On November 7, 2025, DIMO token was exploited when a compromised developer key held proxy-upgrade authority over a Wormhole bridge contract with no timelock or multisig. The attacker withdrew 30M DIMO tokens (~3% supply, ~$2.49M), dumped them on the market, then the proxy was reverted and ownership moved to a multisig.