Solana news: Ten Years Since The DAO Exploit: Lessons for Blockchain Security
The DAO Exploit: A Decade Later
On 17 June 2016, a vulnerability in The DAO's smart contract allowed an attacker to drain over 3.6 million ETH, worth about one-third of the project's $150 million fund. This event remains one of the most significant incidents in blockchain history, leading to a split in the Ethereum community and the creation of two separate blockchains: Ethereum and Ethereum Classic.
How the Exploit Happened
The DAO was designed as a decentralised venture capital fund, but a reentrancy bug in its code allowed repeated withdrawals before balances were updated. The attacker moved funds into a subsidiary contract, triggering a crisis that forced the Ethereum community to act quickly.
The Hard Fork and Its Aftermath
In July 2016, Ethereum underwent a hard fork to reverse the exploit and return funds to investors. The original chain, Ethereum Classic, continued independently, upholding the principle of blockchain immutability. This division sparked ongoing debates about governance and intervention in decentralised systems.
Unclaimed Funds and Security Initiatives
Approximately 75,000 ETH remained unclaimed after the fork. In early 2026, these funds were allocated to TheDAO Security Fund, valued at around $220 million, to support security initiatives within the Ethereum ecosystem. The fund is overseen by notable figures such as Vitalik Buterin and Griff Green.
Ongoing Impact on Blockchain Security
The reentrancy vulnerability exploited in The DAO incident remains a key focus for smart contract auditors and developers. Lessons from this exploit continue to inform best practices in blockchain security, including on platforms like Solana.
Why This Matters for Solana and the UK
For Solana developers and the UK blockchain community, the DAO exploit underscores the importance of robust smart contract security and transparent governance. As the UK explores regulatory frameworks and local builders innovate on Solana, learning from past incidents like The DAO can help mitigate risks and strengthen trust in decentralised finance and Web3 applications.
