Arbitrum ecosystem DeFi protocol Lodestar Finance tweeted that it was exploited and deposits have been drained. The protocol has set all interest rates to 0.
An attacker manipulated the exchange rate of the plvGLP contract to 1.83 GLP per plvGLP. They supplied plvGLP collateral to lodestar and borrowed all available liquidity. After the hack several plvGLP holders also took advantage of the opportunity and also cashed out at 1.83 glp per plvGLP. The hacker burned a little over 3 million in GLP, their profit on this exploit was the stolen funds on Lodestar - minus the GLP they burned.
Lodestar Finance said that 2.8 million of the GLP (about $2.4 million) was recoverable. The team is going to reach out to the hacker and see if they can negotiate a bug bounty to recover more funds.
Arbitrum
DeFi
Security Incidents
