What happened
On 20 October 2025 an attacker began draining wallets belonging to DoodiPals, a small Solana entertainment project with the DOODI token, after its private keys leaked. The team posted that afternoon (UTC) that a hacker was draining its treasury. SlowMist founder Cos reported that DOODI had been stolen from dozens of wallet addresses and gradually sold for SOL, netting the attacker about 917 SOL, or roughly $171,000.
How the keys leaked has not been disclosed. DoodiPals told users to stop buying DOODI, said it would relaunch after a full security audit, and promised a 1:1 token reissue to holders from before the hack.
Protocol details
Evidence
- report Cos (evilcos) post on the DoodiPals private key leak x.com
- analysis DeFiLlama defillama.com
- analysis SlowMist Hacked: Solana incidents (2025-10-21 DoodiPals entry) hacked.slowmist.io
- analysis DoodiPals announces relaunch after security audit, former holders to receive 1:1 reissue bitget.com
- analysis www.doodipals.com page www.do….com doodipals.com
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
