Cryptocurrency

Tweet by zachxbt

2024-07-19 [vendor] Rho loss [chain] ethereum
Primary Source ↗
Recovered $7.6M
Blockchain(s) Ethereum

Incident Details

An apparent misconfiguration by the RHO Markets lending protocol allowed operators of an MEV bot to take $7.6 million from the project’s users across multiple chains.In a stroke of luck for the RHO team, the MEV bot operator sent RHO an on-chain message indicating they were willing to return all of the funds, although they first demanded that RHO “admit that it was not an exploit or a hack, but a misconfiguration on your end. Also, please provide what you are going to do to prevent it from happening again.“RHO is built on the Scroll Ethereum layer-2 network. Scroll temporarily paused the chain as RHO investigated the loss.

Technical Details

Initial Attack Vector
MEV / sandwich attack
Vendor / Product
Rho loss

Timeline

  1. 2024-07-19 Breach occurred
  2. 2024-07-19 Publicly disclosed