Blockaid reports an ongoing Premia vault exploit on Arbitrum
Blockaid reports an active Premia exploit on Arbitrum, with about $400,500 drained across roughly two transactions at the time of its alert. It describes empty option pools, flash loans and option purchases that lock vault collateral before its withdrawal as liquidity. No final loss total or verified fix is established.
- Disclosed
- Nov 1, 2026
- Public disclosure date
- Severity
- Septic Tank Blew
- No CVE: a breach, not a bug
- Splash zone
- Premia vaults and their depositors on Arbitrum; the precise set of affected vaults is not identified in the readable alert
- crypto
- In the wild
- Yes
- Blockaid reports actual vault drains and describes the exploit as ongoing at its alert.
What happened
Blockaid attributes the withdrawals to an exploit of the vault and options flow, rather than reporting an unexplained transfer alone. The alert’s snapshot supports L4 for active exploitation. It does not establish a final root cause, total affected deposits, attacker identity, completed containment or compensation. The precautions above are general exposure-reduction guidance; no vendor-approved exit procedure was verified.
Crime-scene timeline
Nov 1, 2026
Blockaid reports an ongoing Arbitrum vault exploit
Approximately $400,500 across about two transactions is a preliminary researcher estimate, not a reconciled final loss.
Who said what
We list each claim and who made it. Primary sources (the vendor, the researcher, the registry) are marked. Where reports disagree, we grade by the worst credible case.
- Blockaid original Premia alertPrimaryPublic embed contains the Arbitrum exploit description, approximate amount and transaction count; later content is truncated.
- Official public embed of Blockaid's alertPrimary