Refreshed 2h ago· updates every 6h
Arcadia Finance (2025) — Crypto Hack
Not RecoveredJul 15, 2025·
BaseEthereum
Amount Stolen
$3.6M
Victim account assets
Recovered
$0
An exploiter crafted arbitrary swapData in Arcadia Finance's Rebalancer contract to drain a victim account of ~$3.6M; the attack was funded via Tornado Cash.
Summary
An exploiter crafted arbitrary swapData in Arcadia Finance's Rebalancer contract to drain a victim account of ~$3.6M; the attack was funded via Tornado Cash.
How It Was Compromised — Smart Contract Exploit via Arbitrary swapData in Rebalancer contract due to lack of input validation
Smart Contract ExploitArbitrary swapData in Rebalancer contract due to lack of input validation
On July 15, 2025, Arcadia Finance was exploited when an attacker crafted arbitrary swapData in the Rebalancer contract due to a lack of input validation, draining a victim account of approximately $3.6M across Base and Ethereum. The attack was funded via Tornado Cash. Arcadia offered a 10% bounty for return of funds, but no recovery has been reported.
Fund Flow & Laundering Analysis
Exploiter funded attack via Tornado Cash mixer.
Related Incidents
Cetus Protocol
Cetus Protocol (2025) — Smart Contract Exploit on Sui, Ethereum
$220.0M
2025·Partially Recovered
Cork Protocol
Cork Protocol (2025) — Smart Contract Exploit on Ethereum
$12.0M
2025·Funds Unmoved
Resolv Protocol
Resolv Protocol (2026) — Smart Contract Exploit on Ethereum
$13.0M
2026·Funds Laundered
Flooring Protocol
Flooring Protocol (2026) — Smart Contract Exploit on Ethereum
$10.5M
2026·Funds Laundered
Ambient
Ambient (2026) — Smart Contract Exploit on Ethereum
$10.0M
2026·Funds Laundered
ATM
ATM (2026) — Smart Contract Exploit on Ethereum
$10.0M
2026·Funds Laundered