Rhea Finance Loses About $7.6M in NEAR Oracle Manipulation Attack
Rhea Finance (@rhea_finance), the leading DeFi protocol on NEAR, was exploited for roughly $7.6 million, according to CertiK. The attacker reportedly deployed fake token contracts and seeded liquidity into newly created pools, a setup that likely fed misleading data into the protocol's oracle and validation mechanisms.
Rhea Finance confirmed the incident and said it has temporarily paused its contracts while the team investigates. The protocol is coordinating with partners and security specialists, and stated it has contacted the suspected attacker via an onchain transaction.
Rhea Finance was created through the March 2025 merger of Ref Finance and Burrow Finance. It currently accounts for the majority of NEAR's DeFi total value locked (TVL) across its DEX and lending offerings.