Arcus perp DEX hit by $2.23M exploit
Arcus, a perpetuals exchange built by the team behind dYdX, was exploited for about $2.23M through a fake-balance bug. Users are reportedly unaffected and the bug is fixed.
What we know
A crypto commentator reports the exploit abused a bug that let fake balances enable real withdrawals, with the team covering losses and fixing the bug (unconfirmed by the team in these posts). Another trader notes no users lost money and a rate limit blocked a further $3M, but points to a history of bugs at the team going back to 2021.
How the story developed
Arcus, a perpetuals exchange built by the team behind dYdX, was exploited for about $2.23M through a fake-balance bug. Users are reportedly unaffected and the bug is fixed.
The dYdX Labs x Robinhood Chain DEX Arcus lost about $2.23M on Nov 10 due to a transfer accounting flaw, not an oracle or key compromise, according to an on-chain tracer.
What people are posting
Posts on X this story draws on. They are individual users' views and have not been verified by Global Eye 24.
“Fake Balance allowing real withdrawal”
View post →“the rate limit blocked another $3M”
View post →By the Global Eye 24 desk, with AI assistance. Updated as the story develops. Spot an error? Write to corrections@globaleye24.com.