On February 29, 2024, the Shido staking contract was compromised via a private key compromise. The attacker transferred ownership, upgraded the contract with a hidden withdrawToken() function, and drained 4.3 billion SHIDO tokens ($3.3M realized in ETH). Token price collapsed 94% within minutes.