The DAO Hack That Changed Ethereum

On June 17, 2016, the cryptocurrency world woke up to shocking news. Someone had exploited a flaw in a revolutionary new organization and was draining millions of dollars worth of digital currency from it. The attack would eventually steal about $60 million in Ether, Ethereum’s native cryptocurrency. More importantly, it would force the entire Ethereum community to make an impossible choice that would change the blockchain forever.

This is the story of The DAO hack, one of the most pivotal moments in cryptocurrency history.

What Was The DAO?

The DAO (which stands for Decentralized Autonomous Organization) was a groundbreaking experiment. Imagine a company with no CEO, no employees, and no offices—just computer code running on the Ethereum blockchain that would automatically execute business decisions based on how its members voted.

The DAO was created to work as a kind of community-run investment fund. People could send Ether to The DAO and receive tokens in return. These tokens gave them voting rights on which projects The DAO should fund. If those projects made money, token holders would share the profits.

This revolutionary idea captured the imagination of the early Ethereum community. During its funding period in May 2016, The DAO raised over 12.7 million Ether, worth about $150 million at the time. It was the largest crowdfunding campaign in history.

Enthusiasm was sky-high. The DAO represented the potential future of organizations—transparent, democratic, and run by code rather than corruptible humans. But there was a problem hidden in that code.

The Hack

A few weeks after The DAO launched, a programmer noticed something troubling—a vulnerability in The DAO’s code. They published a paper describing the issue, and the community began discussing how to fix it.

But before any solution could be implemented, an unknown attacker struck. On June 17, they began exploiting the vulnerability, which allowed them to repeatedly withdraw Ether from The DAO without the system properly recording these withdrawals.

The community watched in horror as the attacker drained millions of dollars worth of Ether into what was called a “child DAO”—a sort of holding area where the stolen funds would be trapped for 28 days before the attacker could access them.

The good news was that the stolen funds were temporarily locked. The bad news was that without intervention, the attacker would eventually be able to withdraw all of the stolen Ether. The clock was ticking.

The Impossible Choice

The DAO hack presented the Ethereum community with a terrible dilemma that cut to the heart of blockchain philosophy.

One of the core principles of blockchain technology is immutability—the idea that transactions, once recorded, cannot be altered. This principle gives people confidence in blockchain systems. If past transactions can be changed, how can anyone trust the system?

The community faced two options:

The first option was to do nothing. Let the hack stand and allow the attacker to eventually take the $60 million. This would respect the “code is law” principle that many believed was fundamental to blockchain. According to this view, if the code allowed it, then it was a legitimate action, even if unintended.

The second option was to change Ethereum’s history through what’s called a “hard fork”—essentially creating a new version of the blockchain where the hack never happened, returning the stolen funds to their original owners.

Neither solution was perfect. Doing nothing would respect blockchain principles but cost investors millions. Creating a fork would save the funds but undermine the concept of immutability that gave blockchain its trustworthiness.

The debate raged across forums, chat rooms, and social media. Philosophical arguments about the nature of blockchain clashed with practical concerns about the future of Ethereum and the financial losses of real people.

The Split

In the end, the Ethereum community decided to put it to a vote. Token holders could vote on whether to implement the hard fork or not. The majority voted in favor of the fork.

On July 20, 2016, Ethereum implemented the hard fork, creating a new version of the blockchain where The DAO hack never happened. The stolen funds were returned to a new recovery contract, allowing the original owners to withdraw them.

But not everyone agreed with this decision. A significant minority believed that regardless of the outcome, changing the blockchain violated its fundamental principles. This group continued to use the original, unaltered blockchain, which became known as Ethereum Classic (ETC).

What was once one blockchain became two, each representing a different vision of what blockchain technology should be.

The Legacy

The DAO hack and the subsequent fork represent a pivotal moment in blockchain history. It forced the community to confront the tension between ideological purity and practical reality.

The incident led to important improvements in smart contract security. Developers became much more careful about how they wrote and audited code, creating better security practices that are still used today.

It also led to broader discussions about governance in blockchain systems. How should decisions be made? Who should have the power to make them? The DAO hack made clear that these questions needed answers.

Perhaps most importantly, The DAO hack and its aftermath demonstrated that blockchain technology is not just about code—it’s about people. Behind every blockchain is a community with values, beliefs, and the power to shape the technology’s future.

Today, Ethereum has grown to become the second-largest cryptocurrency by market value, worth hundreds of billions of dollars. The DAO hack could have ended Ethereum in its early days, but instead, it made the community stronger and wiser.

The lesson? Even in the world of code and cryptography, human decisions still matter.