On October 28, 2022, FriesDAO's deployer wallet generated using the Profanity vanity-address tool was compromised, allowing an attacker to calculate the private key and steal approximately $2.3M in FRIES governance tokens and other assets from the staking pool. Profanity had a known critical flaw enabling private key derivation for vanity addresses.

FriesDAO was attacked and lost about $2.3 million. An attacker gained control of the FriesDAO protocol operator's wallet through the Profanity wallet generator vulnerability, which would force the use of the private key of the address generated by the tool. FriesDAO stated in the official Discord channel that the official developers are currently trying to negotiate with the attackers to negotiate a white hat bounty in exchange for the return of the stolen funds.