Aragon DAO Hack
What happened
AragonDao fell victim to a fake token airdrop scam, resulting in a significant loss of funds 800k in USDC.
The exploit began with the attacker sending 7 USDC to AragonDao from a specific address (0x0cee33...CC3F0EBf). Subsequently, AragonDao was deceived into sending 800K USDC to the same spoofed address, resulting in a significant loss. The team responded by offering a 10% reward on the stolen assets, aiming to mitigate the impact of the attack.
The initial attack transaction https://etherscan.io/tx/0xf32b4fa4aae39fa6db1fbea575fc699320e980342e2b1a34c5a5ae52a56524e
Additionally, the transaction offering a 10% reward on the stolen assets is available at https://etherscan.io/tx/0xb5fae765adc4440967b27c05bd94d74fdd1029e767a961d07df74307e2c8d1
The attacker's deposit of $1.2M into TornadoCash can be found at https://etherscan.io/address/0x63d919e6…2e6574.
Case & protocol details
Evidence & learning
Attack pattern
Compare incidents →Sources and on-chain records
- report Report twitter.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.