Tapioca DAO
Last changed 2026-10-10 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 12 → 47. Problems weighed by who is responsible: incidents the subject suffered −16, problems around the subject, caused by others −1.6. Version history →
Why this score
| Every page starts at | 65 |
| Incidents it suffered (e.g. hacks) | -16 |
| Problems around it, caused by others | -1.6 |
| Sum | 47 |
Score: 47/100 (kept between 0 and 100)
How scoring works →Summary
Tapioca DAO is an omnichain DeFi money market built on LayerZero, offering a CDP stablecoin (USDO) and isolated lending markets (Singularity/Big Bang) across Arbitrum and BNB Chain. On October 18, 2024, the protocol suffered a critical security breach when a team member was targeted by a social engineering attack attributed to North Korea's Contagious Interview campaign, resulting in private key compromise, drainage of TAP token vesting contracts, and the minting of 5 quintillion USDO. Approximately $4.4–4.7 million was stolen before a partial counter-exploit recovered roughly 996 ETH (~$2.7 million), leaving the protocol treasury down approximately 45% and the TAP token price collapsed over 95%.
Connected Entities
12 entities · 60 linked investigations- Nexera→mentioned with→Uniswap(65%)
- Serenity Shield→mentioned with→ZachXBT(70%)
- Nexera→mentioned with→Binance(60%)
- Nexera→mentioned with→ZachXBT(70%)
- Nexera→mentioned with→Concentric(75%)
- Serenity Shield→mentioned with→Concentric(80%)
- ZachXBT→mentioned with→Binance(60%)
- Concentric→mentioned with→ZachXBT(70%)
- Concentric→mentioned with→Arbitrum(75%)
- Tapioca DAO→mentioned with→Wormhole(70%)
- + 25 more
Timeline(8 events)
18 October 2024
Tapioca DAO exploit begins at approximately 12:00 PM UK time. Attacker, having compromised 0xRektora's private keys via social engineering, triggers Emergency Rescue function on TAP vesting contract and withdraws approximately 28–30 million TAP tokens.
18 October 2024
TAP token price collapses 93–97%, from approximately $1.43 to under $0.05, as attacker swaps 30 million TAP for 591 ETH.
18 October 2024
Attacker compromises USDO stablecoin contract and mints approximately 5 quintillion USDO. Approximately $2.8 million USDC and $1.58 million ETH drained from USDO/USDC Uniswap pool. Stolen assets bridged from Arbitrum to BNB Chain via Stargate.
18 October 2024
Tapioca Foundation, with assistance from SEAL911 and EnigmaDarkLabs/Fuzzland, executes counter-exploit recovering 996 ETH (~$2.7 million) from attacker before it could be laundered.
18 October 2024
ZachXBT publicly links the Tapioca DAO attack to a broader pattern of DeFi hacks (Nexera, Concentric, Masa, SpaceCatch, Reach, Serenity Shield, MurAll) attributed to North Korean state-sponsored threat actors using Contagious Interview / fake job scam vectors.
19 October 2024
Tapioca DAO offers attacker a $1 million USDT white-hat bounty with a deadline of October 22, 2024, in exchange for returning approximately $3.7 million in stolen funds.
Decision Log
- slot 455360483 · hash 36cLzPqRfktQysv3xCRp7dCxtCbVZprWT9VjmDwvGCmZ
- slot 420042408 · hash Cw3uKFmFD2iwsvqPfzcMwAuk82eB4LwqgzUKfit64s2u
This investigation is cryptographically anchored to the Solana blockchain (2 decisions).
model: claude-sonnet
generated: 5/4/2026, 2:54:28 AM
last updated: 10/10/2026, 6:41:26 PM
6 viewsavoid.net — verified advice for a post-truth world