDC) vaults. PeckShield clarified: the code allegedly lacked a mechanism for cross-checking unconfirmed login data.
Arcadia Finance confirmed the hack two hours after the PeckShield report and suspended operations to prevent further leaks. The company assured that it has begun an investigation into the incident.
The hackers have already been able to transfer most of the stolen funds – about 180 ethers – to Tornado Cash.
Earlier, ImmuneFi reported that in the second quarter of 2023, the number of cryptoproject attacks increased by 65.3% compared to the same period in 2022. PeckShield previously wrote that the Multichain interconnect platform may have been hacked to the tune of more than $120 million – analysts have recorded strong capital outflows from the protocol.