Menu

Crypto sections

The Robinhood Chain exchange says a user withdrew funds they weren't entitled to, but no customer balances were affected

Tue 10 Nov 2026 · 15:09 EST · 4 min read

In Crypto

Share

Arcus, a decentralized exchange running on Robinhood Chain, says it found and fixed an accounting bug that let a user withdraw money they had no right to.

The exchange covered the full shortfall, approximately $2 million, from its own treasury. In other words, the platform paid for its own mistake so customers wouldn’t have to.

According to Arcus, the bug was identified on November 9 and patched within one hour of detection. The company says no user balances were affected, and trading and withdrawals are running normally.

What happened at Arcus

The core issue was an accounting error. Somewhere in the system that tracks who owns what, the numbers stopped matching reality.

Arcus has not publicly described the specific mechanics of the bug. It also has not said whether the withdrawal was deliberate exploitation or an opportunistic user noticing a balance that looked too generous.

The company’s statement focused on three points. The bug was caught quickly, the gap was filled, and customer funds were untouched.

The treasury backstop is the detail that matters most here. Arcus absorbed the loss at the company level instead of socializing it across traders, which is the approach some platforms have taken after past incidents.

Socialized losses mean every user takes a small haircut to cover one hole. Arcus chose to eat the cost itself, a decision that keeps customer balances whole but draws down the reserves it presumably holds for situations exactly like this one.

Who Arcus is and what it trades

Arcus launched in beta around June or July 2026. It sits in a niche that has been heating up: on-chain trading of tokenized stocks.

The news moving money, markets, and the world—before your day starts.

Daily. Free. Join 34,000+ readers across crypto, finance, and policy.

We respect your privacy. Unsubscribe anytime.

The exchange offers zero-fee spot trading of stock tokens around the clock. Tokenized stocks are blockchain-based representations of traditional equities, which lets them trade on weekends and outside normal market hours.

Arcus also runs cross-margined perpetual futures with leverage of up to 50x. Perpetual futures, or perps, are derivatives contracts with no expiry date, letting traders bet on price moves without holding the underlying asset.

Cross-margin means a trader’s collateral is pooled across positions rather than walled off per trade. It is capital efficient, but it also means the accounting system has a lot of moving parts to track at once.

Per the research, the exchange is built by the dYdX team in partnership with Robinhood Crypto. It is designed to operate outside the regulatory boundaries of the US, UK, and Canada.

The timing is notable. Around November 5 to 7, just days before the incident, Arcus expanded multi-asset collateral support to all traders. That feature lets users post a wider range of assets as margin.

Arcus has not linked the bug to that rollout. Still, new collateral types mean new math for the system to handle, and any reader watching the timeline will notice the proximity.

What this means for traders and the tokenized stock race

For current Arcus users, the immediate takeaway is reassuring. Balances are intact, withdrawals work, and the exchange showed it can respond quickly and pay out of pocket when something breaks.

Covering approximately $2 million from the treasury sends a clear signal about priorities. It says customer funds come first, even at the cost of the company’s own reserves.

The flip side is that the bug existed in the first place. An exchange offering up to 50x leverage on cross-margined positions needs its accounting to be airtight, because errors in that system can compound fast.

The things to watch are fairly concrete. First, whether Arcus publishes a detailed post-mortem explaining the root cause and what changed in its processes.

Second, whether the company says anything about recovering the funds from the user who withdrew them. Arcus has not addressed that question publicly.

Third, how the incident shapes its pace of shipping new features. The exchange was expanding collateral options right before this happened.

Disclosure: This article was edited by John Chen. For more information on how we create and review content, see our Editorial Policy.

The news about what you hold

Follow your stocks and crypto. Read the news about them from hundreds of publishers in Pro.

Privacy policy