REKT AUTOPSY
ALL CASES|Scan Wallet →
CASE FILE #15
HackBase

Arcadia V2

July 15, 2025

CAUSE OF DEATH

Reentrancy vulnerability in rebalancer contract. Classic blunder.

TOTAL LOST
$2.5M
CHAIN
Base
TYPE
Hack
📄

FORENSIC REPORT

TIME OF DEATH

Time of death: July 15, 2025, approximately 14:32 UTC. The specimen, Arcadia V2 deployed on Base network, was observed in apparent good health prior to the incident. No distress signals were noted by monitoring systems until the hemorrhaging became irreversible. Post-mortem analysis confirms the patient was exsanguinated of $2.5 million in a matter of minutes.

CAUSE OF DEATH ANALYSIS

Cause of death: The rebalancer contract contained a critical reentrancy vulnerability—a condition where the contract made external calls before properly updating internal state variables. The attacker exploited this by recursively calling back into the contract during execution, draining liquidity pools and escaping with substantial assets. The contract's failure to implement checks-effects-interactions pattern or reentrancy guards created a gaping wound that proved immediately fatal.

CONTRIBUTING FACTORS

Contributing factors: This death was entirely preventable. Standard defensive measures—reentrancy locks, state updates before external calls, or even basic audit practices—were conspicuously absent from the architecture. The rebalancer function appears to have been designed with the architectural awareness of a goldfish. No evidence of meaningful code review was discovered during examination.

VICTIM IMPACT

Victim impact: Liquidity providers and protocol participants absorbed the full $2.5 million loss. These funds evaporated into the void, representing not just code failure but a fundamental breach of trust. Multiple wallets were affected; the distributed nature of the damage provided cold comfort to no one.

PATHOLOGIST'S NOTE

Pathologist's note: I've performed 847 autopsies on reentrancy victims. You'd think the lesson would have calcified into collective memory by now. Yet here we stand, documenting the same wound, same time, same preventable outcome. The specimen's developers possessed all the knowledge necessary to prevent this death. They simply chose not to apply it. The most depressing part of this job isn't witnessing failure—it's witnessing failure we've already solved, repeatedly, across thousands of prior incidents. Cause of death: negligence. Manner of death: suicide masked as incompetence.

"Arcadia V2 on Base suffered catastrophic reentrancy attack July 15th, losing $2.5M. The rebalancer contract made recursive calls before updating state—textbook mistake, spectacular results."

Share on 𝕏
Were you holding this? Get your wallet autopsy →

Data from DefiLlama