StakeDAO exploit creates 5.4 trillion vsdCRV but nets only $91K
Cointelegraph
An attacker minted 5.4 trillion vsdCRV via a compromised StakeDAO key, but low liquidity limited the actual profit to just $91,000.Summary
An attacker compromised a StakeDAO deployer key on Arbitrum, allowing them to mint over 5.4 trillion vsdCRV tokens. While the nominal value of these tokens appeared massive at $763 billion, a lack of liquidity in the protocol's pools prevented the attacker from cashing out, resulting in a realized profit of only 43.7 Ether, valued at approximately $91,000. Experts noted that the breach occurred due to a single private key controlling privileged functions without multi-signature protection, emphasizing the ongoing risks of centralized operational keys in decentralized finance.
(Source：Cointelegraph)