DeFi協議Rhea Finance遭攻擊！駭客捲走18.4M鎂，Tether協助凍結

NEAR Ecosystem Protocol Rhea Finance suffers Oracle manipulation attack, with losses reaching $18.4 million. With the help of investigator ZachXBT, Tether has frozen some funds, currently recovering about 42% of the losses.

Built on NEAR Protocol, the largest decentralized finance (DeFi) protocol, Rhea Finance, was recently targeted by an Oracle manipulation attack. According to The Block, a post-mortem analysis revealed that the actual loss amounted to $18.4 million, more than double the initial estimate.

Attack Method: Fake Tokens Manipulate Oracle Prices

According to investigations, the attacker deployed fake token contracts to manipulate Rhea Finance’s Oracle prices, causing the protocol to misjudge collateral values and extract liquidity. After the incident, the Rhea Finance team immediately notified users and paused relevant functions to respond urgently.

ZachXBT Warns, Tether Frozen $4.34 Million USDT

On-chain investigator ZachXBT quickly issued an alert after the incident, tracking the flow of attack funds and prompting Tether to take action. Tether CEO Paolo Ardoino publicly thanked ZachXBT for the timely report, confirming that approximately $4.34 million USDT (another report states $3.29 million USDT) related to the attacker has been frozen, preventing further transfer of stolen funds.

Attacker Returns Part of the Funds

Notably, the attacker voluntarily returned about $3.36 million USDC and 1.56 million NEAR (totaling approximately $3.5 million). Combined with the frozen USDT, the total recovered or frozen funds exceed $7.8 million, about 42% of the total loss.

Largest Security Incident in NEAR DeFi Ecosystem

Rhea Finance is the largest DeFi protocol on NEAR Protocol. This incident is one of the most severe security breaches in the NEAR ecosystem to date and highlights the critical importance of Oracle security for DeFi protocols. The event also sparked widespread discussion about Oracle design flaws in DeFi protocols, with RHEA token price dropping over 8% after the incident.

• This article is reprinted with permission from: 《Chain News》
• Original title: 《Rhea Finance suffers $18.4 million loss from Oracle attack: ZachXBT warns, Tether freezes $4.34 million USDT, attacker returns part of the funds》
• Original author: Elponcrab