Renegade Fi was exploited through a proxy contract vulnerability, resulting in a loss of approximately $209k.

Techub News reports that, according to AMBCrypto, Renegade Fi was recently exploited through a proxy contract vulnerability, resulting in a loss of approximately $209k. The attacker exploited an unprotected initializer in the Dark Pool contract on the Arbitrum chain to gain privileged delegatecall access, stealing 27 types of ERC-20 assets including WBTC, PENDLE, and LDO. Security firm Blockaid quickly flagged suspicious activity and urged users to revoke permissions to limit the spread of risk. The incident exposed deployment-level weaknesses in proxy architecture, raising concerns about the security of shared implementation address contracts. OWASP has recently listed proxy and upgradeability vulnerabilities among the top ten smart contract security risks for 2026.