DeltaPrime suffered a $5.98M exploit on September 16, 2024 when an attacker compromised the ProxyAdmin private key (not multi-sig protected). The attacker used it to upgrade liquidity pool proxy contracts to malicious implementations that allowed unlimited minting of deposit receipt tokens and systematic draining of USDC, WBTC, and WETH pools.

DeFi project DeltaPrime has officially confirmed on platform X that a security incident occurred. DeltaPrime Blue (Arbitrum) was attacked and drained for $5.98M. This was due to a compromised private key.