logo

Rhea Finance disclosed the reason for the attack, a flaw in the slippage protection logic led to a loss of 18.4 million dollars

By: rootdata|2026/04/18 08:42:01
0
Share
copy

According to RHEA Finance's official disclosure, the NEAR ecosystem lending protocol RHEA Finance (formerly known as Burrow Finance) experienced a margin trading feature hack, resulting in a loss of approximately $18.4 million.

The attacker began laying the groundwork several days prior by creating multiple fake token pools on Ref Finance and injecting liquidity, constructing a malicious exchange route that exploited a vulnerability in the protocol's slippage protection mechanism—this mechanism did not account for the scenario where intermediate tokens were reused when calculating the minimum output of multi-step exchanges—leading to the borrowed debt tokens being directed into fake token pools controlled by the attacker, triggering a large-scale forced liquidation that ultimately drained the protocol's reserve pool. During the attack, the attacker deleted a total of 55 intermediate accounts to cover their tracks. Currently, the attacker has returned approximately 3.359 million USDC and 1.564 million NEAR to the RHEA lending contract, while another 4.34 million USDT has been frozen (of which Tether froze 3.291 million and NEAR Intents froze 1.053 million). The protocol contract has been suspended, and the team is collaborating with centralized exchanges for joint tracking and has notified relevant law enforcement agencies.

-- Price

--

You may also like

How to balance risk and return in DeFi yields?

Have these yields ever been reasonable? Have we ever received the compensation we deserve for the risks taken in DeFi, and where should the future spreads be set?

Tom Lee's Ethereum Thesis: Why the Man Who Called the Last Cycle Is Doubling Down on Bitmine

Tom Lee is emerging as one of Ethereum’s most influential supporters. From Fundstrat to Bitmine, his Ethereum thesis combines staking yield, treasury accumulation, and long-term network value. Here is why “Tom Lee Ethereum” has become one of crypto’s most watched narratives.

Naval personally takes the stage: The historic collision between ordinary people and venture capital

Naval personally stepped in as the chairman of the USVC Investment Committee. This SEC-registered fund launched by AngelList attempts to bring top private tech assets like OpenAI, Anthropic, and xAI to the general public with a $500 entry threshold. It is not just a new fund, but a structural experi...

a16z Crypto: 9 Charts to Understand the Evolution Trends of Stablecoins

Stablecoins are evolving from trading tools into universal payment infrastructure, and this process is quieter and more thorough than most people expected.

Refutation of Yang Haipo's "The End of Cryptocurrency"

This may be the true test of cryptocurrency. It's not about whether the price has reached a new high, nor about who will achieve financial freedom in the next bull market, but rather whether, after all the grand narratives have been washed away by cycles, it can still leave behind some simpler, more...

Can a hairdryer earn $34,000? Interpreting the reflexivity paradox of prediction markets

Prediction markets are essentially betting on reality, and when participants can access or even influence this path earlier, the market no longer just reflects reality but begins to shape it in return.

Contents

Popular coins

Latest Crypto News

Read more