Rhea Finance disclosed the reason for the attack, a flaw in the slippage protection logic led to a loss of 18.4 million dollars
According to RHEA Finance's official disclosure, the NEAR ecosystem lending protocol RHEA Finance (formerly known as Burrow Finance) experienced a margin trading feature hack, resulting in a loss of approximately $18.4 million.
The attacker began laying the groundwork several days prior by creating multiple fake token pools on Ref Finance and injecting liquidity, constructing a malicious exchange route that exploited a vulnerability in the protocol's slippage protection mechanism—this mechanism did not account for the scenario where intermediate tokens were reused when calculating the minimum output of multi-step exchanges—leading to the borrowed debt tokens being directed into fake token pools controlled by the attacker, triggering a large-scale forced liquidation that ultimately drained the protocol's reserve pool. During the attack, the attacker deleted a total of 55 intermediate accounts to cover their tracks. Currently, the attacker has returned approximately 3.359 million USDC and 1.564 million NEAR to the RHEA lending contract, while another 4.34 million USDT has been frozen (of which Tether froze 3.291 million and NEAR Intents froze 1.053 million). The protocol contract has been suspended, and the team is collaborating with centralized exchanges for joint tracking and has notified relevant law enforcement agencies.
You may also like

The organization has accessed the prediction market, but is stuck at the third stage

Head of crypto VC collective shrinks: a16z crypto fund management scale plummets by 40%, Multicoin cut in half

Arthur Hayes New Post: It's "No Trade" Time Now

Claude Opus 4.7 Review: Is It Worthy of the Title of Strongest Model?

DWF In-Depth Report: AI Outperforms Humans in Yield Farming Optimization in DeFi, But Complex Transactions Still Lag Behind 5x

The financial tricks of the crypto giant Kraken

When proactive market makers start to take initiative

Massive Whale Movement: Unstaking $84.96 Million in HYPE Tokens
Key Takeaways A crypto whale, known as TechnoRevenant, has unstaked approximately $84.96 million in HYPE tokens. The tokens…

ListaDAO Addresses Third-Party Contract Vulnerability Concerns
Key Takeaways GoPlus Security revealed a vulnerability in a contract resembling those of ListaDAO. ListaDAO confirmed that their…

Security Risks of Fake Ledger Nano S+ Devices Emerging Through Chinese E-Commerce
Key Takeaways Counterfeit Ledger Nano S+ devices are being sold on Chinese e-commerce platforms, posing significant risks to…

Wave of Cyber Attacks Hits DeFi Protocols Post-Drift Hack
Key Takeaways A significant $280 million attack on Drift Protocol set off a chain of security breaches across…

Tom Lee Says ‘Mini Crypto Winter’ Is Over, Sees Ether Above $60K
Key Takeaways: Tom Lee predicts Ether’s resurgence, projecting it to surpass $60,000 in the coming years. Bitmine suffered…

French Government Tackles Rising Crypto Safety Concerns
Key Takeaways: France is intensifying measures to counter the surge in crypto kidnappings and wrench attacks. Since early…

Europe’s Bitcoin Treasury Playbook Unlikely to Mirror US Strategy: PBW 2026
Key Takeaways: European firms are adapting unique Bitcoin treasury strategies due to distinct financial regulations and market dynamics…

Circle Confronts Lawsuit Over $280M Drift Protocol Hack
Key Takeaways: Circle faces a lawsuit for allegedly aiding in the transfer of $230 million in stolen USDC.…

Bitcoin Faces ‘Near-Term Selling Pressure’ Following Surge to $76K: CryptoQuant
Key Takeaways: Bitcoin reaches a multi-month high of $76,000, prompting increased deposits to exchanges. CryptoQuant identifies a peak…

Ethereum Foundation Unveils North Korean Infiltration in Web3
Key Takeaways: The Ethereum Foundation’s ETH Rangers program exposed 100 North Korean operatives infiltrating Web3 companies. The Ketman…

Crypto in Sustained Winter as CEX Volumes Drop 39% in Q1
Key Takeaways: Centralized crypto exchange trading volume fell by 39% in Q1 2026 to $2.7 trillion. March saw…




