Security researchers say an exploit targeting Stake DAO is still active on Arbitrum.

They report that the attacker minted 5.4 trillion vsdCRV. The researchers also say the attacker is actively swapping those funds for ether.

That detail matters because it describes a live attack path, not a completed event. Minting a token supply on a live network can be paired with immediate liquidity extraction through swaps, which turns a smart-contract failure into fast-moving asset risk.

Why it matters

If the minted vsdCRV represents claims inside the affected system, the attack’s endgame looks less like “get tokens” and more like “convert to a more universally liquid asset.” Swapping for ether suggests the attacker wants funds that are easier to move off the venue and harder to unwind.

Arbitrum adds speed. Transactions settle on the chain the moment the swap executes. That compresses the window for monitoring, freezing, and other mitigations.

Market impact

The Block’s reported facts point to an operational security issue, not a market narrative. Tokenized governance and staking derivatives can get hit when an attacker can mint or otherwise manipulate assets and then route proceeds into base assets like ETH.

The immediate market effect for traders is uncertainty around token integrity. The longer it takes to confirm whether the minted vsdCRV can be redeemed, burned, or otherwise neutralized, the longer the market has to price “unknowns” into related assets.

What to watch next

Researchers are watching for how quickly the attacker can convert the minted vsdCRV into ether and whether the affected protocol can limit that flow.

Three practical questions will shape the next update.

  1. Whether additional minting continues after the initial 5.4 trillion vsdCRV figure.
  2. Whether the swaps are concentrated in a few venues or spread out, which affects monitoring and potential takedown options.
  3. Whether affected contracts can invalidate or quarantine the minted assets.

For now, the confirmed indicators The Block highlights are straightforward. Minting on Arbitrum and active swapping into ether.

Fact check table

ItemWhat researchers reportedNetwork
Minted tokens5.4 trillion vsdCRVArbitrum
Attacker activityActively swapping funds for etherArbitrum