Security Incident · Bridge
Stake DAO Smart Contract Vulnerability: $176.00K Reported Loss
Stake DAO’s Votemarket module was exploited.
- Reported loss
- $ 176,000
- Attack category
- Smart Contract Vulnerability
Incident Overview
The attacker used a vulnerability in the L1BlockOracleUpdater peripheral contract to inject fabricated L1 block data via the LaPoste cross-chain bridge, poisoning the oracle and forging vote proofs to drain ~$176,000 in campaign incentive rewards across 54 campaigns. The incident was later resolved as a white-hat event with most funds recovered.
Sources & References
This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.