Security Incident · ETH Ecosystem
Stake DAO Private Key Leak: $91.00K Reported Loss
On May 27, 2026, an attacker compromised StakeDAO’s deployer EOA private key and used it to repoint the vsdCRV LayerZero OFT peer on Arbitrum, forging a mint of ~5.44 trillion unbacked vsdCRV.
- Reported loss
- $ 91,000
- Attack category
- Private Key Leakage
Incident Overview
The attacker drained ~43.8 ETH (~$91K) from the vasdCRV Curve pool before bridging the proceeds. StakeDAO core contracts were never at risk; legitimate backing was secured within 47 minutes, the product was deprecated, and a governance proposal was issued to fully compensate affected users.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.