Hack history / 2026 / Hack or exploit

Rhea Lend

Hack or exploit on Apr 16, 2026 · Spot Price Manipulation

SOURCES AGREE ON DATE AND LOSS · 4 SOURCES

Lost

$18.4M

dollars at the time

Returned

$10M

54% of the loss, as a source states it

Rank

#217

among thefts by dollars lost

What happened

On April 16, 2026, Rhea Lend on NEAR was exploited via chained swap path that defeated margin module's slippage protection. Attacker spent April 13-15 deploying fake token contracts and eight Ref Finance pools, then executed complex swap reusing intermediate assets to drain reserves. Oracle accepted attacker-created pool prices as legitimate.

Details

Date: Apr 16, 2026
Kind: Hack or exploit
Method: Spot Price Manipulation
How in: Price, oracle and governance
Target: DeFi protocol
Chains: NEAR

After the theft

Returned by the attacker: yes, amount not stated
“The attacker has since returned approximately 3.359 million USDC and 1.564 million NEAR to the RHEA lending contract.” (SlowMist Hacked)
Frozen: yes, amount not stated
“In addition, 4.34 million USDT has been frozen—of which 3.291 million USDT was frozen by Tether in the attacker’s wallet, and 1.053 million USDT was frozen within NEAR Intent.” (SlowMist Hacked)
Recovered or frozen: $10M
“$18.4M taken, $8.4M after recovery or freezing” (Web3 Is Going Great)

Reported by

Related incidents

WEMIX.FI Lend 2026 · Hack or exploit · $737K
Bonzo Lend 2026 · Hack or exploit · $9.1M
Scallop Lend 2026 · Hack or exploit · $142K
Revert Lend 2026 · Hack or exploit · $50K
Zero To Lend 2025 · Costly mistake or other · $371K

Cite this page

SwanBluechip, "Rhea Lend hack, Apr 16, 2026: $18.4M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htb43d2bf644/ (data as of 2026-11-01).

Open in the full list All incidents