DeFi protocol BadgerDAO is investigating as researchers say $120M was stolen from users after its front end was compromised
Quick Take — DeFi protocol BadgerDAO was exploited earlier today for $120 million. — It appears that its front end was compromised and users were tricked into making unwanted transactions.
Context & Ripple Effects
BadgerDAO's loss is the latest in a rapid string of nine-figure DeFi exploits: hackers pulled an estimated $130M from Cream Finance in a flash loan attack in late October — the platform's third hit of the year — and bZx lost an estimated $55M in early November after spear-phishing an employee for two private keys.
What distinguishes the BadgerDAO incident is the vector: rather than broken contract code or stolen keys, researchers say the protocol's web front end was compromised and users were tricked into signing unwanted transactions — meaning the interface itself became the attack surface.
First-order effects
- BadgerDAO users who approved transactions through the compromised front end are directly exposed to the reported $120M theft, and the protocol has halted normal operations while it investigates.
Second-order effects
- Every DeFi protocol running a hosted web interface now faces the same threat model bZx exposed with its employee phishing breach — attackers targeting the human and operational layer around contracts, not just the code — forcing teams to spend on front-end integrity and transaction-simulation warnings.
Third-order effects
- If front-end and social-engineering attacks keep outpacing contract exploits, DeFi security spending shifts from audits of on-chain code toward securing the off-chain stack — interfaces, key management, and staff — reshaping what 'audited' means for users deciding where funds are safe.
The trend: DeFi's biggest losses are migrating from smart-contract bugs to compromised front ends and phished operators, making the off-chain layer the industry's new attack surface.