Arcadia Finance, a DeFi protocol on Coinbase’s Base network, was reported to have been exploited for about $2.5 million after attackers targeted its Rebalancer contract. PeckShield first flagged the incident, and later reporting said the stolen funds were swapped into roughly 840 ETH and bridged from Base to Ethereum, which typically makes tracing and recovery harder. The immediate operational impact was a warning to users to revoke asset-manager permissions and remove active rebalancers, while the protocol reportedly paused liquidity-related functions as it investigated the incident. DefiLlama’s incident record lists the event as a July 15, 2025 hack affecting Arcadia V2 on Base, classified as a protocol logic issue involving the Rebalancer contract. The breach matters because Arcadia is a non-custodial liquidity and margin-management protocol, so weaknesses in a contract that can move user-linked assets can create broad exposure beyond a single wallet. It also adds to a wider run of DeFi exploits in 2025, with one report citing billions in sector losses, underscoring that smart-contract permissions and contract logic remain high-value attack surfaces.

AI-generated background, compiled from web sources — not editorial content.

More coverage

Explore the topic

Explore the full feed

Comments

Up nextTriple-a hot wallet losses reach $11.8 million as fresh deposits continue to be drained