Stake DAO hacked
StakeDAO was compromised on May 27, 2026, when an attacker stole the deployer EOA private key, leading to the forging of unbacked vsdCRV tokens and draining approximately $91K from a Curve pool. The core contracts were not at risk, and the product was deprecated.