Hack history / 2025 / Hack or exploit
Arcadia V2
Hack or exploit on Jul 15, 2025 · Reentrancy
SOURCES DISAGREE ON DATE OR LOSS · 4 SOURCES
Lost
$3.5M
sources: $2.5M to $3.6M
Returned
none listed
as the sources state it
Rank
#548
among thefts by dollars lost
What happened
On July 15, 2025, Arcadia V2 RebalancerSpot was exploited through an unvalidated router address parameter. Attacker registered a malicious router, flash-loaned $1.5B from Morpho Blue, bypassed health checks, and drained LP positions for $2.5M-$3.6M profit.
Details
- Date
- Jul 15, 2025
- Kind
- Hack or exploit
- Method
- Reentrancy
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Base, Ethereum
- Audit (rekt.news)
- Pashov Audit Group
Related incidents
Arcadia V1 2023 · Hack or exploit · $455K
GMX V1 EVM 2025 · Hack or exploit · $42M
StepHeroNFTs 2025 · Hack or exploit · $90K
Unverified_35bc 2025 · Hack or exploit · $7K
GMX V1 EVM 2025 · Hack or exploit · $42M
StepHeroNFTs 2025 · Hack or exploit · $90K
Unverified_35bc 2025 · Hack or exploit · $7K
Cite this page
SwanBluechip, "Arcadia V2 hack, Jul 15, 2025: $3.5M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htf42f768f9a/ (data as of 2026-10-31).