Force DAO was exploited hours after launch when the xFORCE vault contract assumed failed ERC20 transfers would revert. The Aragon Minime token returns false instead, allowing attackers to claim tokens without proper validation and drain ~$367K in FORCE.

The DeFi quantitative hedge fund Force DAO posted a blog stating that it was responsible for the previous attack and has implemented procedures to ensure that any such incidents are mitigated in the future. A total of 183 ETH (about 367,000 U.S. dollars) worth of FORCE tokens were exhausted and liquidated in this attack.