PeckShield: StakeDAO contract has an unlimited minting vulnerability; attackers have already transferred some assets to Ethereum.

On May 27th, PeckShield reported an anomaly in the Arbitrum contract associated with StakeDAO, leading to the minting of 5.4 trillion vsdCRV. The security team suspects an unlimited minting exploit. Attackers have converted some of the vsdCRV into approximately 43.781 ETH (around $91,000) and transferred it to the Ethereum address 0xeF3C…aa25 using a cross-chain bridge.