Rhea Finance exploited for $18.4M through fake token manipulation of liquidity pools, details emerge in post-mortem.
Security & Exploits ·
Rhea Finance suffered an exploit resulting in $18.4 million in losses, according to a post-mortem analysis, which more than doubled the protocol's initial damage estimates. The attackers manipulated liquidity pools using fake tokens to extract value from the platform.
The post-mortem disclosed that the breach involved constructed swap routes and margin trading position manipulation as the primary attack vectors. By deploying fabricated tokens within the liquidity pools, the attacker was able to artificially move prices and execute trades that siphoned funds from the protocol and its users.
The investigation confirmed the full scope of the compromise, revealing losses substantially higher than first reported. The exact technical safeguards that failed and whether any funds remain recoverable have not yet been detailed.