shield Signature Attack · $50K loss

Forensic report: ODOS signature attack on Base cost $50K (January 2025)

On January 2025, ODOS was exploited in a signature attack on Base, resulting in approximately $50K in losses. That makes the ODOS exploit the 269th largest DeFi incident out of 690 documented in our archive.

Attack Mechanics: How the ODOS Signature Attack Played Out

Exploit Class Applied to ODOS

The ODOS incident on January 23, 2025 is classified as a Signature Attack. Replayed, malleable, or forged signatures bypass access controls. In the full archive, ODOS is 1 of 5 documented signature attack incidents.

ODOS in Context

At $50K, the ODOS exploit is a minor (<$1M) event compared to the largest same-class incident in our archive — AzukiDAO (2023) at $69K.

Prior Signature Attack Before ODOS

The nearest signature attack incident before ODOS was TCH, 252 days earlier on May 16, 2024 ($18K lost). The same exploit class surfaced again within the signature attack attack surface.

ODOS Vulnerability Signature

The primary source categorises the ODOS exploit specifically as “invalid-signature-verification”. This narrower label is entity-specific: it reflects how the ODOS contract failed, rather than the broad signature attack pattern alone.

Target Chain: Base

The vulnerable ODOS contract was deployed on Base — one of 3 documented incidents on Base. This determines the block cadence, mempool, and forensic tooling available to investigators.

Impact & Recovery for ODOS

ODOS Loss Figure

The ODOS exploit caused $50,000 in losses — a minor (<$1M) incident and the 39th largest of 96 documented in 2025.

Where ODOS Sits Among Signature Attack Attacks

Ranked by loss size, ODOS is the 2nd largest of 5 signature attack incidents documented. That puts the ODOS loss above the class average of $36.5K.

Timeline Since the ODOS Incident

The ODOS exploit occurred 1.2 years ago (446 days). The contract, its fork-block, and the attack transaction remain on-chain and forensically reproducible.

Primary Reference for ODOS

Public post-mortem / on-chain analysis for the ODOS incident: view source.

FAQ

How much did ODOS lose?

The ODOS exploit in January 2025 resulted in $50,000 in losses — the 39th largest of 96 DeFi incidents that year.

When did the ODOS hack happen?

The ODOS exploit was recorded on January 23, 2025 — 446 days ago.

What type of exploit hit ODOS?

The ODOS incident is classified as a Signature Attack. Replayed, malleable, or forged signatures bypass access controls.

Which blockchain was ODOS deployed on?

The ODOS contract was deployed on Base, one of 3 documented incidents on that chain.

How does ODOS compare to the largest Signature Attack attack?

The largest signature attack incident in our archive is AzukiDAO (2023) at $69K. The ODOS loss is $50K.

Discuss the privacy and security advantages of using zk-SNARKs in payment channels.

Zk-SNARKs enable transactions that are both anonymous and secure, protecting the amount and parties involved.

How does the proposed cross-chain protocol provide offline tolerance?

The protocol is encoded into a P2SH script, allowing it to function even when participants are offline.