GoodDollar Reserves Hit by Superfluid Bug Exploit

GoodDollar, a decentralized project that provides daily universal basic income to nearly one million people, recently suffered a security breach. A bug in Superfluid allowed an attacker to bypass liquidation safeguards and drain more than 100,000 dollars in reserves across the Celo and XDC networks. External liquidity pools were also affected, though full totals for those losses are not yet public.

The incident began when a malicious application bypassed whitelisting requirements on Celo, leaving insolvent token balances active. Superfluid discovered the issue on September 3 and pushed a hotfix the next day to close the affected accounts. While Superfluid stated the flaw was strictly limited to Celo, GoodDollar still reported unexpected reserve losses on XDC, leaving that part of the exploit unexplained for now.

GoodDollar has resumed basic user claims and identity verifications on Celo, but reserve operations and token bridging remain paused. Officials advise users to avoid swapping tokens right now because thin liquidity could cause high price slippage. Both projects plan to release detailed incident reports soon to explain the exact causes and total financial impact.