Arcus: Subaccount Bug Drains $2.23M USDG
OnchainLens reported that Arcus lost $2.23 million USDG after a newly created account exploited a subaccount transfer bug to inflate its balance and withdraw funds, with a further $3 million attempt blocked by rate limits and the treasury covering the shortfall.
SourceAnalysis
Arcus lost $2.23M USDG after a newly created account exploited a subaccount transfer bug to inflate its balance and withdraw the funds, OnchainLens reported. Another $3M withdrawal was blocked by an onchain rate limit, the shortfall was covered from treasury and withdrawals resumed.
Onchain Lens
@OnchainLensSimplifying onchain data for the masses