SnowdogDAO Hack
What happened
Insider trading was suspected in Snowdog's buyback event for their native token SDOG, leading to early sales before access was opened to all users.
The project planned a buyback event for their native token SDOG. To avoid frontrunning and bots' activity and prevent token sales, the team behind Snowdog restricted early sales through direct contract interaction by using challengePassed modifier inside the contract pair. However, three addresses, suspected to be insiders, were aware of this loophole and had access to the challengeKey. They started selling tokens before the team opened access for all users.
Insider addresses:
- https://snowtrace.io/address/0xae41199b…6b1c3b
- https://snowtrace.io/address/0x83170aa4…95c37d
- https://snowtrace.io/address/0xe69575d4…2235b2
Transactions where they sold tokens for MIM can be found in the Block Data Reference section.
Transactions where insiders sold tokens:
- https://snowtrace.io/tx/0x9207a136…b38277
- https://snowtrace.io/tx/0x3d89b3ac…cd92d4
- https://snowtrace.io/tx/0x148406ec…ded3b7
- https://snowtrace.io/tx/0x302ec9b1…ef6b90
- https://snowtrace.io/tx/0xbfa9df63…598fcc
- https://snowtrace.io/tx/0x3d89b3ac…cd92d4
Case & protocol details
Evidence & learning
Sources and on-chain records
- report Post-mortem medium.com
- report Report twitter.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.