【Self-transfers between your own accounts magically create money! About $2.23 million withdrawn from Robinhood’s on-chain exchange】
At around 11 a.m. Beijing time on November 10, Arcus, an exchange for stock tokens and perpetual futures on Robinhood’s blockchain, was exploited by a newly opened account that took advantage of an accounting flaw in transfers between subaccounts. After inflating its balance, the account withdrew about $2.23 million in USDG. Another withdrawal of about $3 million was blocked by cross-chain bridge limits. The official team has covered the shortfall from the company treasury and says other users are unaffected. Arcus offered the attacker a deal: return 90% by 9 a.m. Beijing time on November 13, and keep the remaining roughly $223,000 as a bounty.
#Arcus #罗宾汉链 #Hacker attack