A loophole in the code allowed the hacker to drain funds worth roughly $455,000 from Arcadia’s Ethereum (darcWETH) and Optimism (darcUSDC) vaults collectively.