SecurityMedium

Arcus exploit drains $2.2m

An attacker abused a subaccount-transfer bug on Arcus to withdraw $2.2m; a bridge rate limit held back $3m more.

What we know

An on-chain researcher reports a new account inflated its balance and withdrew $2.2m; withdrawals were paused, the bug fixed and the loss covered from treasury. Separately, critics slam Robinhood's chain handling.

What people are posting

Posts on X this story draws on. They are individual users' views and have not been verified by Global Eye 24.

@0xJaehaerys

“withdrew $2.2m. A rate limit on the bridge held back another $3m”

View post →

By the Global Eye 24 desk, with AI assistance. Updated as the story develops. Spot an error? Write to corrections@globaleye24.com.