Stake DAO attacker mints 5.4T fake vsdCRV on Arbitrum
A single deployer-key compromise on Arbitrum let an attacker forge 5.4 trillion vsdCRV — but the structural read is that automated yield vaults bundle risks the interface never shows, and April 2026…