Rocket suffers $287K loss after attacker manipulates dormant perp market
Rocket has suspended deposits, withdrawals and trading after an attacker manipulated a dormant perpetual market and withdrew approximately $287,000 in positive PnL from the platforms Bridge. Rocket said in a Sept. 7 update on X that the security incident occurred at approximately 19:00 UTC on Sept. 5, when an attacker targeted an inactive perpetual market using a burner account. Update on the 09/05/2026 security incident: All deposits, withdrawals, and trading are paused for the time being while we work through this – please bear with us, the team is working on the incedent. What happened: At approximately 19:00 UTC, an attacker exploited a dormant… The attacker placed orders at artificially inflated prices and traded against themselves, creating artificial profits in one account while pushing the burner account into bankruptcy. The profitable account subsequently withdrew around $287,000 from the Bridge, leaving the resulting loss to be socialized across the platform. Rocket attack used self trading to create artificial profits Instead of describing a smart contract vulnerability, Rockets initial account of the incident centered on the manipulation of a dormant perpetual market with limited activity. Using a disposable account, the attacker was able to post orders at inflated prices before acting as both sides of the trades. Rocket said the
