Vinh Pham Dang

Ít nói

[Rhea Finance @rhea_finance]

Phase 3

Controlled Reopen live 12th May in between 5-10PM UTC

Expected:
• User access is restored
• Liquidations are paused for 24 hours — use this window to add collateral or repay debt before the liquidation bot resumes
• Margin trading positions must be closed within 24 hours — no new positions can be opened
• After 24 hours, all open margin positions will be force closed

Note:
Normal liquidation thresholds won't apply during this period, but forced liquidation can still occur if your real collateral falls below your real debt.

[Rhea Finance @rhea_finance]

RHEA DEX on NEAR has resumed full live operations.

To be clear: the DEX itself was never at risk.

The temporary pause was a precautionary measure taken to carefully assess transactions linked to the recent exploit and to support the recovery of stolen funds.

We appreciate your patience and continued trust as we worked through this process.

A full update on RHEA Lending will follow shortly

https://t.co/hvTtiT2bkS

[Humphrey｜Crypto Research @Humphre98361099]

Rhea Finance 攻击事件分析

NEAR 链上的“巨头陨落”

Rhea Finance ，由 Ref Finance 与 Burrow Finance 于 2025 年初合并而成，是 NEAR Protocol 上的核心 DEX 与借贷协议，曾占据全链 DeFi 总 TVL 的 95% 以上。

此次攻击不仅是资产的流失，更是对 NEAR 生态信心的一次重击。

1. 攻击流程复盘

攻击者利用了借贷协议在处理新资产抵押时的逻辑缺陷，通过以下四步完成了精准收割：

1）伪造代币合约：攻击者在 NEAR 链上部署了看似合法的恶意代币合约。

2) 流动性注入与预言机毒化：在协议中为假代币创建流动性池，并注入资金伪造交易深度。

由于协议直接读取内部 DEX 现货价，且缺乏 TWAP（时间加权平均价格） 保护，攻击者成功向预言机注入了极度虚假的高价信号。

3）欺骗验证层进行超额借贷：协议接受了被污染的报价，导致假代币的抵押价值被严重高估。

4）资产提现：攻击者以此虚假价值作为抵押，借出了价值约 $760 万 的真实资产（包括 USDC、USDT、ZEC 和 NEAR）。

2. 这次攻击对于行业非常有警醒作用

Humphrey 认为，Rhea Finance 事件并非孤立个案，而是 DeFi 攻击范式的一次“经典演变”。

通过将其与 Drift Protocol 攻击事件对比，我们可以发现当前协议面临的深层危机。

相似性：攻击逻辑的“同宗同源”

这两起攻击在核心战术上高度一致：都是通过操纵低流动性资产的定价，实现“以假换真”。

攻击者均锁定了借贷协议这一资金池，利用新建代币的流动性漏洞误导预言机，将毫无价值的代币转化为高昂的抵押品，最终掏空协议中的真实加密资产。

差异点：致灾根源的“和而不同”

虽然结局相似，但破坏路径存在本质区别：

Drift 事件 的根源在于权限失守：其最高权限的 Admin 秘钥被盗，导致攻击者能够直接修改系统参数。

Rhea Finance 事件则是典型的机制漏洞：致灾原因是 单一预言机设计缺陷。在缺乏多重校验和时间加权保护的情况下，协议的“价格防线”在瞬时操纵面前毫无抵抗力。

3. 漏洞根因
现有证据显示，攻击使用的假代币池在事发前不到两小时才建立。Humphrey 认为，该事件暴露了协议设计中的三重死穴：

1）价格获取机制落后
盲目读取内部现货价，无 TWAP 防护。

2）审查机制缺失。
新代币上架抵押的审查门槛几乎为零。

3）风险隔离失败。
未对高风险、低流动性资产设置严格的借贷限额。

4. 应对与争议：中心化的“双刃剑”
Tether 创始人在事后确认已冻结流向攻击者地址的 329 万 USDT（约占损失的 43%）。这一举动再次引发了社区争议：
支持者认为：中心化发行方的干预能力是 DeFi 极端情况下的最后一道安全防线。

质疑者认为：这种“权力集中”与 DeFi 去中心化的初衷背道而驰，意味着资产的所有权依然具有可干预性。

Humphrey 认为，此事件再次反映出 DeFi 生态中存在的长期隐患：

- “唯效率论”的代价：为了追求增长速度，协议往往在安全审查上选择妥协。

- 预言机抗操纵能力薄弱：单点故障依然是 DeFi 的阿喀琉斯之踵。

- 监管压力将至：随着 GENIUS Act 等法规推进，监管机构可能会以此类事件为由，加速对 DeFi 抵押审查和预言机标准化的强制干预。

[Rhea Finance @rhea_finance]

The RHEA team is aware of an incident affecting the protocol. As a precautionary measure, we have temporarily paused the contracts while we conduct a thorough investigation.

We are working closely with key partners, stakeholders, and security experts. Protecting user positions is our immediate priority, and our team is focused on minimizing any potential impact.

RHEA team has reached out to the responsible party through on chain transaction.

https://t.co/POtzfBb2tQ

[Rhea Finance @rhea_finance]

Good time for a new pfp? Introducing RHEA Collectibles 👾

✅ Total Supply: 6,969
✅ Mint: Exclusive to xRHEA holders
✅ Platform: To be Minted on HotCraft by @hotdao_

Culture first now. Details drop soon 🐾

Got a name for the NFT collection? Drop your best ideas below ⬇️

[Rhea Finance @rhea_finance]

RHEA has been unlocking cross-chain liquidity with bridge aggregator, native wallet integration & BTC Satoshi Ramp.

Now, with @near_intents , we’re taking the leap forward:

⚡ The first true multi-chain money market — built for users & pro market makers.

→ Deposit directly from ETH, BTC, Solana, Sui, XRP
→ No bridges, no new wallets, no gas juggling
→ 1 deep liquidity pool powering lending & borrowing

Finance has seen revolutions before. Remember when cards turned clunky cash into invisible payments?

We believe RHEA’s multi-chain money market will be the next revolution in Web3.

[Rhea Finance @rhea_finance]

REF & BRRR holders. $RHEA conversion portal is live!

Deposit options up to 20 weeks with multiple reward tiers

Why 20 weeks? Why not?

Earn a one-time premium up to 200% return — no compounding, no gimmicks.

Lock & receive $RHEA at its most value. A long term game

[Rhea Finance @rhea_finance]

In honour fur rheal 137 likes, 24hr PFP activated 🫡😂

Btw heard from the trenches that meme is for everyone now? Idk

Thoughts NEAR community?

Hit like if you agree, & feel free to comment 👇

[Rhea Finance @rhea_finance]

Teams chat today:

"Lets minimise the amount of user clicks"
"Ok, UI of only 3 buttons *show image"
"And the Mascot?"
"For dem vibes"

Thoughts @rhea_finance & @NEARProtocol fam? 😁

[ZimaBank @zimabank]

Zima Bank merges traditional banking’s reliability with fintech’s innovation, offering a unified platform for fiat and crypto transactions to simplify modern financial needs

[UniRouter @UniRouterBTC]

🚨SEASON 3 UPDATE: AIRDROP EVENT CONCLUDED!

Please connect your wallet on farming platform https://t.co/270o8TF9Cu to view and secure your $URO rewards.

Thank you for your participation and enthusiasm❤️

$URO #UNIROUTER #Bitcoin #DeFi

[UniRouter @UniRouterBTC]

@UniRouterBTC 🤝 @redkitepad

[Rhea Finance @rhea_finance]

MEME Season is HERE!

Voting is now open with xREF voting round.

Check in now to unlock the power of our Honorary NFT.
Boost your DAILY CHECK-IN win rate and be eligible for Ref's exclusive native collection.

Don't miss out🔥

[ArcherSwap @archerswapcore]

ArcherSwap V2???😱😱😱

Introducing to you all, 🏹 ArcherSwap V2 WITH NEW Simplified 🧑‍💻 Designs & Layout, ⚡️ Faster Loading Speed, 💱 DEX v3, 🚀 Relaunching Bowpad and 💵💶💴 most importantly more profitable features will be adding over the 🔄🔄🔄 course of the updates. Stay tuned! 🚀

[Rhea Finance @rhea_finance]

🚀 MEME Season 5 has STARTED

[ Daily Check-in—spin the wheel and win!
[ MEME Honorary NFT is your exclusive ticket to greatness!

RT&Like this post to get your NFT 5

👇Dive into the thread for the scoop on NFT 4 & how to snag this SEASON's NFT!

[Trailblaze @Trailblazexyz]

The #XBLAZEDROP is getting closer 👀

[SΔM (💜,🏛️) @xparser_]

🌇Evening @ThenaFi_ Weekly Digest #11🗞️

⏰It's time to summarize EPOCH #72 performance statistics and THE most important highlights of previous week
🖇️1/7

😎𝘞𝘦 𝘤𝘰𝘰𝘭 𝘧𝘰𝘳 𝘛𝘏𝘌𝘕𝘈 𝘴𝘶𝘮𝘮𝘦𝘳🏖️

[ANM @azrizx]

Still waiting patiently for "ARENA" on @ThenaFi_

[Alex Hendrikse (💜,🏛️) @hendriksealex]

As you all may know @ThenaFi_ is on the @BNBCHAIN!💪

In the short video below I show you the latest updates, news facts, and fun things to know about @BNBCHAIN !

Also remember we are in the last month of Q2! Thats means #THENAARENA will be here soon!😍

[OTTOCHAIN||MAINNET LIVE @ottochainn]

How $RICH you wanna be this June⚡️💰