Incident case file

Stake DAO — Oracle Message Spoofing (Cross-Chain)

Incident date March 12, 2026

0 views

UnknownArbitrumBaseOracle manipulationCluster: STAKEDAO-ARB-2026-03

Estimated loss

$176K

Victims identified

Victim group joining is coming soon.

Investigation

55%

Facts and investigation

Attacker: TODO

Funds moved to: TODO

TODO

Timeline: Attacker exploited Stake DAO's dual-chain deployment on Arbitrum and Base by submitting falsified oracle messages. The spoofed messages manipulated asset prices on the protocol, allowing the attacker to extract approximately $176,000 through price-discrepancy arbitrage.

Sources and coverage

Articlehacked.slowmist.iohttps://hacked.slowmist.io/
Articlesmartcontractshacking.comhttps://smartcontractshacking.com/hacks/stake-dao-hack-2026

Victim testimonies

No testimonies yet.

+ Add my testimony → (coming soon)