Verify a decision

{"actor":"system:backfill","investigation_id":"7c6a2e44-8a52-487b-9658-ce97ab1002d8","kind":"publish","page_slug":"tapioca-dao","published_at":"2026-05-16T03:55:56.320Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Tapioca DAO","sections":[{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]}],"sources_used":[],"summary":"Tapioca DAO is an omnichain DeFi money market built on LayerZero, offering a CDP stablecoin (USDO) and isolated lending markets (Singularity/Big Bang) across Arbitrum and BNB Chain. On October 18, 2024, the protocol suffered a critical security breach when a team member was targeted by a social engineering attack attributed to North Korea's Contagious Interview campaign, resulting in private key compromise, drainage of TAP token vesting contracts, and the minting of 5 quintillion USDO. Approximately $4.4–4.7 million was stolen before a partial counter-exploit recovered roughly 996 ETH (~$2.7 million), leaving the protocol treasury down approximately 45% and the TAP token price collapsed over 95%.","timeline":[{"date":"2024-10-18","event":"Tapioca DAO exploit begins at approximately 12:00 PM UK time. Attacker, having compromised 0xRektora's private keys via social engineering, triggers Emergency Rescue function on TAP vesting contract and withdraws approximately 28–30 million TAP tokens.","source":"","source_url":"https://www.dlnews.com/articles/defi/tapioca-dao-tap-token-plummets-after-founder-suffers-hack/"},{"date":"2024-10-18","event":"TAP token price collapses 93–97%, from approximately $1.43 to under $0.05, as attacker swaps 30 million TAP for 591 ETH.","source":"","source_url":"https://www.theblock.co/post/322061/tapioca-dao-stops-1000-eth-worth-2-7-million-from-being-stolen-following-exploit-that-drains-majority-of-its-funds"},{"date":"2024-10-18","event":"Attacker compromises USDO stablecoin contract and mints approximately 5 quintillion USDO. Approximately $2.8 million USDC and $1.58 million ETH drained from USDO/USDC Uniswap pool. Stolen assets bridged from Arbitrum to BNB Chain via Stargate.","source":"","source_url":"https://www.halborn.com/blog/post/explained-the-tapioca-dao-hack-october-2024"},{"date":"2024-10-18","event":"Tapioca Foundation, with assistance from SEAL911 and EnigmaDarkLabs/Fuzzland, executes counter-exploit recovering 996 ETH (~$2.7 million) from attacker before it could be laundered.","source":"","source_url":"https://www.dlnews.com/articles/defi/tapioca-dao-hacks-its-hacker-after-north-korean-attack/"},{"date":"2024-10-18","event":"ZachXBT publicly links the Tapioca DAO attack to a broader pattern of DeFi hacks (Nexera, Concentric, Masa, SpaceCatch, Reach, Serenity Shield, MurAll) attributed to North Korean state-sponsored threat actors using Contagious Interview / fake job scam vectors.","source":"","source_url":"https://cryptoslate.com/north-korea-links-suspected-in-5-million-breach-of-tapioca-dao/"},{"date":"2024-10-19","event":"Tapioca DAO offers attacker a $1 million USDT white-hat bounty with a deadline of October 22, 2024, in exchange for returning approximately $3.7 million in stolen funds.","source":"","source_url":"https://cryptohead.io/news/tapioca-dao-offers-1m-bounty-after-4-7m-hack/"},{"date":"2024-10-22","event":"Bounty deadline passes with no response from attacker. Tapioca DAO revokes the $1 million bounty offer.","source":"","source_url":"https://www.dlnews.com/articles/defi/tapioca-dao-hacks-its-hacker-after-north-korean-attack/"},{"date":"2024-10-22","event":"Tapioca Foundation publishes post-mortem on Mirror identifying attack as social engineering / Contagious Interview method and attributing it to a North Korean group. DAO treasury reported at approximately $4.2–4.8 million, down ~45% from pre-attack.","source":"","source_url":"https://rekt.news/tapioca-dao-rekt"}]},"v":1}