Stake DAO has suffered a significant exploit on the Arbitrum network, resulting in the unauthorized minting of 5.44 trillion vsdCRV yield tokens. The breach was attributed to the compromise of a Stake DAO deployer private key, rather than a flaw in the smart contract. The attacker managed to convert a portion of the minted tokens into 43.78 ETH, valued at approximately $91,000, which was transferred to the Ethereum mainnet. Security firms Blockaid and PeckShield confirmed the exploit, noting that the attacker used LayerZero's interoperability technology to deceive the system and mint the tokens. The incident highlights ongoing vulnerabilities in the DeFi sector, with cumulative losses from similar exploits exceeding $600 million since April 2026. Stake DAO has suspended minting operations and is working with forensic firms to track the remaining funds, with plans to deploy a patched contract on Arbitrum after revoking the compromised key.