Hedgey Finance drained for $44.7M (USDC, NOBL, MASA, BONUS) from Arbitrum and Ethereum vaults. Attacker exploited missing validation in createLockedCampaign, using flashloans to bypass access controls and create fraudulent approvals.

Hedgey Finance suffered two exploits, one on the Ethereum and another on the Arbitrum network. The ETH attack resulted in a loss of $1.9 million, while the Arbitrum exploit led to a theft of $42.8 million in ARB tokens.