Critical security flaw found in Solana-based daos.fun

Developer Shaw identified a critical security vulnerability in the mainnet program of daos.fun, a Solana-based platform for launching investment funds. Shaw reverse-engineered the platform's previously private program, reconstructed the code to match the original, and published it on GitHub. The reconstructed program produced the same hash as the original binary, confirming the vulnerability during a security review. No exploitation of the flaw or impact on user assets has been reported. In response, daos.fun has suspended platform maintenance and the creation of new DAOs and tokens, while existing tokens remain available for trading. The published code does not include a fix for the vulnerability.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.