shield Access Control · $319K loss

DAO_SoulMate January 2024 Access Control: $319K stolen

On January 2024, DAO_SoulMate was exploited in a access control, resulting in approximately $319K in losses. That makes the DAO_SoulMate exploit the 142nd largest DeFi incident out of 690 documented in our archive.

Attack Mechanics: How the DAO_SoulMate Access Control Played Out

Exploit Class Applied to DAO_SoulMate

The DAO_SoulMate incident on January 22, 2024 is classified as a Access Control. A privileged function lacks a proper authorisation check, letting an unauthorised caller execute it. In the full archive, DAO_SoulMate is 1 of 77 documented access control incidents.

DAO_SoulMate in Context

At $319K, the DAO_SoulMate exploit is a minor (<$1M) event compared to the largest same-class incident in our archive — Corkprotocol (2025) at $12M.

Prior Access Control Before DAO_SoulMate

The nearest access control incident before DAO_SoulMate was Shell_MEV_0xa898, 7 days earlier on January 15, 2024 ($1K lost). The same exploit class surfaced again within the access control attack surface.

DAO_SoulMate Vulnerability Signature

The primary source categorises the DAO_SoulMate exploit specifically as “Incorrect Access Control”. This narrower label is entity-specific: it reflects how the DAO_SoulMate contract failed, rather than the broad access control pattern alone.

Impact & Recovery for DAO_SoulMate

DAO_SoulMate Loss Figure

The DAO_SoulMate exploit caused $319,000 in losses — a minor (<$1M) incident and the 37th largest of 188 documented in 2024. This single incident represents 0.1% of all tracked losses that year.

Where DAO_SoulMate Sits Among Access Control Attacks

Ranked by loss size, DAO_SoulMate is the 14th largest of 77 access control incidents documented. That puts the DAO_SoulMate loss below the class average of $636K.

Timeline Since the DAO_SoulMate Incident

The DAO_SoulMate exploit occurred 2.2 years ago (813 days). The contract, its fork-block, and the attack transaction remain on-chain and forensically reproducible.

Primary Reference for DAO_SoulMate

Public post-mortem / on-chain analysis for the DAO_SoulMate incident: view source.

FAQ

How much did DAO_SoulMate lose?

The DAO_SoulMate exploit in January 2024 resulted in $319,000 in losses — the 37th largest of 188 DeFi incidents that year.

When did the DAO_SoulMate hack happen?

The DAO_SoulMate exploit was recorded on January 22, 2024 — 813 days ago.

What type of exploit hit DAO_SoulMate?

The DAO_SoulMate incident is classified as a Access Control. A privileged function lacks a proper authorisation check, letting an unauthorised caller execute it.

How common is the Access Control pattern seen at DAO_SoulMate?

Our archive contains 77 documented access control incidents. The DAO_SoulMate incident is one of them.

How does DAO_SoulMate compare to the largest Access Control attack?

The largest access control incident in our archive is Corkprotocol (2025) at $12M. The DAO_SoulMate loss is $319K.

What are the two components combined in the pre-adaptor signature scheme?

The multi-signature and adaptor signature schemes.

How does the system address the challenge of scalability?

By leveraging blockchain platforms designed for high transaction throughput and integrating off-chain storage solutions.