Digital Asset
Intelligence
Security Incident · ETH Ecosystem

AzukiDao Replay Attack: $69.00K Reported Loss

·Historical incident record

Incident Overview

After spending nearly $40 million on a new set of Azuki NFTs, the Azuki community was outraged that they were "diluting" a near-replica of the original Azuki collection. To counter what Azuki’s creators called a “blatant scam,” holders who claim to have collectively spent millions of dollars on the Azuki project formed AzukiDAO. The DAO created a governance token, $BEAN, which is distributed to Azuki NFT owners. The DAO then began voting to hire lawyers to sue the creators of Azuki and demand a return of the 20,000 ETH (approximately $38 million) that the Elementals NFTs had spent in total. However, governance tokens were exploited shortly after the DAO was created. Attackers were able to exploit a flaw in the smart contract, and two exploiters stole approximately 35 ETH (approximately $69,000), mainly because the variable signatureClaimed in the contract was not checked properly, resulting in a replay attack. The DAO suspended the contract to prevent further theft.

Sources & References

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Attack methodContract Vulnerability
    Reported loss$ 171,000
  2. Incident date
    Target

    Aave fork

    Attack methodGovernance Attack
    Reported loss$ 930,000
  3. Incident date
    Attack methodRug Pull
    Reported loss$ 423,000
  4. Incident date
    Target

    CivFund

    Attack methodContract Vulnerability
    Reported loss$ 180,000
  5. Incident date
    Attack methodRug Pull
    Reported loss$ 2,000,000