Arkadiko governance attack on Stacks (2026-10-22): 2.07M stSTX and 1.65 sBTC drained via malicious proposal #12; attacker and cash-out wallets
- Scam type: Hack
- Chain: Stacks
- Project or site name: Arkadiko
- Incident date: 2026-10-22
- Reported: 2026-10-24
- Last updated: 2026-10-24
On 2026-10-22 at 11:04 AM CT (16:04 UTC), a malicious contract passed Arkadiko governance as proposal #12, and minutes later an attacker used it to drain Arkadiko's vaults on Stacks, the Bitcoin layer 2. On-chain, 2,065,481.48 stSTX and 1.65221692 sBTC left the Arkadiko vault pool and 1,500,354,999 unbacked USDA were minted. Arkadiko (@ArkadikoFinance) confirmed the governance attack at 3:29 PM CT, estimated the loss at about 2 million stSTX and 1.65 sBTC, and said USDA lost its peg. It said it disabled the malicious contract, paused governance, redemptions and liquidations, asked exchanges…
Other addresses in this report: SP1V1BN459229EJG94YYBJDN50ADVB6MXVVEZ0G34, SP1V1BN459229EJG94YYBJDN50ADVB6MXVVEZ0G34.arkadiko-vaults-operations-v2-1, SP1JB85VZ7TX7SWSNW0PHV115YPQE5QXJDG6P60AQ, SPR3KWTVF3ZKPW256Y6233WFJVHHMX92PQ0FSCY1, SP26KHWDJ2YS68FVH3NZP12Y9H3RZN3SC1R6KJ18W, SP1G5YVFZKWNQQH8S559XMTESMFS700E7A1820G2W, SP34J660PJR47BAJ9ADJEA1YVMBGCTXBG4ATC4T7A, SP1GC22GPRZY45WPVHK2KTV5G7MY720KGAJ4F7AW4, SPD554R29M3055EEJPWCWSDBT5301HNY0EX579X2, SP1DQQQJ37N79EZYFPBCX8R6W7N7662ZFT87NMBJ0, SPZT7C2HHH6P0EEMJZXATKBE8YYRRNY9EN9H1MKJ, SP1BPT084EN10WTVGYNGF9J2ZF1F2CZJJGNH0NDAG, SP1BPT084EN10WTVGYNGF9J2ZF1F2CZJJGNH0NDAG.stackswap-swap-v6a, SP2P5BGJX83KQMBQ0YNQAS0M7H80XKFRW818PJ3XR, SPCR3KXAJKJ978NABDG62322FDDDXHP89GNE7V3V, SPVXCZ095X8F92P1Q2GG7SF8J4736RB3M9Y19JR2, SPPV98YX25YPDSQ29YMXKY9R8WSMJSK81SCC2AST, SP36JJ2WTJAZ6G827QRB5WWG71W8TW5ZKJBYJ0ZQW, SP9678AKCE5ACM7JDV3J8JYJENRW7YX228YQWYJJ, SP3H9QJ0XYVM80KPDR9S1A136YFPTANRTWP7SG2Z9 and 47 more