Tapioca DAO lost about $4.4 million after a social-engineering-linked compromise of contract ownership on Arbitrum enabled theft of TAP and USDO-related funds. The attacker abused the TAP vesting contract's Emergency Rescue function to withdraw roughly 30 million TAP, swapped it for 591 ETH, and also compromised the USDO stablecoin contract to add a minter and drain the USDO/USDC liquidity pool. Blockchain tracing in the excerpt notes stolen funds bridged to BNB Chain and identifies the TAP vesting contract, exploiter address, attack transactions, USDO contract, mint exploit transaction, and bridge address. ZachXBT is cited as suggesting possible links to recent project hacks involving malware and fake job listings, with only a possible connection to North Korean state-sponsored hackers rather than confirmed attribution.