Arcus Discloses $2.23 Million Stolen Due to Accounting Vulnerability, Fully Recovered from Company Vaults. Decentralized trading platform Arcus disclosed that on November 10th (Beijing time), it discovered an accounting vulnerability that allowed users to withdraw funds they were not entitled to. Arcus detected and fixed the vulnerability within an hour, covering the entire gap. User balances were unaffected, and trading and withdrawals continued normally. The report stated that at 11:07 AM Beijing time on November 10th, a newly created account exploited a vulnerability in the exchange's handling of transfers between user sub-accounts, recording a balance far exceeding the actual amount held and requesting withdrawals. Before withdrawals were stopped, approximately $2.234 million USDG had been withdrawn on-chain, and another $3 million in withdrawal requests were blocked by the cross-chain bridge's rate limiting, not paid out, and subsequently revoked.