The decentralized finance (DeFi) ecosystem has been rocked by yet another exploit, with Arcadia Finance losing approximately $2.5 million in cryptocurrency.
The breach, reported by blockchain security firm PeckShieldAlert earlier today, involved unauthorized transactions executed via a vulnerability in the protocol’s Rebalancer feature. The attackers swiftly converted the stolen funds into 840 ETH and bridged them from the Base network to Ethereum, a move reminiscent of a prior $455,000 exploit on July 10, 2023.
The exploit was detailed through a BaseScan transaction, revealing a direct transfer to the attacker’s address. PeckShield’s analysis suggests the breach stemmed from a lack of untrusted input validation and inadequate reentrancy protection, allowing instant liquidations to bypass internal vault health checks. This marks a troubling recurrence of security flaws in DeFi protocols, echoing a similar $1.6 million loss reported by the Economic Times just yesterday, July 14, 2025.
Arcadia Finance responded by urging users to revoke all asset manager permissions and provided step-by-step guides to disconnect affected Rebalancers. However, the incident has sparked debate over the efficacy of smart contract audits, a critical safeguard that failed to prevent this breach. Despite Arcadia’s non-custodial, composable cross-margin accounts attracting significant total value locked (TVL), the protocol’s TVL plummeted 76% in a prior incident, signaling waning user trust.
PeckShield, a leader in blockchain security with a strong track record in Ethereum’s Bounty Program and partnerships with major DeFi players, continues to monitor the situation. The exploit underscores the urgent need for robust security measures in DeFi, as protocols scale ambitiously yet struggle with vulnerabilities. Investors and users are advised to exercise caution, while the industry awaits further updates from Arcadia Finance on mitigation efforts and potential recovery.
Disclaimer: This article is for informational purposes only and does not constitute financial advice. CoinCryptoNewz is not responsible for any losses incurred. Readers should do their own research before making financial decisions.
