A hacker exploited StakeDAO by minting 5.4 trillion tokens without backing, using a stolen private key and a forged LayerZero message. The attacker successfully converted these tokens into $91,000 worth of Ethereum before disappearing. This incident highlights ongoing vulnerabilities in DeFi platforms, emphasizing the need for enhanced security measures.