Cryptocurrency
[loss] $4M+
Tweet by Tapioca DAO
Primary Source ↗Financial Loss
$4.4M
(4,400,000 USD)
Blockchain(s)
Ethereum
Incident Details
The defi lending protocol Tapioca DAO was exploited after an attacker reportedly socially engineered the DAO’s co-founder and gain access to their private key. The attacker then used their access to sell off TAP tokens, and to drain a stablecoin liquidity pool on the platform, netting around $4.4 million in USDC and ETH. The TAP token price subsequently crashed by around 96%.Various security researchers have observed that the attack appears to be linked to a slew of social engineering attacks perpetrated by cybercriminals out of North Korea.
Total loss estimated at $4,400,000.
Technical Details
- Initial Attack Vector
- Nation-state attack (Lazarus/DPRK) — private key or social engineering compromise
- Vendor / Product
- Tapioca DAO
Timeline
- 2024-10-18 Breach occurred
- 2024-10-18 Publicly disclosed