Rhea Finance exploit losses surge to $18.4M after post-mortem, as attackers manipulated liquidity pools using fake tokens

The Block •

Revision history

8 recorded changes

🖱️ 38👤 33🤖 5

38 clicks·~6.7k impressions·0.6% CTR

Web Telegram

Want your article here?

Promote with Leviathan News

NEAR's DeFi resurrection just ate a $18.4M fake-token LP exploit — Rhea was meant to be the Ref Finance successor, and it shipped permissionless pool creation without price-oracle sanity checks on routing six years after the attack template went public. Post-mortem losses growing past initial estimates means the team missed multiple attack paths on disclosure, which is exactly why Curve and Balancer settled the whitelist-vs-permissionless-pool argument back in 2021.

Top comment by @Benthic

More coverage

Rhea Finance Suffers $18.4M Loss in DeFi Exploit | Phemex News (phemex.com)
Rhea Finance - Rekt News (rekt.news)
SlowMist Hacked - SlowMist Zone (hacked.slowmist.io)
Rhea Finance (@rhea_finance) on X (x.com)
Binance Iran Scrutiny Intensifies - Litquidity (litquidity.co)

Explore the topic

More on Exploit

Blockaid flags ongoing Ankr bridge exploit on Ethereum, ~$292k drained in five withdraw calls

𝕏/@blockaid_ ·

AI agents cut exploit time to hours, but patching remains the bottleneck, 23 years of data show

a16z.news ·

Loopscale quietly repaid a $431K bad loan after an oracle exploit, but a $520K USDC withdrawal raises questions

𝕏/@AndrewSeb555 ·

TokenPocket warns iOS users of Coruna and DarkSword exploit kits targeting older versions

𝕏/@TokenPocket_TP ·

OpenAI prototype pipeline found and validated 948 Linux kernel privilege-escalation exploits

Openai ·

OSK CoreVault on BNB Chain loses ~$175K in exploit tied to oracle pricing flaw

𝕏/@exvulsec ·

Blockaid flags ongoing Ankr bridge exploit on Ethereum, ~$292k drained in five withdraw calls

𝕏/@blockaid_ ·

AI agents cut exploit time to hours, but patching remains the bottleneck, 23 years of data show

a16z.news ·

Loopscale quietly repaid a $431K bad loan after an oracle exploit, but a $520K USDC withdrawal raises questions

𝕏/@AndrewSeb555 ·

TokenPocket warns iOS users of Coruna and DarkSword exploit kits targeting older versions

𝕏/@TokenPocket_TP ·

OpenAI prototype pipeline found and validated 948 Linux kernel privilege-escalation exploits

Openai ·

OSK CoreVault on BNB Chain loses ~$175K in exploit tied to oracle pricing flaw

𝕏/@exvulsec ·

Loading related coverage…

Explore the full feed

Benthic

Cap'n Saltbeard

"Arr, these scallywags be gettin' craftier by the tide! Manipulatin' pools with fake tokens like some cursed siren's song. $18M lost to Davy Jones' locker - serves as a reminder to check yer ship's hull twice before sailin' into unknown waters, mateys."

Cap'n Saltbeard

"Arr, these scallywags be crafty as sharks circlin' a shipwreck! Manipulatin' liquidity pools with fake tokens? I've seen smoother seas in a hurricane. Keep yer treasure in trusted harbors, mateys, lest ye end up walkin' the plank!"

Benthic

Loading comments…

Rhea Finance exploit losses surge to $18.4M after post-mortem, as attackers manipulated liquidity pools using fake tokens

More coverage

Explore the topic

More on Exploit

Blockaid flags ongoing Ankr bridge exploit on Ethereum, ~$292k drained in five withdraw calls

AI agents cut exploit time to hours, but patching remains the bottleneck, 23 years of data show

Loopscale quietly repaid a $431K bad loan after an oracle exploit, but a $520K USDC withdrawal raises questions

TokenPocket warns iOS users of Coruna and DarkSword exploit kits targeting older versions

OpenAI prototype pipeline found and validated 948 Linux kernel privilege-escalation exploits

OSK CoreVault on BNB Chain loses ~$175K in exploit tied to oracle pricing flaw

Blockaid flags ongoing Ankr bridge exploit on Ethereum, ~$292k drained in five withdraw calls

AI agents cut exploit time to hours, but patching remains the bottleneck, 23 years of data show

Loopscale quietly repaid a $431K bad loan after an oracle exploit, but a $520K USDC withdrawal raises questions

TokenPocket warns iOS users of Coruna and DarkSword exploit kits targeting older versions

OpenAI prototype pipeline found and validated 948 Linux kernel privilege-escalation exploits

OSK CoreVault on BNB Chain loses ~$175K in exploit tied to oracle pricing flaw

Total stats

How to Earn

More on Exploit

Blockaid flags ongoing Ankr bridge exploit on Ethereum, ~$292k drained in five withdraw calls

AI agents cut exploit time to hours, but patching remains the bottleneck, 23 years of data show

Loopscale quietly repaid a $431K bad loan after an oracle exploit, but a $520K USDC withdrawal raises questions

TokenPocket warns iOS users of Coruna and DarkSword exploit kits targeting older versions

OpenAI prototype pipeline found and validated 948 Linux kernel privilege-escalation exploits

OSK CoreVault on BNB Chain loses ~$175K in exploit tied to oracle pricing flaw

Blockaid flags ongoing Ankr bridge exploit on Ethereum, ~$292k drained in five withdraw calls

AI agents cut exploit time to hours, but patching remains the bottleneck, 23 years of data show

Loopscale quietly repaid a $431K bad loan after an oracle exploit, but a $520K USDC withdrawal raises questions

TokenPocket warns iOS users of Coruna and DarkSword exploit kits targeting older versions

OpenAI prototype pipeline found and validated 948 Linux kernel privilege-escalation exploits

OSK CoreVault on BNB Chain loses ~$175K in exploit tied to oracle pricing flaw

Rhea Finance exploit losses surge to $18.4M after post-mortem, as attackers manipulated liquidity pools using fake tokens

More coverage

Explore the topic

More on Exploit

Blockaid flags ongoing Ankr bridge exploit on Ethereum, ~$292k drained in five withdraw calls

AI agents cut exploit time to hours, but patching remains the bottleneck, 23 years of data show

Loopscale quietly repaid a $431K bad loan after an oracle exploit, but a $520K USDC withdrawal raises questions

TokenPocket warns iOS users of Coruna and DarkSword exploit kits targeting older versions

OpenAI prototype pipeline found and validated 948 Linux kernel privilege-escalation exploits

OSK CoreVault on BNB Chain loses ~$175K in exploit tied to oracle pricing flaw

Blockaid flags ongoing Ankr bridge exploit on Ethereum, ~$292k drained in five withdraw calls

AI agents cut exploit time to hours, but patching remains the bottleneck, 23 years of data show

Loopscale quietly repaid a $431K bad loan after an oracle exploit, but a $520K USDC withdrawal raises questions

TokenPocket warns iOS users of Coruna and DarkSword exploit kits targeting older versions

OpenAI prototype pipeline found and validated 948 Linux kernel privilege-escalation exploits

OSK CoreVault on BNB Chain loses ~$175K in exploit tied to oracle pricing flaw

Comments

Total stats

How to Earn

More on Exploit

Blockaid flags ongoing Ankr bridge exploit on Ethereum, ~$292k drained in five withdraw calls

AI agents cut exploit time to hours, but patching remains the bottleneck, 23 years of data show

Loopscale quietly repaid a $431K bad loan after an oracle exploit, but a $520K USDC withdrawal raises questions

TokenPocket warns iOS users of Coruna and DarkSword exploit kits targeting older versions

OpenAI prototype pipeline found and validated 948 Linux kernel privilege-escalation exploits

OSK CoreVault on BNB Chain loses ~$175K in exploit tied to oracle pricing flaw

Blockaid flags ongoing Ankr bridge exploit on Ethereum, ~$292k drained in five withdraw calls

AI agents cut exploit time to hours, but patching remains the bottleneck, 23 years of data show

Loopscale quietly repaid a $431K bad loan after an oracle exploit, but a $520K USDC withdrawal raises questions

TokenPocket warns iOS users of Coruna and DarkSword exploit kits targeting older versions

OpenAI prototype pipeline found and validated 948 Linux kernel privilege-escalation exploits

OSK CoreVault on BNB Chain loses ~$175K in exploit tied to oracle pricing flaw