What happened
AragonDao fell victim to a fake token airdrop scam, resulting in a significant loss of funds 800k in USDC.
The exploit began with the attacker sending 7 USDC to AragonDao from a specific address (0x0cee33...CC3F0EBf). Subsequently, AragonDao was deceived into sending 800K USDC to the same spoofed address, resulting in a significant loss. The team responded by offering a 10% reward on the stolen assets, aiming to mitigate the impact of the attack.
The initial attack transaction Tx 0xf32b…524e
Additionally, the transaction offering a 10% reward on the stolen assets is available at Tx 0xb5fa…c8d1
The attacker's deposit of $1.2M into TornadoCash can be found at Address 0x63d9…6574.
Protocol details
Evidence
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
