OrbitDEX

Exploit & recovery timeline

1. Jan 8, 2026 · 01:14 UTC
   Attack preparation

   Attacker wallets funded and staged ahead of the flash loan exploit against OrbitDEX.

2. Jan 8, 2026 · 03:14 UTC
   Exploit executed

   $47.2M drained from OrbitDEX on Arbitrum via Flash Loan.

3. Jan 8, 2026 · 04:14 UTC
   Detected by PeckShield

   PeckShield flagged the anomalous transactions and published an initial alert.

4. Jan 8, 2026 · 07:14 UTC
   Protocol response

   OrbitDEX paused affected contracts or withdrawals and began tracing outbound flows.

5. Jan 9, 2026 · 03:14 UTC
   Funds traced

   Stolen assets followed through mixers, bridges, and exchange deposit addresses.

6. Jan 15, 2026 · 03:14 UTC
   Partial recovery

   $12.0M of $47.2M recovered (25%); the remainder is still unaccounted for.

7. Feb 7, 2026 · 03:14 UTC
   Investigation continues

   Remaining funds monitored across chains with exchange partners notified.