Premia Labs Options Vaults On Arbitrum Hit By Reported $464,600 Exploit

Premia Labs lost approximately $464,600 in an exploit targeting its options vaults on Arbitrum, according to PeckShield. Blockaid first flagged the exploit on November 1, reporting that approximately $400,500 had been drained across two transactions. According to Crypto.news, the different loss estimates reflect separate assessments of the incident and should not be treated as additional thefts. Blockaid warned that the exploit was ongoing when it published its first findings. Blockaid traced the attack to empty options pools, flash loans and transactions that allowed the attacker to withdraw vault collateral. In Blockaid's description, the attacker created empty option pools, flash-loaned, and bought options so vault collateral was locked into those pools, then withdrew it as liquidity. According to transaction records cited by Crypto.news, the two principal withdrawals occurred around 03:15 UTC on November 1, approximately one second apart. No contract addresses or transaction hashes were included in the source material, so none are cited here. Independent on-chain analysis identified six affected vaults containing WBTC, WETH, USDC.e and ARB. The affected assets included 3.64 wrapped Bitcoin, approximately 43.47 wrapped Ethereum, 48,479 USDC.e and 46,215 ARB. The stolen assets reportedly moved from Arbitrum to Ethereum before being converted into Bitcoin through Chainflip and NEAR Intents, and PeckShield identified Bitcoin as the asset received through that route. The reported transfers do not establish that either Chainflip or NEAR Intents knowingly assisted the attacker. According to the reports, Premia Labs had not released a detailed public explanation of the affected vaults, recovery arrangements or any planned reimbursement at the time of the initial security reports. The source material describes no recovery of funds, patch or law enforcement action, so the project's response is not established by the available material. Users of DeFi options and vault protocols should treat deposited collateral as exposed to smart contract risk. Limit the amounts held in any single vault and follow security firms such as PeckShield and Blockaid for alerts. Rely only on official project channels for guidance on reimbursement, since scammers often exploit hack news with fake recovery offers.