2023.01.04 - MahaDAO

On January 4, 2023, the Hypernative platform detected a real-time exploit on the MahaDAO Protocol. At 19:01 UTC, the platform alerted of an ownership transfer on one of the protocol's contracts. Eight minutes later, at 19:09:11 UTC, the system alerted of an exploit in which the attacker stole 153 ETH. Another 153 ETH were stolen 36 seconds later. The theft was made possible due to the ownership gained by the attacker and thus entirely avoidable. The price drop occurred a few hours later, around midnight UTC. The Hypernative team promptly notified the MahaDAO team on Discord and helped them patch the vulnerable contracts.