Renegade Fi loses nearly $209K after Dark Pool proxy initializer flaw on Arbitrum

Renegade Fi suffered an exploit on Arbitrum after an attacker abused an unprotected initializer in its Dark Pool proxy contract to obtain privileged delegatecall access. The attacker drained nearly 27 ERC-20 tokens, including WBTC, PENDLE, LDO, CRV, RDNT, and SYNTHR, with losses estimated at roughly $209,000. The incident also prompted calls to revoke approvals and pause integrations to reduce exposure across connected proxy deployments.