BasketDAO was exploited via a flaw in its smart contract that allowed arbitrary low-level external calls in the approval process. The vulnerability enabled attackers to drain approved funds from users, resulting in over $1.2M stolen. The protocol subsequently shut down and was acquired by PieDAO.

The crypto index project BasketDAO was exploited on the Ethereum Mainnet due to a smart contract vulnerability, which resulted in a loss of assets worth approximately $107,000. The root cause of the exploit is an arbitrary low-level call in the approval process of their smart contracts.