A governance vote handed an attacker control of Hifi Finance’s decentralized autonomous organization, blockchain researcher Spreek said, before about $1 million in user collateral was transferred.
Spreek said four transfers funded through Tornado Cash were used in a last-minute ballot. The vote shifted DAO governance control to the attacker, who then created 25 million governance tokens, the researcher said.
Spreek’s account places the collateral transfer after the vote and token issuance. The figures refer to different measures: the number of tokens created and the approximate value of the user collateral moved.
