Citadel.one, a portfolio management dApp on Arbitrum, suffered an access control vulnerability that allowed unauthorized extraction of wrapped Ethereum (WETH) and USD Coin (USDC). The attackers exploited improper access controls in the smart contract to drain approximately $93,000 in user funds.

Portfolio management tool Citadel.one has been attacked, resulting in a loss of approximately $93K.