Numa on Arbitrum was exploited when the protocol's cNuma collateral valuation logic lacked protection against spot price manipulation. The attacker flash-minted nuBTC to artificially inflate synthetic liabilities and deflate collateral valuations.

NUMA was attacked on the Arbitrum chain, resulting in a loss of approximately $530,000. The attacker swapped all assets to ETH, bridged them to Ethereum mainnet, and deposited the funds into Tornado Cash.