On September 1, 2023, SharedStake was exploited when improper ownership checks allowed an attacker to gain admin access. The attacker created a minter address with unlimited permissions, minted sgETH tokens without collateral, and withdrew approximately 105 ETH from the protocol.