StakeDAO exploit creates 5.4 trillion vsdCRV but nets only $91K

Phân tích tác động AIGrok đang phân tích...

📄Toàn văn bài viết· Được trích xuất tự động bởi trafilatura1325 từ

Stake DAO said it was aware of the incident. Source: Stake DAO Shalev Keren, chief product officer and co-founder of crypto key-management firm Sodot, told Cointelegraph that the StakeDAO incident was “structurally similar” to other deployer-key compromises seen this year, including the Wasabi incident last month, which drained about $5.5 million in crypto. Keren said a single StakeDAO deployer key on Arbitrum was used to repoint the vsdCRV cross-chain bridge configuration to an attacker-controlled contract on Ethereum. About 25 seconds later, that contract sent a LayerZero message back to Arbitrum, causing the legitimate Arbitrum token to mint more than 5 trillion vsdCRV to the attacker. Related: Crypto hackers stole $17B over past 10 years: DefiLlama “There is no smart contract bug here and no flaw in LayerZero,” Keren said. “There is one private key, controlling one privileged configuration function, with no multi-signature and no delay between the configuration change going through and the mint clearing onchain.” Keren said the broader issue for DeFi protocols in 2026 is no longer only whether contracts are audited, but whether the operational keys behind those contracts remain single points of failure. Magazine: ETH bears growling, Tom Lee’s buying, XRP to ‘explode’: Market Moves More on the subject

Trạng thái dữ liệu✓ Đã trích xuất toàn vănĐọc bài gốc (CoinTelegraph)

🔍Sự kiện tương tự trong lịch sử· Đối chiếu từ khóa + tài sản6 tin

2026-05-15

THORChain tạm dừng giao dịch sau nghi vấn bị khai thác lỗ hổng 10 triệu USD

Độ tương đồng 280%標的 ETH關鍵字 exploit

2026-05-08

Những người nắm giữ Mantle token phê duyệt hạn mức tín dụng 30K ETH trên Aave sau vụ khai thác rsETH

Độ tương đồng 280%標的 ETH關鍵字 exploit

2026-04-23

Nhà kinh tế của Circle đề xuất tăng lãi suất USDC trên Aave V3 sau vụ khai thác KelpDAO

Độ tương đồng 250%標的 ETH關鍵字 exploit

2026-04-22