The Story of the First DAO
summary
Claims identification of the 2016 DAO attacker as Toby Honish supported by a forensic chain: DAO ether moves into ETC, tiny Shapeshift conversions that follow Shapeshift cashouts mapped to Asian hours, funds routed through Wasabi mixers to a Grin node grin.toby.ai and onward via Bitcoin Lightning nodes tied by IP to a 10x node and the TobyAI alias. Evidence combines on‑chain tracing from Chainalysis and Coinfirm, exchange withdrawal records, and contemporaneous forum posts showing the attacker’s fluent‑English alias activity and Singapore timing.
AI-written summary · about
chapters (15)
- 0:00Introduction
- 1:03DAO hack significance
- 2:27First major crowdfunded project
- 4:58DAO hack response
- 6:03Attacker’s transactions
- 8:32Funds to Ethereum Classic
- 10:20Cash-out pattern clues
- 13:08Bitcoin trail with privacy tools
- 14:12Alias linked to attacker
- 15:57Toby Hoenisch’s pre-hack role
- 18:24Publishing findings
- 19:07Brazilian police outcome
- 19:51Q&A: Cybersecurity lessons
- 21:39Q&A: Legal implications
- 24:53Q&A: Podcast guests
related talks
09mHow to Find Attackers and Improve Your Security Posture
57mWhat we can learn from the World's Biggest Heists
47mThe Heist: Chasing an Advanced Crypto Attacker Across the Multi-cloud
18mDAOnizing Web3 Security
49mAttacking and Defending Blockchains: From Horror Stories to Secure Wallets
34mWho Goes There? Detecting Intruders With Honeytokens
26mAll your Ether belong to us (Hacking Ethereum-based DApps)
12mSmart Contract Security
