Breaches and incidentsBriefChecked against a primary source
Rhea Finance (NEAR): slippage check double-counted in margin trading
08:22 to 09:42 UTC 16 Apr 2026: about USD 18.4M (early reports said USD 7.6M).
- Disclosed
What happened
- 08:22 to 09:42 UTC 16 Apr 2026: about USD 18.4M (early reports said USD 7.6M). Staging from 13 Apr with 423 wallets, fake tokens and eight seeded pools.
- Root cause per QuillAudits: a logic error in margin_trading.rs that summed min_amount_out across swap steps without accounting for an output being reused as the next input, so fake output was counted twice. Early reports framed it as oracle manipulation with fake collateral.
- Attribution: none.
- Response: about USD 18M returned or frozen by 22 Apr (attacker returns, Tether and NEAR Intents freezes), leaving about USD 0.4M covered by Rhea. Margin trading permanently discontinued.
Sources
- https://www.quillaudits.com/blog/hack-analysis/rhea-finance-hack
- https://halborn.com/blog/post/explained-the-rhea-finance-hack-april-2026
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.