Arcus perps exchange covers $2.23M shortfall after accounting bug let a user withdraw funds

Arcus, a perps exchange on Robinhood Chain, says an accounting bug let an attacker inflate a balance and withdraw $2.23M in USDG it wasn't entitled to. A further $3M withdrawal attempt was blocked by bridge rate limits, and the vulnerability was fixed within 90 minutes. Arcus covered the full shortfall from its treasury and no user balances were affected.

Detected & updated continuously · Source: Nebula