An exploit on MALT on the Polygon network resulted in the draining of approximately 13,440 DAI from the Capital Source treasury. The exploit involved unisolated treasury rebalance capital, allowing a negligible swap to yield a disproportionate MALT output.
An attacker exploited a permissionless function in DAOstack's newOrganization to hijack an existing Reputation contract. The attacker drained the Genesis Alpha treasury, which held 4.025 ETH, by minting 20,000 REP and gaining full control.
An exploit on YamFinance involved a dormant DAO quorum governance takeover, draining legacy UMA farming contracts. The estimated loss is approximately $121K, consisting of WETH and UMA tokens.
A proof-of-concept exploit for GDC has been detailed, involving a chained EOA bypass, liquidity misclassification, burn mismatch, and a reentrant tax-free exit on BNB Chain, resulting in a loss of approximately 35.34 BNB.