Digital Asset
Intelligence
Security Incident · Arbitrum Ecosystem

ShapeShift FOX Colony Smart Contract Vulnerability: $132.70K Reported Loss

·Historical incident record

Incident Overview

ShapeShift’s FOX Colony (a community governance and participation program for FOX token holders) on Arbitrum was exploited via a smart contract vulnerability in its Colony Network contracts. The attacker drained approximately $132.7K in USDC and FOX tokens in a single sophisticated transaction by exploiting a meta-transaction self-call flaw combined with DSAuth authorization logic. The core exchange platform was unaffected; this impacted the DAO/community treasury.

Sources & References

Original incident referencehttps://x.com/blockaid_/status/2054593377438421492?s=46&t=DLwbX9Nw4QECiyZQ0av-fg (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    SEA Token

    Attack methodFlash Loan Price Manipulation
    Reported loss$ 153,000
  2. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 13,700
  3. Incident date
    Target

    Silo V2

    Attack methodOracle Misconfiguration
    Reported loss$ 392,000
  4. Incident date
    Target

    THORChain

    Attack methodGG20 TSS Vulnerability
    Reported loss$ 10,700,000
  5. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 1,880,000