According to Wu, the decentralized exchange Arcus disclosed that at 11:07 AM (Beijing time) on November 10th, an attacker exploited a loophole in the platform's accounting system for fund transfers between sub-accounts to artificially inflate account balances and initiate withdrawals. The attacker successfully extracted 2,234,391 USDG on-chain. Approximately $3 million in withdrawal requests were blocked by the cross-chain bridge's limit mechanism and subsequently withdrawn. Arcus suspended all withdrawals across the platform at 12:07 PM that day, patched the vulnerability at 12:37 PM, and resumed withdrawals at 5:26 PM. This incident only involved one account; other users' balances, holdings, and orders were unaffected. Arcus Labs has fully covered the shortfall using company reserves and is currently collaborating with blockchain investigation agencies to track the extracted funds. Arcus will also cooperate with law enforcement investigations if necessary. https://(wublock123.com)/news/arcus-subaccount-accounting-exploit-223k-usdg-drained-platform-reimbursed-71707