On July 19, 2024, Rho Markets detected suspicious activity, potentially resulting from an unauthorized access to their oracle, causing an estimated damage of $7.6 million.

Details of the Incident

On July 19, 2024, experts from Cyvers reported a suspected breach on the Rho Markets lending protocol, which operates on the Scroll chain. The incident is believed to have caused a significant financial impact, with an estimated damage of $7.6 million. Cyvers highlighted that the unusual activity was potentially due to unauthorized access to the protocol’s oracle by a malicious actor.

Official Response and Investigation

In response to the detected anomaly, the Rho Markets team confirmed the suspicious activity and announced that they would be pausing their platform to conduct a thorough investigation. While the majority of the pools remain safe, the affected pools include Tether USDt (USDT) and USD Coin (USDC). Rho Markets emphasized their commitment to keeping the community informed about the progress of their ongoing investigation.

Clarification from Responsible Parties

Crypto expert ZachXBT later shared a message purportedly from the individuals responsible for the incident. According to this message, the event was not a hack but rather an unintended consequence of their MEV-bot interacting with a misconfigured oracle. They expressed their intention to return the funds, provided Rho Markets acknowledged the mistake and outlined steps to prevent future occurrences.

Resolution and Future Precautions

Rho Markets subsequently reported that the situation had been resolved. They assured users that necessary measures would be implemented to prevent similar incidents in the future. This proactive approach underscores the importance of robust security protocols in safeguarding digital assets.
The broader impact on the crypto market remains to be seen, but this incident highlights the critical need for vigilance and continuous improvement in security measures within the decentralized finance space.