Dread's onion service was compromised through a vulnerability in Gobalance load-balancing software that incorrectly handled Tor's Ed25519 private keys as 32-byte instead of 64-byte keys, allowing recovery of the master secret key from published descriptors. The flaw existed unnoticed for nearly four years.