Premia vault collateral leaves through the option pools.

Security researchers reported a 1 November exploit affecting Premia options vaults on Arbitrum. Blockaid's early estimate was about $400,500; The Defiant calculated roughly $437,000 in net collateral outflows across six vaults. These are attributed estimates, not a final loss statement.

Blockaid described an attacker creating empty option pools and using flash loans to buy options. That moved vault collateral into the pools, from which the attacker could withdraw it as liquidity. The Defiant's analysis identifies two main transactions and affected vaults backing Bitcoin-, Ether- and ARB-related options.

The distinction between the estimates matters. Blockaid's alert was an early snapshot; The Defiant valued net token movements using displayed prices after the transactions. Its remaining-balance figures also exclude a valuation of outstanding option positions. Combining those numbers into one supposedly exact loss would suggest certainty the evidence does not provide.

We could not independently access the original X alerts or explorer receipts during this check. Accessible reporting and a security advisory reproduce and link them. We have not verified a final Premia post-mortem, a completed fix or compensation terms. The early alert described the attack as ongoing at that time; it does not establish the current status.

The reported scope concerns these options vaults. It does not establish that ordinary holdings elsewhere on Arbitrum were compromised. Anyone following the incident should distinguish the vault exposure from the chain itself and treat unsolicited recovery or refund links cautiously.