Cointime

Download App
iOS & Android

PeopleDAO Community Treasury Exploited of 76 ETH in Monthly Reward Payout

Cointime Official

The PeopleDAO Community Treasury on Safe has fallen prey to a social engineering attack during its monthly reward payout on March 6th, losing 76 ETH (~$120,000) in the process.

According to PeopleDAO, the hack was not related to the $PEOPLE token contract. PeopleDAO collects monthly contributor reward information through a Google Form, and the accounting lead mistakenly shared an editable link on a public Discord channel, which the hacker gained access to. The hacker then inserted a 76 ETH payment to their own address in the sheet, and made it invisible. The team leads did not notice the malicious transfer during recheck. The CSV with the injected data was then downloaded and submitted to the CSV Airdrop tool in Safe to distribute rewards. As the transaction contained 80 transfers, 6 out of 9 multisig signers did not notice the fraudulent transfer, signed and executed the transaction, thereby sending 76 ETH to the hacker's address. The exploited fund was deposited into two exchanges, HitBTC and Binance.

PeopleDAO has reported the fraud case to the FBI and the FTC and is working with various organizations to find the hacker and recover the funds. They have also offered a 10% white hat bounty to the hacker if they return the stolen fund in the next 48 hours. 

Full thread:
1/10 Bad news: PeopleDAO Community Treasury on @safe has recently been exploited of 76 ETH (~$120,000) via social engineering during monthly reward payout on March 6th. This expoloit is not related to $PEOPLE token contract. Details below:

2/10 PeopleDAO collects monthly contributor reward information via Google Form. The accounting lead mistakenly shared a link with edit access in a public channel in discord. The hacker gained edit role via the link.

3/10 After gaining the access, the hacker inserted a 76 ETH payment to himself in the sheet, and set it invisible (the missing 80th row below).

4/10 Because the malicious is hidden, team leads did not find it during recheck.

Then the csv with the insertef data was downloaded, and submitted to CSV Airdrop tool in Safe to distribute the reward.

5/10 Because there are 80 transfers in the tx, 6 out of 9 multisig signers did not notice the malicious transfer, signed and executed the tx, sending 76 ETH to the hacker's address. Txhash: https://etherscan.io/tx/0x4bd2f6981b6b3005da8730bc14bfbbf36bd9faab6b5976012830c6235ea0afcf6… Hacker address: 0x80f751a95f678255cae9a280d4f25e5b926eae366

6/10 Working with @SlowMist_Team and @zachxbt , we find the exploited fund was then deposited into two exchanges, HitBTC @hitbtc and Binance @binance@cz_binance . We contacted them immediately after the loss.

7/10 Moreover, we have reported the fraud case to FBI @FBI and FTC (Federal Trade commision) @FTC . We will keep working with @FBI@FTC@hitbtc@binance@cz_binance@SlowMist_Team@zachxbt@Google to find the hacker and recover the fund.

8/10 We offer the hacker a 10% white hat bounty if he/she would return the stolen fund in next 48 hrs.

9/10 The lesson learned: 1. Strictly control the access of the accounting sheet. 2. Multisig signers should check every details before signing. 3. We need a better UI on @safe to show the gross amount of the transaction, such as the total amount of $ETH and $PEOPLE transferred.

10/10 Thanks to the support from community members and contributors, PeopleDAO will operate as usual, building For The People.

We highly recommend other DAOs learn from this case and improve their accounting and treasury management!

Comments

All Comments

Recommended for you

  • BTC Surpasses $87,000

    Market data shows that BTC has surpassed $87,000, currently priced at $87,005.02, with a 24-hour increase of 7.23%. The market is highly volatile, so please ensure proper risk management.

  • ETH Surpasses $2800

    Market data shows that ETH has surpassed $2800, currently priced at $2801.5, with a 24-hour increase of 6.44%. The market is highly volatile, so please ensure proper risk management.

  • Fed's Musalem: Further Rate Hikes May Be Needed to Curb Inflation

    On September 22, Fed's Musalem stated on Monday that due to strong demand and commodity price shocks extending beyond the oil sector, the Federal Reserve may need to further raise interest rates to reduce inflation. He emphasized that the Fed should act sooner rather than wait. Musalem remarked, "Persistent demand and recurring supply pressures are still exacerbating inflation risks. I believe that without further policy measures to curb inflation, in 18 months, inflation is likely to be significantly above our 2% target rather than reaching it. I think policies must impose meaningful constraints on inflation so that the Fed can achieve its inflation target in about a year and a half, allowing time for the tightening policies to impact the economy." He also stated, "Compared to later, larger, and potentially more abrupt policy measures, earlier and gradual policy tightening is more appropriate and causes less shock to the economy." Musalem pointed out that inflation "is not a risk; it already exists," and even excluding the effects of oil and other supply-related factors, the underlying inflation rate could still be several percentage points above the Fed's target and is "heading in the wrong direction."

  • BitMine Increases ETH Holdings by 27,562, Total Holdings Exceed 5.98 Million ETH

    As of September 20, Eastern Time, BitMine's total cryptocurrency and cash holdings, including the 'Moon Landing Plan', amount to $17.1 billion. BitMine holds 5,983,940 ETH (an increase of 27,562 ETH from last week), which represents 4.9% of the total Ethereum supply of 120.7 million ETH. Additionally, it holds 212 BTC, shares in Beast Industries valued at $180 million, shares in Eightco Holdings (NASDAQ: ORBS) worth $105 million, and $714 million in unsecured cash. By September 20, 2026, the total amount of ETH staked by BitMine will reach 5,067,309 ETH (valued at $2,688 per ETH, totaling $13.6 billion).

  • Strive Increases BTC Holdings by 1,355 at an Average Price of $79,475

    On September 21, Strive CEO Matt Cole disclosed that the company purchased 1,355 BTC for $107.7 million, with an average cost of $79,475 per BTC, bringing its total BTC holdings to 26,355.

  • Strategy Acquires 950 BTC and Repurchases $174 Million in STRC

    On September 21, Strategy purchased 950 bitcoins at a price of $79,670 each (totaling $75.7 million) last week and repurchased $174 million worth of STRC. As of September 20, 2026, Strategy holds 846,000 BTC and $6.09 billion in USD assets. Strategy has been actively advancing its STRC repurchase plan as part of its digital credit capital strategy.

  • BTC Surpasses $85,000

    Market data shows that BTC has surpassed $85,000, currently priced at $85,036.28, with a 24-hour increase of 5.61%. The market is experiencing significant volatility, so please ensure proper risk management.

  • BTC Breaks $85,000

    Market data shows that BTC has surpassed $85,000, currently priced at $85,036.28, with a 24-hour increase of 5.61%. The market is experiencing significant volatility, so please ensure proper risk management.

  • Over $260 Million Liquidated in the Past Hour, Primarily Short Positions

    Data shows that in the past hour, the total liquidation amount across the network reached $260 million, with approximately $252 million coming from short positions and about $8.3253 million from long positions.

  • ETH Surpasses $2700

    Market data shows that ETH has surpassed $2700, currently priced at $2700.35, with a 24-hour increase of 4.75%. The market is experiencing significant volatility, so please ensure proper risk management.