$3.5 million exploit hits DeFi platform Arcadia on Base

The Block

Jul 15, 2025 18:47:43

Share to

Arcadia Finance has suffered an exploit, with its losses reaching approximately $3.5 million as of Tuesday, according to the blockchain security firm Certik.

Certik initially flagged the exploit early Tuesday, posting to X: "We have detected multiple suspicious transactions on Base ... The exploiter took ~$1.6 million from Arcadia Finance, likely through arbitrary 'swapdata' on its rebalancer contract."

A few hours later, Certik then noted that the "attack" had persisted with total losses reaching roughly $3.5 million.

Arcadia's team addressed the exploit with a post of its own to X, saying, "The team is aware of unauthorized transactions via a Rebalancer. Remove all permissions for asset managers." The company also advised users on its website to "disconnect rebalancers and compounders" from their accounts.

Backed by Coinbase Ventures, Arcadia is a platform and margin protocol that "allows users to lend, borrow, and trade assets permissionlessly."

Certik is one of the highest-profile web3 security firms working in the digital assets sector. Last month, Certik said crypto users and decentralized finance (DeFi) protocols lost $302 million to hacks and scammers in May, which was a 16.9% decrease when compared to the previous month.

Backed by firms like Sequoia Capital, Tiger Global and Goldman Sachs, Certik was valued at $2 billion as of last year.

Disclaimer: The Block is an independent media outlet that delivers news, research, and data. As of November 2023, Foresight Ventures is a majority investor of The Block. Foresight Ventures invests in other companies in the crypto space. Crypto exchange Bitget is an anchor LP for Foresight Ventures. The Block continues to operate independently to deliver objective, impactful, and timely information about the crypto industry. Here are our current financial disclosures.