Samudai Hack

Reported loss $1.3M
Ethereum
Access Control

What happened

Samudai DAO wallet compromise led to a loss of assets worth approximately $1,286,349 with funds laundered through Tornado Cash.

Samudai, a Decentralized Autonomous Organization (DAO), was exploited on November 10, 2023, presumably due to a compromise of their wallet access control. Both the multisignature wallet addresses of the protocol and the wallet of their founder appear to have been compromised, which led to a loss of 521.34 ETH in total. The stolen assets were all converted into ETH and then laundered into Tornado Cash.

A part of the stolen funds, worth 21.34 ETH (amounting to $52,680), was deposited at eXch exchange through several addresses. The founder has issued an on-chain message offering a 10% bounty for returning funds.

Attacker Address:

Address 0x112f…61aF

Malicious Transactions:

Tx 0x7d3f…bedf

Tx 0xbbbc…93a3

TornadoCash Deposit Transactions:

Tx 0xb4d6…c13e

Tx 0x687e…a8e2

Tx 0x1e3f…360a

Founder's Message:

Tx 0x1199…e5dc

Protocol details

Classification Other / Key Compromise
Protocol Type Exploit/Access control
Protocol links Website @samudaixyz

Understand the attack patterns

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.