The Arbitrum-based crypto lending platform Lodestar Finance was attacked by an exploiter who was able to manipulate the price of the plvGLP token, allowing them to « borrow » the entire available liquidity of the Lodestar platform with the inflated token. The attacker made around $6.4 million in profit. Some of the stolen tokens were burned—hence the difference between the attacker profit and the loss to the platform.
According to Lodestar, they think they may be able to recover around $2.4 million of the stolen funds. Meanwhile, they have attempted to contact the thief to try to negotiate the return of stolen funds. « We will generously reward your collaboration, » they wrote on Twitter.