Arcus Publishes Attacker Address After $2.2 Million Accounting Bug Exploit

TLDR Arcus found an accounting bug on November 10 that let a user withdraw funds they did not own. About $2.234 million in USDG left the platform before withdrawals were stopped. Another $3 million in withdrawal requests was blocked by cross-chain bridge limits. Arcus Labs repaid the full shortfall from its company treasury. The attacker’s first address has been published so exchanges can flag related assets. Arcus, a decentralized trading platform, reported an accounting vulnerability on November 10. The flaw let a user withdraw money they were not entitled to. The company said it found and fixed the problem within one hour.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to CoinCentral.