Arcus DEX on Robinhood Chain hit by exploit, 2.23 million USDG drained

Arcus, a decentralized exchange on Robinhood Chain, said in an official blog post that about 2,234,391 USDG was drained on-chain in a vulnerability exploit. The attacker exploited an error in transfers between sub-accounts, recorded a balance larger than the actual holdings, and then requested withdrawals to steal the funds, according to Arcus. The exchange said it completed a fix within one hour of identifying the bug and fully covered the losses with corporate funds from developer Arcus Labs. Arcus added that an additional $3 million in cryptocurrency the attacker had tried to withdraw was not paid out because it hit the bridge withdrawal limit, and the transaction was later canceled.