Slippage vulnerability + deleting 55 intermediate accounts—so all of it is fully exposed on-chain, and you think you can stay hidden?

View Original
MeNews
Rhea Finance discloses attack cause: slippage protection logic flaw led to a loss of $18.4 million
April 18th, NEAR ecosystem lending platform RHEA Finance was hacked, resulting in the theft of approximately $18.4 million.
The attacker set up fake token pools on Ref Finance and injected liquidity, exploiting slippage vulnerabilities to direct borrowed debt tokens to controlled pools, leading to large-scale liquidations and depletion of reserves.
To conceal their identity, they deleted 55 intermediary accounts.
Currently, $3.36M USDC and 156,400 NEAR have been recovered, and $4.34 million USDT (Tether $1.56M, NEAR Intents $3.29M) have been frozen.
The protocol has been paused, and efforts are underway in cooperation with exchanges and law enforcement.
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pinned