PANews reported on April 20 that according to Cyvers Alerts monitoring, at 21:10 (UTC) on April 18, 2025, a suspicious transaction occurred in the NUMA. project on the ARB chain. A malicious address stole 82,279 $NUMA and 283 $rETH, then exchanged them for ETH and transferred them across the chain to Tornado Cash. 7 minutes and 33 seconds before the attack, the address deployed a malicious contract.