Digital Asset
Intelligence
Security Incident

DAO Maker Contract Vulnerability: $4.00M Reported Loss

·Historical incident record

Incident Overview

The Vesting contract of DAO Maker was attacked by hackers. DeRace Token (DERC), Coinspaid (CPD), Capsule Coin (CAPS), Showcase Token (SHO) all use Dao Maker's distribution system, and the DAO Maker contract is attacked when the holder is issued (SHO) in DAO Maker , That is, there is a loophole in the distribution system of SHO participants: init is not initialized protection, the attacker initializes the key parameters of init, and changes the owner at the same time, and then steals the target token through emergencyExit and exchanges it into DAI, attacking The final profit of nearly 4 million U.S. dollars.

Sources & References

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    DAO Maker

    Attack methodPrivate Key Leaked
    Reported loss$ 7,000,000
  2. Incident date
    Target

    Banksy

    Attack methodPhishing attack
    Reported loss$ 5,000
  3. Incident date
    Target

    ETC

    Attack methodEthereum client Geth vulnerability
    Reported lossNot disclosed
  4. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  5. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000