← Tapioca DAO1 decision on this page
Audit log
Every state-changing event for Tapioca DAO: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.
- #1publishby system:backfill2026-05-16 03:55:56ZScore: ? → ? (no score change)anchoranchored
- chain
- ●mainnet-betaslot 420,042,408
- sig
rXLbxGrSoZpT…B67ZncEiexplorer ↗- hash
Cw3uKFmFD2iw…fit64s2usha256 → base58
verifying row…full verify ↗canonical bytes (4218 B) ▸
{"actor":"system:backfill","investigation_id":"7c6a2e44-8a52-487b-9658-ce97ab1002d8","kind":"publish","page_slug":"tapioca-dao","published_at":"2026-05-16T03:55:56.320Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Tapioca DAO","sections":[{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]}],"sources_used":[],"summary":"Tapioca DAO is an omnichain DeFi money market built on LayerZero, offering a CDP stablecoin (USDO) and isolated lending markets (Singularity/Big Bang) across Arbitrum and BNB Chain. On October 18, 2024, the protocol suffered a critical security breach when a team member was targeted by a social engineering attack attributed to North Korea's Contagious Interview campaign, resulting in private key compromise, drainage of TAP token vesting contracts, and the minting of 5 quintillion USDO. Approximately $4.4–4.7 million was stolen before a partial counter-exploit recovered roughly 996 ETH (~$2.7 million), leaving the protocol treasury down approximately 45% and the TAP token price collapsed over 95%.","timeline":[{"date":"2024-10-18","event":"Tapioca DAO exploit begins at approximately 12:00 PM UK time. Attacker, having compromised 0xRektora's private keys via social engineering, triggers Emergency Rescue function on TAP vesting contract and withdraws approximately 28–30 million TAP tokens.","source":"","source_url":"https://www.dlnews.com/articles/defi/tapioca-dao-tap-token-plummets-after-founder-suffers-hack/"},{"date":"2024-10-18","event":"TAP token price collapses 93–97%, from approximately $1.43 to under $0.05, as attacker swaps 30 million TAP for 591 ETH.","source":"","source_url":"https://www.theblock.co/post/322061/tapioca-dao-stops-1000-eth-worth-2-7-million-from-being-stolen-following-exploit-that-drains-majority-of-its-funds"},{"date":"2024-10-18","event":"Attacker compromises USDO stablecoin contract and mints approximately 5 quintillion USDO. Approximately $2.8 million USDC and $1.58 million ETH drained from USDO/USDC Uniswap pool. Stolen assets bridged from Arbitrum to BNB Chain via Stargate.","source":"","source_url":"https://www.halborn.com/blog/post/explained-the-tapioca-dao-hack-october-2024"},{"date":"2024-10-18","event":"Tapioca Foundation, with assistance from SEAL911 and EnigmaDarkLabs/Fuzzland, executes counter-exploit recovering 996 ETH (~$2.7 million) from attacker before it could be laundered.","source":"","source_url":"https://www.dlnews.com/articles/defi/tapioca-dao-hacks-its-hacker-after-north-korean-attack/"},{"date":"2024-10-18","event":"ZachXBT publicly links the Tapioca DAO attack to a broader pattern of DeFi hacks (Nexera, Concentric, Masa, SpaceCatch, Reach, Serenity Shield, MurAll) attributed to North Korean state-sponsored threat actors using Contagious Interview / fake job scam vectors.","source":"","source_url":"https://cryptoslate.com/north-korea-links-suspected-in-5-million-breach-of-tapioca-dao/"},{"date":"2024-10-19","event":"Tapioca DAO offers attacker a $1 million USDT white-hat bounty with a deadline of October 22, 2024, in exchange for returning approximately $3.7 million in stolen funds.","source":"","source_url":"https://cryptohead.io/news/tapioca-dao-offers-1m-bounty-after-4-7m-hack/"},{"date":"2024-10-22","event":"Bounty deadline passes with no response from attacker. Tapioca DAO revokes the $1 million bounty offer.","source":"","source_url":"https://www.dlnews.com/articles/defi/tapioca-dao-hacks-its-hacker-after-north-korean-attack/"},{"date":"2024-10-22","event":"Tapioca Foundation publishes post-mortem on Mirror identifying attack as social engineering / Contagious Interview method and attributing it to a North Korean group. DAO treasury reported at approximately $4.2–4.8 million, down ~45% from pre-attack.","source":"","source_url":"https://rekt.news/tapioca-dao-rekt"}]},"v":1}Verify offline (run on your own machine)python -m src.verify_decision 56819241-4287-4cfd-a1c4-2eb5eb91d798
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine —
python -m src.verify_decision <event_id>.