On January 22, 2024, Concentric Finance on Arbitrum suffered a $1.72 million exploit. Attackers used social engineering to compromise the deployer private key, then upgraded vault contracts, minted unauthorized LP tokens, and drained assets. Lacked multi-sig or time-lock protections.