Arcus Offers $223,000 Bounty for Return of 90% of Withdrawn Funds

Arcus offered the attacker behind a $2.23 million withdrawal about $223,000 to return 90% of the funds by 8 p.m. ET Nov. 12 (01:00 UTC Nov. 13), under terms that would classify a timely repayment as a white-hat recovery.

The proposed repayment is about $2.011 million. The attacker can return the funds in Ether (ETH), wrapped Ether (WETH) or DAI and keep the remaining 10% as a bounty. Arcus pledged to take no further action if the funds arrive by the deadline.

The withdrawal involved 2,234,391 Global Dollar (USDG) and an accounting flaw between subaccounts. Arcus covered the $2.23 million shortfall from its treasury, and other users’ balances, positions and orders were unaffected. The company’s reimbursement after the $2.23 million USDG exploit followed the incident.

The self-custodial platform supports trading in stock tokens, crypto assets and perpetual futures. Arcus does not offer the platform in the United States. The repayment deadline is 8 p.m. ET Nov. 12.