An attacker used crafted swapData to trigger arbitrary calls through a trusted rebalancer contract, draining $3.6M from user vaults. The exploit hit during a pause cool down, leaving @ArcadiaFi unable to intervene before the funds were bridged out. Story below.
@ArcadiaFi
3,77K