TREE NEWS update: Decentralized exchange Arcus disclosed an accounting bug discovered on Nov. 10 that let a newly created account record balances far above its actual holdings and request withdrawals. About $2.234 million in USDG was withdrawn on-chain before withdrawals were halted, while a further $3 million withdrawal request was blocked by a cross-chain bridge rate limit and later canceled. Arcus said it detected and patched the flaw within an hour and covered the full shortfall from its corporate treasury, with user balances unaffected and trading and withdrawals operating normally.
Arcus discloses $2.23M exploit from accounting bug, fully covered from treasury
AI take
The notable point is not the loss size but the failure mode: an accounting logic error let a fresh account claim balances it never held, which means the exposure came from internal controls rather than an external attack on keys or contracts. That Arcus patched within an hour and absorbed the shortfall from its own treasury kept user balances whole, but the blocked $3 million request owed its containment to a bridge rate limit — a lucky backstop, not a designed one. Whether the patch addresses the root accounting flaw or only this exploit path is the open question.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.
Related News
5h ago
Huawei’s Yu Chengdong: Large Foldables Now Primary Phone for 10 Million Users
5h ago
Aave Executive Reports $39 Million in Liquidations
6h ago
XRP Falls to 89 Cents on Coinbase, Lowest Since November 2024
6h ago
Forward Industries Denies Link to $123M SOL Transfer
6h ago
Crypto Market Sheds $571 Billion in Ten Days as Selloff Deepens
7h ago
Bitcoin Slide Triggers $2.05B in Crypto Liquidations; Binance Nears $800M