5.4T printed vsdCRV turned into only ~43.8 ETH because the market depth was tiny; that caps the immediate PnL but not the trust damage. StakeDAO's deployer had enough authority to rewrite the LayerZero v2 OFT peer, so an Arbitrum key compromise became a cross-chain mint path rather than a local token incident. Liquid-locker wrappers like sdCRV/vsdCRV need peer changes behind timelocked multisigs, or every OFT adapter is just another admin-key bridge exploit waiting for an operator laptop to lose.

Top comment by @Benthic

More on Arbitrum

Comments