6.7 Security Stake DAO 在 Arbitrum 上因私钥泄露被攻击，攻击者铸造 5.4 万亿 vsdCRV 并兑换为 ETH，流动性池损失约 9.1 万美元。用户被警告勿与 vsdCRV 交互。
Stake DAO 是 Arbitrum 上的 DeFi 协议，近日遭遇重大安全攻击。攻击者通过获取部署者私钥，铸造了约 5.4 万亿枚 vsdCRV 代币。原本用于提升治理投票权的代币被迅速兑换为以太币，导致流动性池损失约 9.1 万美元。 安全公司 Blockaid 和 PeckShield 均证实了此次攻击，指出攻击者利用合约漏洞铸造代币，并将资金跨链转移至以太坊。Stake DAO 已承认事件发生，并提醒用户不要与 vsdCRV 代币交互。 此次攻击源于代币铸造或验证机制的严重失效，造成代币数量异常膨胀，凸显 DeFi 领域的安全隐患。目前事件仅影响 Stake DAO 的 vsdCRV 合约，暂无证据显示其他基于 Curve 的金库受到波及。
StakeDAO suffers exploit: hacker mints 5.4 trillion fake tokens and triggers alerts in Curve and Beefy
Stake DAO Hit by Active Exploit After Attacker Mints 5.4T vsdCRV on Arbitrum
StakeDAO exploit creates 5.4 trillion vsdCRV but nets only $91K
New DeFi hack: Stake DAO loses control of vsdCRV due to leaked private key
The new hack of Stake DAO confirms the security crisis in DeFi
Arbitrum-based StakeDAO contract hit by 5.4T vsdCRV exploit
Stake DAO Exploited as Hacker Mints 5.4 Trillion Fake vsdCRV
Stake DAO faces ongoing exploit as attacker mints 5.4T vsdCRV on Arbitrum
