On May 8, 2021, attacker exploited Rari's ibETH integration; using dYdX flashloan and ibETH.work's arbitrary call capability, attacker artificially inflated ibETH.totalETH() to withdraw more ETH than deposited, draining ~$11M from Rari's Ethereum Pool.

DeFi robo-advisor agreement Rari Capital stated on Twitter that its ETH fund pool had a vulnerability caused by the integration of the Alpha Finance Lab protocol, which was attacked. The rebalancer has now removed all funds from Alpha. The team stated that it is still investigating and evaluating, and a full report will be released in the future. Data shows that about 14 million U.S. dollars of funds were transferred by the attackers. The Alpha Finance team stated that the funds on Alpha Homora are safe. In this attack, the address of Rari Capital had previously attacked Value DeFi on the Binance Smart Chain.