Digital Asset
Intelligence
Security Incident

Hifi Finance Governance Attack: $1.00M Reported Loss

·Source-attributed incident record

Incident Overview

Hifi Finance suffered a DAO governance takeover. An attacker, using addresses funded via Tornado Cash, cast four last-minute votes to pass a malicious proposal (Proposal 21), gained control, upgraded the BalanceSheet contract, minted 25 million HIFI tokens, and drained approximately $1 million in user collateral (mostly RWA tokens).

Sources & References

Original incident referencehttps://x.com/spreekaway/status/2115570707463868782?s=46 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Binance

    Attack methodDevOps Engineer’s Laptop Compromised
    Reported loss$ 6,300,000,000
  2. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 1,013,000
  3. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  4. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000
  5. Incident date
    Attack methodUnknown
    Reported lossNot disclosed