Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·4a1ap9…mQfdSummary
Stake DAO is a non-custodial DeFi protocol built around liquid staking, yield aggregation, and governance participation via veToken mechanics. The protocol has suffered three documented security incidents since 2023, the most severe of which — a May 2026 deployer private key compromise — enabled the minting of 5.4 trillion fraudulent vsdCRV tokens on Arbitrum, resulting in roughly $91,000 in realized losses despite a nominally catastrophic exposure. Repeated operational security failures across a two-year span, including a March 2026 oracle exploit draining $176,000 from its Votemarket product, indicate a pattern of infrastructure risk that audited smart contracts alone have not resolved.
Connected Entities
13 entities · 60 linked investigations- Wasabi Protocol→mentioned with→Drift(75%)
- Wasabi Protocol→mentioned with→Ethereum(80%)
- Stake DAO→mentioned with→Drift(85%)
- Stake DAO→mentioned with→Balancer(60%)
- Stake DAO→mentioned with→Arbitrum(80%)
- Stake DAO→mentioned with→Kelp(60%)
- Stake DAO→mentioned with→Pendle(70%)
- Stake DAO→mentioned with→KyberSwap(60%)
- Stake DAO→mentioned with→Ethereum(80%)
- Balancer→mentioned with→Arbitrum(60%)
- + 23 more
Timeline(9 events)
20 January 2021
Stake DAO and SDT token launched on Ethereum mainnet; initial airdrop distributed.
4 February 2021
SDT reaches all-time high price of $16.63.
2022
Stake DAO adopts veTokenomic model; SDT lockable for veSDT governance rights.
15 June 2022
SDT reaches all-time low of $0.1750 amid broader crypto bear market.
2023
Two-year linear vesting for initial contributors and angel investors concludes.
29 November 2023
Stake DAO discloses LiquidityGauge deployment error on BNB Chain; approximately $4,011 in CAKE tokens stolen; affected users compensated via airdrop.
12 March 2026
Votemarket oracle contract exploited on Arbitrum and Base; approximately $176,000 drained across 54 reward campaigns. Governance proposal SDGP-65 introduced to reimburse affected users from treasury.
27 May 2026
Deployer private key compromised; attacker mints 5.4 trillion vsdCRV on Arbitrum via forged LayerZero v2 cross-chain message. Attacker realizes approximately $91,000 before DEX liquidity exhausted. Stake DAO shuts down vsdCRV bridge and urges users not to interact with vsdCRV.
28 May 2026
Stake DAO publishes follow-up statement assuring users that core products (Liquid Lockers, Boosted Yields, Votemarket, Morpho lending) are unaffected; vsdCRV backing on Ethereum mainnet confirmed secured.
Decision Log
- hash: AhUSnz9tiFkWTc6dU1hohmfu7Bve1sgG3MBTPxUh4WNC
- hash: EGB73CfsXnPgx6zDY6364eQNqqxvkQv8APiWcuoK1Uyx
- hash: ESZXryXwjtoCADpwDGfqBSbtf49dvFPV78q7J9SKGajd
This investigation is cryptographically anchored to the Solana blockchain (3 events). 25 of 28 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:18 AM
last updated: 8/30/2026, 3:55:36 PM
6 viewsavoid.net — verified advice for a post-truth world