Rho Markets on Scroll lost $7.6M on July 19, 2024 when a private key compromise allowed attacker to transfer oracle contract ownership and manipulate price feeds, draining all USDT and USDC.

A misconfiguration in the Rho Markets lending protocol allowed an MEV bot operator to take $7.6 million from the project's users across multiple chains. The MEV bot operator sent an on-chain message indicating their willingness to return all the funds. Subsequently, the MEV bot operator returned the funds as planned.