StakeDAO Exploit Mints Trillions of vsdCRV Tokens with Minimal Profit

Key Facts

Amid ongoing security challenges in the decentralized finance (DeFi) sector, StakeDAO has become the latest target of a sophisticated protocol exploit. According to reports, an attacker leveraged a vulnerability to unauthorizedly mint 5.4 trillion vsdCRV tokens. Despite the massive scale of the minting, the attacker was only able to realize a net profit of approximately $91,000 (43.7 ETH), as the vast majority of the newly created tokens lacked sufficient market liquidity to be traded.

This incident highlights the critical role of market depth in mitigating the final impact of DeFi exploits. Unlike larger-scale breaches seen in protocols like Curve Finance, where attackers successfully drained millions, this exploit was effectively throttled by massive price slippage. Per security analysts at PeckShield, the inability to exit positions in illiquid pools prevented a much larger financial catastrophe for the StakeDAO ecosystem.