Back to dashboard
Friday, June 17, 2016 at 10:00 UTC

The DAO

Recursive call drained the DAO; chain forked to restore funds.

Recovered
Funds stolen
$60.00M
Recovered
$60.00M100%
Still outstanding
$0.00M
Chain
Ethereum
Category
DeFi
Attack vector
Reentrancy
Reported by
PeckShield
Incident ID
h2016-1

Exploit & recovery timeline

  1. Jun 17, 2016 · 08:00 UTC
    Attack preparation

    Attacker wallets funded and staged ahead of the reentrancy exploit against The DAO.

  2. Jun 17, 2016 · 10:00 UTC
    Exploit executed

    $60.0M drained from The DAO on Ethereum via Reentrancy.

  3. Jun 17, 2016 · 11:00 UTC
    Detected by PeckShield

    PeckShield flagged the anomalous transactions and published an initial alert.

  4. Jun 17, 2016 · 14:00 UTC
    Protocol response

    The DAO paused affected contracts or withdrawals and began tracing outbound flows.

  5. Jun 18, 2016 · 10:00 UTC
    Funds traced

    Stolen assets followed through mixers, bridges, and exchange deposit addresses.

  6. Jun 24, 2016 · 10:00 UTC
    Full recovery

    $60.0M returned to users — negotiation, freezes, or a whitehat return closed the incident.