Losses Escalate: A Detailed Post-Mortem Report

Rhea Finance has released a comprehensive report detailing a recent security incident. The confirmed financial impact stands at approximately $184 million, a figure that drastically revises upward from the initial estimate of $76 million, underscoring the challenges in assessing sophisticated exploits.

Deconstructing the Attack: A Sophisticated Liquidity Exploit

Technical analysis reveals a meticulously orchestrated attack rather than a simple code bug. The perpetrator executed a multi-stage strategy:

  • Fabricated Transaction Paths: Engineered complex transaction sequences to bypass standard security protocols.
  • Liquidity Pool Manipulation: Created and utilized spoofed token pools to distort genuine market liquidity metrics.
  • Asset Diversion & Forced Liquidation: Diverted borrowed assets into pools under their control while returning minimal collateral. This maneuver instantly undercollateralized numerous user positions, triggering automatic liquidations.
The cumulative effect was the rapid and systematic drainage of the protocol's reserve treasury.

Significant Progress in Asset Recovery

Coordinated recovery efforts following the incident have yielded positive results. To date, approximately $112 million in assets have been successfully reclaimed or frozen. This includes:

  • A portion of USDC and NEAR assets voluntarily returned by the attacker.
  • Approximately $43.4 million in USDT frozen with assistance from the relevant stablecoin issuer.
This recovery represents a crucial step for affected users and the protocol's future. A full security audit and the development of a restitution framework are currently in progress.