Rho Markets
Summary
Rho Markets is a DeFi lending protocol (Compound V2 fork) deployed on Scroll, an Ethereum Layer 2 ZK-rollup network. On July 19, 2024, a misconfigured price oracle allowed an MEV bot to extract approximately $7.6 million in user funds; the operator voluntarily returned all funds after demanding a public acknowledgment of the misconfiguration. Despite full fund recovery, the protocol's TVL collapsed to near-zero and remains essentially inactive as of 2026.
Connected Entities
1 entitiesTimeline(8 events)
2022-06-08
Rho Markets founded; protocol development begins on Scroll ecosystem.
2024-07-19
Oracle misconfiguration exploit detected: MEV bot drains approximately $7.5-7.6 million in USDC, USDT, and wstETH from Rho Markets pools on Scroll within minutes.
2024-07-19
Rho Markets halts protocol operations. Scroll team temporarily pauses L2 chain finalization to assess scope of breach.
2024-07-19
MEV bot operator sends on-chain message indicating willingness to return all funds, contingent on Rho Markets publicly admitting oracle misconfiguration error.
2024-07-19
Scroll resumes chain finalization after determining exploit was confined to Rho Markets application layer.
2024-07-19
Rho Markets complies with MEV operator demands; all 2,202.85 ETH (approximately $7.6 million) returned to protocol multi-sig Safe wallet. Team announces no user funds permanently lost.
2024-07-19
Dedaub, Olympix, and other security firms publish post-mortems confirming ETH oracle was misconfigured to use the WBTC/USD price feed at deployment time.
2026-05-27
Rho Markets TVL stands at approximately $8 with $0 in active loans; protocol is effectively inactive with no announced relaunch.
Decision Log
- hash: 9ETtyceJ3QB12BQGAXGW2P4wDuYoCqwUE2CkkRrNZNEt
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:30 AM
last updated: 5/28/2026, 3:44:08 AM
avoid.net — verified advice for a post-truth world