me Background And Where To Look We'll start with the splitDAO function, for two reasons -- the attacker seems have been creating child DAOs, and this is the only active mechanism for getting coins out; a second step would be to look at the proposal mechanism if this is unsuccessful.