Cryptocurrency [loss] $4M+

Tweet by Tapioca DAO

2024-10-18 [vendor] Tapioca DAO [chain] ethereum
Primary Source ↗
Financial Loss $4.4M (4,400,000 USD)
Blockchain(s) Ethereum

Incident Details

The defi lending protocol Tapioca DAO was exploited after an attacker reportedly socially engineered the DAO’s co-founder and gain access to their private key. The attacker then used their access to sell off TAP tokens, and to drain a stablecoin liquidity pool on the platform, netting around $4.4 million in USDC and ETH. The TAP token price subsequently crashed by around 96%.Various security researchers have observed that the attack appears to be linked to a slew of social engineering attacks perpetrated by cybercriminals out of North Korea.

Total loss estimated at $4,400,000.

Technical Details

Initial Attack Vector
Nation-state attack (Lazarus/DPRK) — private key or social engineering compromise
Vendor / Product
Tapioca DAO

Timeline

  1. 2024-10-18 Breach occurred
  2. 2024-10-18 Publicly disclosed