CoinDash's ICO website was compromised on July 17-18, 2017 within 13 minutes of launch. Attacker replaced the deposit address with their own; 2,000+ investors sent 37K ETH (~$7M) to the attacker before the ICO was pulled. Hacker retained ~13.4K ETH (~$11.7M).

Hacker steals $7.4 million in ethereum during CoinDash ICO launch. At the time of the ICO, in which CoinDash posted a string of characters which represented its wallet address for investors to send funds to, it appears that the hacker compromised the website and changed this text to a wallet they control. It was a matter of minutes before the platform realized the security breach had taken place and warned investors, but it was too late -- and now the stolen funds intended for CoinDash are simply sitting in a wallet awaiting collection.