Rhea Lend
Last changed 2026-10-10 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 20 → 58. Problems weighed by who is responsible: incidents the subject suffered −6.4, problems around the subject, caused by others −2.4; legitimacy credit long-running +2. Version history →
Why this score
| Every page starts at | 65 |
| Incidents it suffered (e.g. hacks) | -6.4 |
| Problems around it, caused by others | -2.4 |
| Long-running | +2 |
| Sum | 58 |
Score: 58/100 (kept between 0 and 100)
How scoring works →Summary
Rhea Lend is the lending arm of Rhea Finance, a DeFi protocol on NEAR Protocol formed in early 2025 through the merger of Ref Finance and Burrow Finance. In April 2026, Rhea Lend suffered a major exploit in which an attacker drained approximately $18.4 million by exploiting a flaw in the protocol's slippage protection mechanism via a fake-token pool manipulation scheme. Partial recovery of approximately $9–13 million was achieved through voluntary returns and asset freezes, but the incident represents a critical security failure on an audited protocol.
Connected Entities
6 entities · 60 linked investigations- Ethereum→mentioned with→Bitcoin(60%)
- Tether→mentioned with→Bitcoin(60%)
- Rhea Lend→mentioned with→Tether(70%)
- Rhea Lend→mentioned with→Bitcoin(60%)
- Rhea Lend→mentioned with→Ethereum(65%)
- Rhea Lend→mentioned with→Solana(60%)
- Rhea Lend→mentioned with→Rhea Finance(80%)
- Solana→mentioned with→Ethereum(60%)
- Rhea Finance→mentioned with→Ethereum(60%)
- Rhea Finance→mentioned with→Bitcoin(60%)
- + 2 more
Timeline(12 events)
February 2025
Ref Finance and Burrow Finance announce merger to form Rhea Finance on NEAR Protocol
19 February 2025
Trail of Bits completes smart contract audit of Ref Finance DeFi protocol
March 2025
Rhea Finance merger formally announced; $RHEA token introduced as unified governance token
2 April 2025
BlockSec completes audit of Burrow Margin Trading module
5 August 2025
BlockSec completes audit of rNEAR Contract
9 October 2025
Resonance Security completes audit of Liquid Staking Protocol
13 April 2026
Attacker begins two-day preparation: creates 423 intermediary wallets and eight fake token pools on Ref Finance
16 April 2026
Exploit executed: attacker exploits slippage protection flaw in margin trading, draining approximately $7.6 million (initial estimate) from Rhea Lend; CertiK flags the incident; RHEA token price drops approximately 8%
17 April 2026
Additional on-chain activity observed: ~$3.49 million in AAVE USDC V3 tokens moved on Ethereum; attacker returns $3.359 million USDC and $1.564 million NEAR to Rhea Lend contract
18 April 2026
Post-mortem published revising total losses to $18.4 million; Tether freezes $3.291 million USDT in attacker wallet; NEAR Intents freezes additional $1.053 million USDT; Halborn and The Block publish detailed exploit analyses
18 April 2026
Near Intents team states attacker may be identifiable with public social media presence; centralized exchanges notified to assist tracing
19 May 2026
Protocol TVL stands at approximately $120.96 million; compensation framework described as 'in development' with no specifics disclosed; estimated $5.4–9.4 million in losses remain unaccounted for
Decision Log
- slot 455369172 · hash 8UbYnbHumcoTkj6tM7soRRepBuPjwRTmctG9NCczPAJF
- slot 420839288 · hash 36JvVdojUFhqRCsXWFawZW1SGWtBRdV3aj2jjEWjhqAQ
This investigation is cryptographically anchored to the Solana blockchain (2 decisions). 17 of 17 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:11 AM
last updated: 10/10/2026, 6:49:11 PM
5 viewsavoid.net — verified advice for a post-truth world