On April 20, 2024, the Rico protocol on Arbitrum was exploited via an arbitrary external call vulnerability. An attacker was able to execute unauthorized calls within the vulnerable contract, extracting funds. The exact amount was not publicly disclosed.