Arcus discloses theft of approximately $2.23 million due to accounting vulnerability, has fully covered the funding shortfall.

November 11 - Arcus released an incident report stating that on the evening of November 9, Eastern Time, a newly registered account exploited a bookkeeping vulnerability in transfers between platform sub-accounts to improperly withdraw approximately 2.2344 million USDG. Another withdrawal request of about $3 million was intercepted by the cross-chain bridge's on-chain withdrawal limit and was not actually paid out, and was subsequently canceled.

After discovering the anomaly, Arcus suspended withdrawals across the entire platform, deployed a fix for the vulnerability, and resumed withdrawals at 4:26 Eastern Time on November 10. Arcus Labs has fully covered the shortfall using the company's own funds. The platform stated that the incident involved only one account, and other users' balances, positions, and orders were unaffected. Trading and withdrawals are currently operating normally.

Arcus stated that the remediation plan has been reviewed by its security partners, and the platform is working with blockchain investigators to trace the withdrawn funds.