Stake DAO Association publicly identifies vsdCRV exploit perpetrator and demands return of 37.029 ETH by September 15th 2026 or faces legal action.
Security & Exploits ·
Stake DAO Association has publicly identified the perpetrator of a vsdCRV exploit that occurred on May 27th 2026 and is demanding the return of 37.029 ETH. The association stated via an on-chain message that it has established the individual's identity, including name and place of residence, and possesses a completed evidentiary file following an off-chain investigation.
The organization initially extended a white-hat offer on June 1st 2026, which was not accepted. Stake DAO Association is now offering a final settlement: if the full amount of 37.029 ETH is returned to a specified Ethereum address by September 15th 2026 at 6:00:00 PM UTC, the association will treat the retained balance as a white-hat bounty and forgo civil claims related to the exploit.
The association reserved the right to report the matter to competent authorities regardless of the outcome and stated that absent full receipt by the deadline, it will pursue all available legal remedies without further notice. The terms of the offer are non-negotiable and do not bind third parties.