An old Dolomite DEX contract on Ethereum (deployed 2019) was exploited via a reentrancy vulnerability. The attacker bypassed the noEntry reentrancy guard by calling the callFunction through the TradeManager contract, which lacked proper reentrancy protection, allowing recursive fund drainage from users who had approved the contract.

On March 20th, Dolomite, a decentralized trading protocol in the Arbitrum ecosystem, was attacked due to a vulnerability in its old contracts on the Ethereum mainnet. Approximately 187 victims suffered asset losses totaling $1.8 million, including 1,245,271 USDC, 94,423 DAI, and 165.9 WETH. As of March 24th, Dolomite has recovered 90% of the assets taken by the attacker.