Rocket suffers $287K loss after attacker manipulates dormant perp market

Rocket has suspended deposits, withdrawals and trading after an attacker manipulated a dormant perpetual market and withdrew approximately $287,000 in positive PnL from the platform’s Bridge. Summary An attacker manipulated a dormant Rocket perpetual market using inflated orders and self trades, creating artificial profits before withdrawing approximately $287,000. Rocket has paused deposits, withdrawals and trading while security firms and law enforcement investigate the Sept. 5 incident. The platform is working with exchanges, bridges and stablecoin issuers to trace and freeze the stolen funds. Rocket is preparing a recovery plan that will prioritize refunds for smaller affected accounts. Rocket said in a Sept. 7 update on X that the security incident occurred at approximately 19:00 UTC on Sept. 5, when an attacker targeted an inactive perpetual market using a burner account. Update on the 09/05/2026 security incident:All deposits, withdrawals, and trading are paused for the time being while we work through this – please bear with us, the team is working on the incedent.What happened: At approximately 19:00 UTC, an attacker exploited a dormant…— Rocket (@RCKTFoundation) September...