Question 1

How did the attacker exploit Token of Power?

Accepted Answer

The attacker acquired more than 50% of TOP's 16,384-token supply, then used Aragon's voting app to create, approve, and execute a governance proposal in a single transaction that minted new TOP tokens to their address, which were swapped for 944.2 WETH from a Balancer V1 pool.

Question 2

Was Balancer's protocol compromised in the attack?

Accepted Answer

No. Blockaid confirmed that the Balancer protocol itself was not the source of the vulnerability. The attacker used the TOP/WETH Balancer V1 BPool only as the exit point to convert minted tokens into WETH.

Question 3

How much was stolen and can the funds be recovered?

Accepted Answer

Approximately $1.58 million in WETH was drained. Recovery is complicated by the fact that the attacker's wallet was funded through Tornado Cash, the sanctioned mixing protocol.

TOP

Attacker cleans out $1.6M from Token of Power (TOP) in Aragon DAO exploit

One sharp brief.
Every day.

TOP

Attacker cleans out $1.6M from Token of Power (TOP) in Aragon DAO exploit

One sharp brief.Every day.

One sharp brief.
Every day.