DappNode Hack

REPORTED LOSS $158K
Low Access Control

What happened

Quick Summary

DappNode project's team wallet's private keys were compromised. The hacker was able to withdraw 158343 $USD worth of assets.

Details of the Exploit

DappNode is a decentralized network-creating tool. The project also has its DAO and ERC20 token $NODE. The project's team wallet's private keys were compromised.

The team is announcing that the wallet was created using the Profanity tool. The hacker transferred 58 $ETH and 552 $GNO to an EOA address and then moved through TornadoCash. The total funds lost is 158,343 $USD.

Block Data Reference

Attacker address:

https://etherscan.io/address/0x271d179b…3a6951

Transfer transactions:

https://etherscan.io/tx/0xb4b0ccab…9a31ee

https://etherscan.io/tx/0xb49c0f60…2be63e

Case & protocol details

Classification Exchange (DEX)
Protocol Type Exploit/Access control
Affected asset / contract NODE
Official Website www.dappnode.io/
Protocol Twitter/X @DAppNode

Evidence & learning

Attack pattern

Compare incidents →
Access Control Attacks

Sources and on-chain records

Browse all hacks

Other incidents recorded with the same attack technique.

AFX $24.1M
B² Network $3.8M
Third-party SquidRouterModule $3.2M
StablR $12.8M

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes