BadgerDAO

Exploit & recovery timeline

1. Dec 1, 2021 · 23:00 UTC
   Attack preparation

   Attacker wallets funded and staged ahead of the frontend hijack exploit against BadgerDAO.

2. Dec 2, 2021 · 01:00 UTC
   Exploit executed

   $120.0M drained from BadgerDAO on Ethereum via Frontend Hijack.

3. Dec 2, 2021 · 02:00 UTC
   Detected by PeckShield

   PeckShield flagged the anomalous transactions and published an initial alert.

4. Dec 2, 2021 · 05:00 UTC
   Protocol response

   BadgerDAO paused affected contracts or withdrawals and began tracing outbound flows.

5. Dec 3, 2021 · 01:00 UTC
   Funds traced

   Stolen assets followed through mixers, bridges, and exchange deposit addresses.

6. Dec 9, 2021 · 01:00 UTC
   Partial recovery

   $9.0M of $120.0M recovered (8%); the remainder is still unaccounted for.

7. Jan 1, 2022 · 01:00 UTC
   Investigation continues

   Remaining funds monitored across chains with exchange partners notified.