Blockaid flags StakeDAO Arbitrum exploit tied to deployer key, 5,446,744,073,709 vsdCRV minted
Blockaid reported an exploit affecting StakeDAO on Arbitrum in which an attacker allegedly took control of the protocol's deployer private key. The incident involved a manipulated LayerZero cross-chain flow that minted 5,446,744,073,709 vsdCRV tokens before the attacker swapped tokens for ETH across multiple DEX routes and was estimated to have extracted roughly 43.9 ETH (about $91,000).