Samudai Hack

REPORTED LOSS $1.3M
Medium Access Control ethereum

What happened

Samudai DAO wallet compromise led to a loss of assets worth approximately $1,286,349 with funds laundered through Tornado Cash.

Samudai, a Decentralized Autonomous Organization (DAO), was exploited on November 10, 2023, presumably due to a compromise of their wallet access control. Both the multisignature wallet addresses of the protocol and the wallet of their founder appear to have been compromised, which led to a loss of 521.34 ETH in total. The stolen assets were all converted into ETH and then laundered into Tornado Cash.

A part of the stolen funds, worth 21.34 ETH (amounting to $52,680), was deposited at eXch exchange through several addresses. The founder has issued an on-chain message offering a 10% bounty for returning funds.

Attacker Address:

https://etherscan.io/address/0x112f27dD…5761aF

Malicious Transactions:

https://etherscan.io/tx/0x7d3f66bd…fbbedf

https://etherscan.io/tx/0xbbbc44bb…0593a3

TornadoCash Deposit Transactions:

https://etherscan.io/tx/0xb4d6f5b0…a1c13e

https://etherscan.io/tx/0x687ecca1…3fa8e2

https://etherscan.io/tx/0x1e3f7f58…79360a

Founder's Message:

https://etherscan.io/tx/0x11996972…24e5dc

Case & protocol details

Classification Other / Key Compromise
Protocol Type Exploit/Access control
Official Website www.samudai.xyz/
Protocol Twitter/X @samudaixyz

Evidence & learning

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.