confirmed<\/a> that the incident stemmed from deployment code that failed to assign an explicit owner to the contract, combined with a faulty migration introduced during an April 2025 software update.\u00a0<\/p>\n <\/p>\n
According to the protocol, the flaw allowed anyone to rewrite the smart contract connected to its V1 Arbitrum dark pool.<\/p>\n
Dark pools allow large traders to execute transactions privately without exposing order size or direction to the open market. Renegade said only 7% of its trading activity passed through the affected V1 Arbitrum pool and added that impacted users would be compensated directly.<\/p>\n
A post-mortem and \u201cfull root-cause analysis\u201d are expected to be released by the protocol in the coming days.<\/p>\n
Recent exploits involving resolver systems, proxy contracts, and admin permissions have pushed fresh scrutiny onto DeFi infrastructure design.\u00a0<\/p>\n
On May 7, liquidity provider TrustedVolumes lost roughly $5.87 million after attackers targeted a custom RFQ swap proxy tied to 1inch infrastructure. Blockaid linked the attacker to the March 2025 1inch Fusion V1 exploit, although it said the newer incident relied on a separate vulnerability involving the proxy setup.<\/p>\n
Debate over contract risk intensified further after 1inch co-founder Sergej Kunz criticized shared-pool lending systems following the Kelp DAO rsETH exploit that disrupted liquidity on Aave.\u00a0<\/p>\n
Kunz argued that \u201cone weak collateral listing can affect an entire reserve\u201d and later promoted intent-based lending systems where users negotiate fixed loan terms without relying on shared liquidity pools.<\/p>\n
Separate reporting from crypto.news also showed that Wasabi Protocol lost more than $5 million across Ethereum, Base, Berachain, and Blast after security firms identified a compromised admin key that allowed attackers to upgrade contracts and drain funds.<\/p>\n
<\/p>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"
Renegade.fi has recovered about $190,000 after a whitehat hacker exploited a vulnerability in one of its Arbitrum-based dark pools and later returned more than 90% of the stolen assets. Summary…<\/p>\n","protected":false},"author":1,"featured_media":11452,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-28119","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cryptocurrency"],"_links":{"self":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts\/28119","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/comments?post=28119"}],"version-history":[{"count":1,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts\/28119\/revisions"}],"predecessor-version":[{"id":28120,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts\/28119\/revisions\/28120"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/media\/11452"}],"wp:attachment":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/media?parent=28119"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/categories?post=28119"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/tags?post=28119"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}