Arcadia Finance Exploit Traced to SwapData Vulnerability, Says Cyvers

TL;DR A malicious contract was injected into Arcadia Finance’s Rebalancer module, draining about $2. 5 million in USDC and USDS within seconds by hijacking swap operations. The attacker exploited a flaw in Arcadia’s “swapData” parameters to force rogue token swaps, then converted the stolen funds to WETH on Base and bridged them to Ethereum. Security firm. . . source: https://crypto-economy.com/arcadia-finance-exploit-traced-to-swapdata-vulnerability-says-cyvers/