Hunting Orion: The $3M Loss from a Reentrancy Attack

On Feb 2, 2023 Orion Protocol's exchange contract was exploited via a reentrancy attack that allowed an attacker to reenter during swaps and cause deposited tokens to be misused, resulting in approximately $3M stolen; the exploited contract was not covered by CertiK's audit. The report provides the vulnerability description, affected contract address, audit scope note, and an external reference to Rekt news.