Audius, a San Francisco-based audio streaming startup, has been exploited for 18.5 million AUDIO tokens (roughly $6 million), according to blockchain security company CertiK.
The tokens were sold for 705 ETH (roughly $1.1 million).
The attacker pulled off the hack with the help of a malicious governance proposal.
By modifying the governance contract configurations, such as “execution delay,” “voting period” and “guardian period,” the hacker managed to vote for the malicious proposal and execute it.
The Ethereum and Solana-based streaming service positions itself as the future of streaming, aiming to compete with such giants as Spotify and Apple Music by decentralizing and democratizing the fast-growing industry. Audius says it directs the lion’s share of music revenue to artists (roughly 90%).
The startup was developed by Roneil Rumburg and Forrest Browning, two electronic music aficionados, back in 2018.
This February, the streaming service bridged its AUDIO token to Solana with the help of the Wormhole Portal. The move made it possible to introduce more Solana-based features in the future.
Last September, the blockchain-based streaming platform announced a $5 million investment round funded by pop superstar Katy Perry, The Chainsmokers, Linkin Park’s Mike Shinoda, and other power players within the music industry.
The platform also secured a high-profile partnership with video-sharing app TikTok last year.