GoPlus: The similarly named counterfeit contract of ListaDAO was attacked by hackers, but the official ListaDAO contract was not affected

By: rootdata|2026/04/17 16:42:01

In response to the recent attack on the "ListaDAOLiquidStakingVault" contract, ListaDAO officially released a statement clarifying that the attacked contract was not deployed by the official team, but rather was a counterfeit contract created by an unverified third party using a similar name. All official contracts of ListaDAO were not affected by this incident.

According to an in-depth analysis by the GoPlus security team, the attack occurred on April 16, 2026, and the root cause was a business logic flaw in the third-party contract. When a token transfer was made, it triggered the Dividend.setShares() function and altered the share accounting within the contract, which in turn affected the reward calculation in the claimReward() function. The attacker exploited this vulnerability to deplete the assets within the contract.

GoPlus reminds that since this logical flaw exists in both segments of the contract code mentioned above, any development projects that fork or reuse this code face a high risk of being exploited. It is recommended that relevant developers promptly conduct code inspections and fixes, and implement continuous auditing mechanisms to ensure the security of smart contracts.

-- Price

The era of AI hype has transitioned into an era of utility. As we move through Q2 2026, the market is no longer rewarding "narrative-only" projects. At WEEX Research, we are seeing a massive capital rotation into Decentralized Compute (DePIN) and Autonomous Agent coordination layers. This guide analyzes which AI tokens are capturing institutional liquidity and how to spot high-conviction setups in a maturing market.

Consumer-grade Crypto Global Survey: Users, Revenue, and Track Distribution

The number of active users of consumer-grade encryption has long reached tens of millions, but it is not in the sight of Silicon Valley and New York.

Prediction Markets Under Bias

Why do authoritative narratives always exclude prediction markets?

Stolen: $290 million, Three Parties Refusing to Acknowledge, Who Should Foot the Bill for the KelpDAO Incident Resolution?

The most dangerous scenario right now is that if ETH suddenly drops, Aave's bad debt could snowball even further.

ASTEROID Pumped 10,000x in Three Days, Is Meme Season Back on Ethereum?

「Space Dog」 Triggers ETH Mainnet Price Surge, Sparking SOL Community Anxiety

ChainCatcher Hong Kong Themed Forum Highlights: Decoding the Growth Engine Under the Integration of Crypto Assets and Smart Economy

The guests unanimously agreed that the understanding of Crypto value is shifting from "issuing tokens for the sake of issuing tokens" to pursuing sustainable business models, with a greater focus on capital efficiency, low costs, and 24-hour settlement, among other practical values.

Why can this institution still grow by 150% when the scale of leading crypto VCs has shrunk significantly?

The merger of the two major payment companies, Bridge and BVNK, establishes their industry position and revenue scale.

Anthropic's $1 trillion, compared to DeepSeek's $100 billion

The capital market has no faith, it only believes in the profit and loss statement.

Geopolitical Risk Persists, Is Bitcoin Becoming a Key Barometer?

Liquidity Still Unleashed, Which Force Will Dictate Pricing