Polygon’s stablecoin protocol QiDAO suffers $13 million exploit on third party contract

The latest cryptocurrency hack has targetted Polygon‘s native stablecoin protocol Qi DAO, as its Suplerfluid vesting contract faced an exploit earlier today. The hackers got away with a reported $13 million in various tokens, leading to its governance token Qi’s price falling a sharp 68% in no time.

QiDAO announced the hack on Twitter earlier while ensuring users that their funds were safe as the protocol itself had not been affected.

This was followed by an acknowledgment by Superfluid as well, which noted on Twitter that the vesting contract for QiDAO had been compromised. It also warned users from using Superfluid smart contracts for the time being. The protocol acts as an on-chain bridge for users to transfer funds between wallets in real-time.

Blockchain analytics firm SlowMist tracked the hacker’s address and found that it had made a profit of more than $13 million, including QI, WETH, USDC, SDT, MOCA, STACK, sdam3CRV and MATIC. The attacker’s address had a balance of 11,016.60 MATIC, 507,930.87 MOCA, 2,707.91 ETH, and 43,910.39 DAI per SlowMist’s latest update.

Source: SlowMist/Twitter

While user funds and vaults have remained safe, it appears that those lost belong to early-stage investors along with team vested tokens. For now, Qi bridging is temporarily paused by the protocol as it is investigating the bug.

Nevertheless, the price of QiDAO’s governance token dipped 68.5% after the hackers started dumping the stolen QI Quickswap DEX with high slippage. The price dropped from $1.24 to $0.18 at the time. Albeit, a recovery in price could already be noted, as enthusiastic investors bought the dip

The hack has come at the heels of Polygon completing a successful investment round yesterday worth $450 million. The round was led by Sequoia Capital India and marks the top Venture Capital firm’s first foray into the industry.