DeFi platform Arcadia Finance on the Base blockchain suffered an exploit, losing approximately $2.5 million in USDC and USDS. The attacker leveraged a vulnerability in the Rebalancer contract by abusing swapData
parameters, draining user vaults. The stolen funds were then swapped to Wrapped Ethereum (WETH) on the Base network and bridged to the Ethereum mainnet. Arcadia Finance has confirmed the incident, advising users to revoke permissions, as this adds to the over $2.47 billion lost to hacks and exploits in the first half of 2025.
Arcadia Finance Exploited, $2.5M Stolen
