Skip to main content
Sign in
Arcadia Finance v11 decision on this page

Audit log

Every state-changing event for Arcadia Finance v1: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

  1. #1publishby system:backfill
    2026-05-30 12:11:45Z
    Score: ?? (no score change)
    anchoranchored
    chain
    mainnet-betaslot 423,153,877
    sig
    4qtUX7QKekdU…7Vn76P3nexplorer ↗
    hash
    9R99vYCRzzfs…yGCm3Kzwsha256 → base58
    verifying row…full verify ↗
    canonical bytes (11814 B) ▸
    {"actor":"system:backfill","investigation_id":"cba3a26a-3789-4b6c-9429-ca7d9dfd4a18","kind":"publish","page_slug":"arcadia-v1","published_at":"2026-05-30T12:11:45.495Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Arcadia Finance v1","sections":[{"content":"","heading":"","severity":"low","sources":[{"credibility":1,"name":"Arcadia Finance Security & Audits documentation","type":"official","url":"https://docs.arcadia.finance/security-and-risk/audits"},{"credibility":1,"name":"Introducing Arcadia V2 — Arcadia Finance on Medium","type":"official","url":"https://arcadiafinance.medium.com/introducing-arcadia-v2-79ee345af20b"},{"credibility":2,"name":"Arcadia Finance DApp listing — Coinbase","type":"other","url":"https://www.coinbase.com/web3/dapps/arcadia"}]},{"content":"","heading":"","severity":"critical","sources":[{"credibility":1,"name":"Arcadia Finance Post Mortem — Medium","type":"official","url":"https://arcadiafinance.medium.com/post-mortem-72e9d24a79b0"},{"credibility":2,"name":"DeFi protocol Arcadia Finance hacked on Ethereum and Optimism for $455K — CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/arcadia-finance-hacked-on-ethereum-and-optimism-for-455k"},{"credibility":2,"name":"DeFi Platform Arcadia Finance Hacked for $455K — Crypto Daily","type":"news_article","url":"https://cryptodaily.co.uk/2023/07/defi-platform-arcadia-finance-hacked-for-455k"},{"credibility":2,"name":"DeFi Protocol Hack Drains $455K from Arcadia Finance — Crypto Briefing","type":"news_article","url":"https://cryptobriefing.com/defi-protocol-hack-drains-455k/"}]},{"content":"","heading":"","severity":"critical","sources":[{"credibility":1,"name":"Arcadia Finance Post Mortem — Medium","type":"official","url":"https://arcadiafinance.medium.com/post-mortem-72e9d24a79b0"},{"credibility":2,"name":"Hacker exploits vulnerability, drains $455,000 from DeFi protocol Arcadia Finance — Cryptopolitan","type":"news_article","url":"https://www.cryptopolitan.com/hacker-exploits-vulnerability-drains-455000-from-defi-protocol-arcadia-finance"},{"credibility":2,"name":"Arcadia Finance says exploiter contacted after $450K hack — Protos","type":"news_article","url":"https://protos.com/arcadia-finance-says-exploiter-contacted-after-450k-hack/"},{"credibility":2,"name":"Arcadia Finance Hit by $455K Exploit on Both Ethereum, Optimism Networks — CryptoPotato","type":"news_article","url":"https://cryptopotato.com/arcadia-finance-hit-by-455k-exploit-on-both-ethereum-optimism-networks/"}]},{"content":"","heading":"","severity":"high","sources":[{"credibility":1,"name":"Arcadia Finance Post Mortem — Medium","type":"official","url":"https://arcadiafinance.medium.com/post-mortem-72e9d24a79b0"},{"credibility":2,"name":"Arcadia Finance hacker used reentrancy exploit, team demands return of funds — CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/arcadia-finance-hacker-used-reentrancy-exploit-team-demands-return-of-funds"},{"credibility":2,"name":"Arcadia Finance hits $3.5m hacker with ultimatum: pay up or get hunted — DL News","type":"news_article","url":"https://www.dlnews.com/articles/defi/coinbased-backed-arcadia-finance-offers-hacker-bounty/"},{"credibility":2,"name":"Arcadia Finance says exploiter contacted after $450K hack — Protos","type":"news_article","url":"https://protos.com/arcadia-finance-says-exploiter-contacted-after-450k-hack/"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":2,"name":"Latest Crypto News: Hacker Drains $455K From Arcadia's Ethereum, Optimism Vaults; ZachXBT's Research Cited In Canadian NFT Rug Pull Class-Action Lawsuit — Outlook Business","type":"news_article","url":"https://www.outlookbusiness.com/news/latest-crypto-news-hacker-drains-455k-from-arcadia-s-ethereum-optimism-vaults-zachxbt-s-research-cited-in-canadian-nft-rug-pull-class-action-lawsuit-news-301762"},{"credibility":2,"name":"ZachXBT — Mirror.xyz (investigator's publication hub)","type":"other","url":"https://zachxbt.mirror.xyz/"}]},{"content":"","heading":"","severity":"critical","sources":[{"credibility":1,"name":"Arcadia Finance Security & Audits documentation","type":"official","url":"https://docs.arcadia.finance/security-and-risk/audits"},{"credibility":2,"name":"ArcadiaFi — Rekt News (July 2025 exploit analysis)","type":"research","url":"https://rekt.news/arcadiafi-rekt"},{"credibility":2,"name":"Arcadia Finance Suffers $2.5M Exploit on Base; Funds Converted to WETH — CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/arcadia-finance-exploit-2-5m-crypto-theft"},{"credibility":2,"name":"Hackers Drain $2.5M from Arcadia Finance on Base Blockchain — CryptoNews","type":"news_article","url":"https://cryptonews.com/news/hackers-drain-2-5m-from-arcadia-finance-on-base-blockchain-heres-what-happened/"}]},{"content":"","heading":"","severity":"high","sources":[{"credibility":1,"name":"Arcadia Finance Post Mortem — Medium","type":"official","url":"https://arcadiafinance.medium.com/post-mortem-72e9d24a79b0"},{"credibility":1,"name":"Arcadia Finance Security & Audits documentation","type":"official","url":"https://docs.arcadia.finance/security-and-risk/audits"},{"credibility":2,"name":"ArcadiaFi — Rekt News","type":"research","url":"https://rekt.news/arcadiafi-rekt"},{"credibility":2,"name":"Arcadia Finance Hack Analysis — ImmuneByes","type":"research","url":"https://immunebytes.com/blog/arcadia-finance-exploit-detailed-hack-analysis/"}]}],"sources_used":[{"credibility":1,"name":"Arcadia Finance Post Mortem — Medium","type":"official","url":"https://arcadiafinance.medium.com/post-mortem-72e9d24a79b0"},{"credibility":1,"name":"Arcadia Finance Security & Audits documentation","type":"official","url":"https://docs.arcadia.finance/security-and-risk/audits"},{"credibility":2,"name":"DeFi protocol Arcadia Finance hacked on Ethereum and Optimism for $455K — CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/arcadia-finance-hacked-on-ethereum-and-optimism-for-455k"},{"credibility":2,"name":"Arcadia Finance hacker used reentrancy exploit, team demands return of funds — CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/arcadia-finance-hacker-used-reentrancy-exploit-team-demands-return-of-funds"},{"credibility":2,"name":"Arcadia Finance Suffers $2.5M Exploit on Base — CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/arcadia-finance-exploit-2-5m-crypto-theft"},{"credibility":2,"name":"Arcadia Finance says exploiter contacted after $450K hack — Protos","type":"news_article","url":"https://protos.com/arcadia-finance-says-exploiter-contacted-after-450k-hack/"},{"credibility":2,"name":"Arcadia Finance hits $3.5m hacker with ultimatum — DL News","type":"news_article","url":"https://www.dlnews.com/articles/defi/coinbased-backed-arcadia-finance-offers-hacker-bounty/"},{"credibility":2,"name":"DeFi Platform Arcadia Finance Hacked for $455K — Crypto Daily","type":"news_article","url":"https://cryptodaily.co.uk/2023/07/defi-platform-arcadia-finance-hacked-for-455k"},{"credibility":2,"name":"DeFi Protocol Hack Drains $455K from Arcadia Finance — Crypto Briefing","type":"news_article","url":"https://cryptobriefing.com/defi-protocol-hack-drains-455k/"},{"credibility":2,"name":"Arcadia Finance Hit by $455K Exploit on Both Ethereum, Optimism Networks — CryptoPotato","type":"news_article","url":"https://cryptopotato.com/arcadia-finance-hit-by-455k-exploit-on-both-ethereum-optimism-networks/"},{"credibility":2,"name":"Hacker drains $455K from Arcadia's Ethereum, Optimism Vaults; ZachXBT's Research Cited — Outlook Business","type":"news_article","url":"https://www.outlookbusiness.com/news/latest-crypto-news-hacker-drains-455k-from-arcadia-s-ethereum-optimism-vaults-zachxbt-s-research-cited-in-canadian-nft-rug-pull-class-action-lawsuit-news-301762"},{"credibility":2,"name":"ArcadiaFi — Rekt News","type":"research","url":"https://rekt.news/arcadiafi-rekt"},{"credibility":2,"name":"Hackers Drain $2.5M from Arcadia Finance on Base Blockchain — CryptoNews","type":"news_article","url":"https://cryptonews.com/news/hackers-drain-2-5m-from-arcadia-finance-on-base-blockchain-heres-what-happened/"},{"credibility":2,"name":"DeFi Platform Arcadia Finance Falls Victim to $455K Hack — CryptoNews","type":"news_article","url":"https://cryptonews.com/news/defi-platform-arcadia-finance-falls-victim-455k-hack-ethereum-optimism/"},{"credibility":2,"name":"ZachXBT — Mirror.xyz","type":"other","url":"https://zachxbt.mirror.xyz/"}],"summary":"Arcadia Finance v1 was a decentralized margin lending protocol deployed on Ethereum and Optimism that suffered a critical reentrancy exploit on July 10, 2023, resulting in the loss of approximately $459,030 across both chains. The attack exploited a missing reentrancy guard in the vault liquidation function combined with absent untrusted-input validation, allowing the attacker to bypass collateral health checks and drain darcWETH and darcUSDC vaults. The stolen funds on Optimism were largely laundered through Tornado Cash; the protocol subsequently paused all contracts and issued a bounty ultimatum to the attacker that went unanswered.","timeline":[{"date":"2022-10-01","event":"Nethermind begins audit of complete Arcadia Finance v1 codebase (Q4 2022 – Q1 2023).","source":"Arcadia Finance Audits Documentation","source_url":"https://docs.arcadia.finance/security-and-risk/audits"},{"date":"2023-07-10","event":"Attacker exploits reentrancy vulnerability in Arcadia Finance v1 vault liquidation function on Ethereum and Optimism. PeckShield issues first public alert. Total losses: $459,030 ($123,758 on Ethereum; $335,271 on Optimism). Attacker addresses: Optimism 0xD3641C912a6A4c30338787E3C464420b561A9467; Ethereum 0x5C75e94dD0Ab9c10BFd1B8073DafEF031D3c050d.","source":"Arcadia Finance Post Mortem / CoinTelegraph","source_url":"https://arcadiafinance.medium.com/post-mortem-72e9d24a79b0"},{"date":"2023-07-10","event":"Arcadia Finance team pauses all liquidity pool contracts, sets interest rates to zero, and engages BlockSec, Hexagate, and PeckShield for investigation. TVL falls 77% from $605K to $140K.","source":"Arcadia Finance Post Mortem","source_url":"https://arcadiafinance.medium.com/post-mortem-72e9d24a79b0"},{"date":"2023-07-10","event":"Optimism attacker routes approximately 179 ETH through Tornado Cash. Ethereum attacker retains funds in wallet. Team contacts law enforcement and sends on-chain messages to attacker addresses.","source":"Protos / Crypto Daily","source_url":"https://protos.com/arcadia-finance-says-exploiter-contacted-after-450k-hack/"},{"date":"2023-07-11","event":"Arcadia Finance issues 24-hour on-chain ultimatum: return 90% of stolen funds and keep 10% as white-hat bounty with no legal pursuit, or face a 10% public bounty for information leading to identification and arrest. Attacker does not respond.","source":"DL News / CoinTelegraph","source_url":"https://www.dlnews.com/articles/defi/coinbased-backed-arcadia-finance-offers-hacker-bounty/"},{"date":"2025-07-14","event":"Attacker funds fresh wallet via Tornado Cash on Ethereum at 10:58 PM UTC in preparation for a new exploit targeting Arcadia Finance v2 Rebalancer contract on Base.","source":"Rekt News","source_url":"https://rekt.news/arcadiafi-rekt"},{"date":"2025-07-15","event":"Arcadia Finance v2 Rebalancer contract exploited on Base for approximately $2.5M (total later estimated at $3.6M across two attack waves). Attacker bridges 840 ETH to Ethereum mainnet via Across Protocol. AAA token drops 46%. Team offers 10% white-hat bounty; attacker does not comply.","source":"Rekt News / CoinTelegraph","source_url":"https://cointelegraph.com/news/arcadia-finance-exploit-2-5m-crypto-theft"}]},"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision d8f3d655-0331-46f4-b776-311172562eb0
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine — python -m src.verify_decision <event_id>.