[GUEST ACCESS MODE: Data is scrambled or limited to provide examples. Make requests using your API key to unlock full data. Check https://lunarcrush.ai/auth for authentication information.]

![BlockscopeCo Avatar](https://lunarcrush.com/gi/w:24/cr:twitter::1553232454017744901.png) Blockchain Insights [@BlockscopeCo](/creator/twitter/BlockscopeCo) on x 1734 followers
Created: 2025-07-15 16:34:37 UTC

🚨 @ArcadiaFi  Exploit, ~$3.5M Drained

The exploiter abused the rebalancer’s arbitrary call flow to chain flash actions across accounts.
By crafting malicious calldata, they withdrew full balances while repaying minimal debt.
The root flaw? Unchecked executeAction() calls + reentrancy via flashAction().

The incident happened on @arbitrum, and the funds were soon bridged to @ethereum. 

Image 1: Exploiter contracts draining and bridging funds on ARB
Image 2: Exploiter receiving bridged funds on ETH
Image 3: Wallet profiler shows the ETH Exploiter Contract holding $3.60M worth of ETH

![](https://pbs.twimg.com/media/Gv6YyItXIBA44kl.png)

XXX engagements

![Engagements Line Chart](https://lunarcrush.com/gi/w:600/p:tweet::1945160081366212993/c:line.svg)

**Related Topics**
[happened](/topic/happened)
[debt](/topic/debt)
[$35m](/topic/$35m)
[blockchain](/topic/blockchain)
[ethereum](/topic/ethereum)
[coins layer 1](/topic/coins-layer-1)

[Post Link](https://x.com/BlockscopeCo/status/1945160081366212993)