{"investigation":{"slug":"berally","entity_name":"Berally","trust_score":32,"severity_base":null,"score_modifier":0,"confidence":0.68,"status":"published","content_type":"investigation","summary":"Berally is a SocialFi and AI-agent social trading platform built on the Berachain blockchain, issuing the BRLY token via a public presale on Fjord Foundry in late 2024. In March 2025, the project suffered a significant security incident in which its deployer private key was alleged to have been leaked, resulting in all vesting tokens being dumped into its liquidity pool and approximately $90,000 drained from the pool. The BRLY token subsequently collapsed to roughly 99% below its all-time high, trading has effectively ceased, and community members have alleged the incident was an inside job, though this has not been formally substantiated.","sections":[{"content":"Berally describes itself as a social trading platform for AI agents on the Berachain blockchain. The platform offers three core products: Pass (a personal social token that gates community access and generates yield via Berachain's Proof of Liquidity), Pot (an on-chain DeFi vault enabling crowdfunded trading with a 2% exit fee and manager-set performance fees), and Cybera (autonomous AI trading agents fine-tuned on market data and initially accessible only to veBRLY token stakers and Beracid NFT holders). The platform integrates X (Twitter) and DeBank profiles to display trading history and assets under management. Berally was positioned as a flagship SocialFi application for the Berachain ecosystem at its mainnet launch. Team identity is not publicly disclosed; no founders, executives, or developers are named in official documentation or on the project website.","heading":"Platform Overview","sources":[{"url":"https://www.berally.io/","name":"berally.io","type":"other","credibility":3},{"url":"https://docs.berally.io/","name":"docs.berally.io","type":"other","credibility":3},{"url":"https://daic.capital/ecosystem/berachain/berally-ai-agent-social-trading","name":"daic.capital","type":"other","credibility":3}],"severity":"medium"},{"content":"The BRLY token has a maximum supply of 6,942,000,000 tokens. Distribution was structured as follows: 25% public LBP via Fjord Foundry, 44% community growth, 9% liquidity and partnerships, and 22% team, operations, and advisors. The project conducted a whitelist-gated presale on Fjord Foundry, with eligibility limited to holders of select Berachain NFT collections and FJO holders with a minimum of 500 FJO. The presale whitelist closed December 15, 2024. The Token Generation Event (TGE) occurred on Berachain mainnet launch. BRLY reached an all-time high of approximately $0.000562 on February 13, 2025, with an initial fully diluted valuation estimated near $5.61 million. The team and operations allocation of 22% represents a significant insider position. No audit reports were publicly linked in the official documentation, despite the DAIC Capital ecosystem review noting a claim that smart contracts were audited.","heading":"Token Launch and Tokenomics","sources":[{"url":"https://icodrops.com/berally/","name":"icodrops.com","type":"other","credibility":3},{"url":"https://cryptorank.io/ico/berally","name":"cryptorank.io","type":"other","credibility":3},{"url":"https://www.coingecko.com/en/coins/berally-token","name":"coingecko.com","type":"other","credibility":3},{"url":"https://daic.capital/ecosystem/berachain/berally-ai-agent-social-trading","name":"daic.capital","type":"other","credibility":3}],"severity":"medium"},{"content":"On approximately March 14-15, 2025, Berally announced a security breach in which it stated: 'Something from our deployer key on our end was leaked, resulting in all vesting tokens being dumped and drained from the liquidity pool.' The attacker exploited residual permissions on the deployer wallet, which had not been revoked after the initial token deployment. Using these permissions, the attacker bypassed the vesting schedule, withdrew all locked tokens, and dumped them into the BRLY liquidity pool, simultaneously crashing the token price and draining ETH from the pool. Losses were estimated by community members at approximately $90,000. Berally advised users to revoke dApp and staking access while investigating. Berachain co-founder Smokey posted publicly about potential exploit concerns before Berally's official confirmation. The on-chain smart contracts for the dApp were reported as unaffected. A day after the incident, Berally announced a token compensation plan of up to 120% for affected holders and claimed to have identified and restricted the attacker through centralized exchange reporting. The private key compromise is documented in the Nominis March 2025 crypto security incident report.","heading":"March 2025 Security Incident","sources":[{"url":"https://www.mitrade.com/insights/news/live-news/article-3-699081-20250316","name":"mitrade.com","type":"other","credibility":3},{"url":"https://cryptorank.io/news/feed/4fa8c-berally-hack-attacker-drains-liquidity-pool","name":"cryptorank.io","type":"other","credibility":3},{"url":"https://www.nominis.io/insights/crypto-security-incidents-march-2025","name":"nominis.io","type":"other","credibility":3}],"severity":"medium"},{"content":"Following the March 2025 incident, multiple community members alleged publicly that the exploit was an inside job rather than a genuine external hack. Users noted that the Berally team had allegedly been warned on multiple prior occasions about critical vulnerabilities in its key management practices but had failed to act. When questioned on X (Twitter) about how developers could lose a private deployer key, the Berally X account handler acknowledged fault and described the lapse as a 'skill issue.' A builder affiliated with the Berachain ecosystem stated the exploit occurred because 'a dev leaked the key' and called on the team to compensate affected users. These allegations remain unverified and have not been substantiated by any on-chain forensic investigation, law enforcement filing, or credible third-party security firm as of the date of this report. The ZachXBT flag associated with this entity has been noted, though no specific published ZachXBT investigation or thread directly naming Berally was located in publicly accessible sources at time of writing.","heading":"Inside Job Allegations and Community Response","sources":[{"url":"https://www.mitrade.com/insights/news/live-news/article-3-699081-20250316","name":"mitrade.com","type":"other","credibility":3},{"url":"https://www.cryptopolitan.com/berally-hack-attacker-drains-liquidity-pool/","name":"cryptopolitan.com","type":"other","credibility":3},{"url":"https://cryptorank.io/news/feed/4fa8c-berally-hack-attacker-drains-liquidity-pool","name":"cryptorank.io","type":"other","credibility":3}],"severity":"medium"},{"content":"BRLY reached its all-time high of approximately $0.000562 on February 13, 2025, and subsequently crashed to an all-time low of approximately $0.0000019 on March 19, 2025 — a decline of roughly 99.7% in approximately five weeks, with the March security incident coinciding with the price floor. As of late May 2025, CoinGecko reported that 'BRLY tokens have stopped trading on all exchanges listed on CoinGecko,' indicating effective market death. The fully diluted valuation had collapsed to approximately $17,000. A contract migration from the original address to a new Berachain contract address was undertaken following the hack, but trading activity on the migrated token remained negligible, with 24-hour volume reported at under $4 on Kodiak V2, the primary DEX listing. The project's X account (@Berally_io) remains active but post-incident communication has been limited.","heading":"Token Price Collapse and Current Status","sources":[{"url":"https://www.coingecko.com/en/coins/berally-token","name":"coingecko.com","type":"other","credibility":3},{"url":"https://www.coincarp.com/currencies/berally/","name":"coincarp.com","type":"other","credibility":3},{"url":"https://cryptorank.io/price/berally","name":"cryptorank.io","type":"other","credibility":3}],"severity":"medium"},{"content":"No members of the Berally team are publicly identified by name in the project's documentation, website, or known public communications. The absence of named founders or developers is a structural opacity risk. Smart contract audits are referenced in third-party ecosystem coverage but no audit reports or auditor names are linked in official Berally documentation. The team and advisor token allocation of 22% of total supply represents a substantial insider position that is subject to the vesting schedule that was compromised in the March 2025 incident. The Cybera AI agent product, which was a central marketing claim, was gated behind token and NFT ownership and had no publicly verifiable performance track record. The Fjord Foundry presale gated eligibility behind NFT and token holdings, limiting participation transparency. The project operates on Berachain, which itself launched with pseudonymous founders and experienced significant post-launch volatility.","heading":"Team Transparency and Operational Risk Factors","sources":[{"url":"https://daic.capital/ecosystem/berachain/berally-ai-agent-social-trading","name":"daic.capital","type":"other","credibility":3},{"url":"https://icodrops.com/berally/","name":"icodrops.com","type":"other","credibility":3},{"url":"https://docs.berally.io/","name":"docs.berally.io","type":"other","credibility":3}],"severity":"medium"}],"timeline":[{"date":"2024-12-06","event":"Berally whitelist snapshot taken for Fjord Foundry presale; eligibility limited to Berachain NFT holders and FJO stakers with minimum 500 FJO.","source":""},{"date":"2024-12-15","event":"Berally presale whitelist period closes on Fjord Foundry.","source":""},{"date":"2025-02-13","event":"BRLY token reaches all-time high of approximately $0.000562 on Berachain mainnet.","source":""},{"date":"2025-03-14","event":"Berally deployer private key is compromised; attacker bypasses vesting schedule, dumps all vesting tokens into liquidity pool, and drains approximately $90,000 in ETH from the pool. Berachain co-founder Smokey posts public warning before official confirmation.","source":""},{"date":"2025-03-15","event":"Berally issues official statement confirming the deployer key leak. Team advises users to revoke dApp and staking access. Community members allege on-chain evidence of insider involvement.","source":""},{"date":"2025-03-16","event":"Berally announces a compensation plan offering up to 120% reimbursement for affected token holders and claims the attacker has been identified and restricted via centralized exchange reporting.","source":""},{"date":"2025-03-19","event":"BRLY token reaches all-time low of approximately $0.0000019, down approximately 99.7% from its all-time high.","source":""},{"date":"2025-03-19","event":"Berally migrates BRLY to a new contract address on Berachain following the exploit.","source":""},{"date":"2025-05-28","event":"CoinGecko reports BRLY has stopped trading on all listed exchanges. Fully diluted valuation stands at approximately $17,000. Trading volume near zero on Kodiak V2 DEX.","source":""}],"sources_used":[{"url":"https://www.berally.io/","name":"berally.io","type":"other","archive_url":"http://web.archive.org/web/20260608234348/https://www.berally.io/","credibility":3,"archive_timestamp":"2026-06-08T23:43:48+00:00"},{"url":"https://docs.berally.io/","name":"docs.berally.io","type":"other","archive_url":"http://web.archive.org/web/20260520201918/https://docs.berally.io/","credibility":3,"archive_timestamp":"2026-05-20T20:19:18+00:00"},{"url":"https://daic.capital/ecosystem/berachain/berally-ai-agent-social-trading","name":"daic.capital","type":"other","archive_url":"http://web.archive.org/web/20260317131311/https://daic.capital/ecosystem/berachain/berally-ai-agent-social-trading","credibility":3,"archive_timestamp":"2026-03-17T13:13:11+00:00"},{"url":"https://icodrops.com/berally/","name":"icodrops.com","type":"other","archive_url":"http://web.archive.org/web/20260124113256/https://icodrops.com/berally/","credibility":3,"archive_timestamp":"2026-01-24T11:32:56+00:00"},{"url":"https://cryptorank.io/ico/berally","name":"cryptorank.io","type":"other","archive_url":"https://web.archive.org/web/20260830032345/https://cryptorank.io/ico/berally","credibility":3,"archive_timestamp":"2026-08-30T03:23:45+00:00"},{"url":"https://www.coingecko.com/en/coins/berally-token","name":"coingecko.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.mitrade.com/insights/news/live-news/article-3-699081-20250316","name":"mitrade.com","type":"other","archive_url":"https://web.archive.org/web/20260829051123/https://www.mitrade.com/insights/news/live-news/article-3-699081-20250316","credibility":3,"archive_timestamp":"2026-08-29T05:11:23+00:00"},{"url":"https://cryptorank.io/news/feed/4fa8c-berally-hack-attacker-drains-liquidity-pool","name":"cryptorank.io","type":"other","archive_url":"https://web.archive.org/web/20260829175627/https://cryptorank.io/news/feed/4fa8c-berally-hack-attacker-drains-liquidity-pool","credibility":3,"archive_timestamp":"2026-08-29T17:56:27+00:00"},{"url":"https://www.nominis.io/insights/crypto-security-incidents-march-2025","name":"nominis.io","type":"other","archive_url":"http://web.archive.org/web/20260417161427/https://www.nominis.io/insights/crypto-security-incidents-march-2025","credibility":3,"archive_timestamp":"2026-04-17T16:14:27+00:00"},{"url":"https://www.cryptopolitan.com/berally-hack-attacker-drains-liquidity-pool/","name":"cryptopolitan.com","type":"other","archive_url":"https://web.archive.org/web/20260829085306/https://www.cryptopolitan.com/berally-hack-attacker-drains-liquidity-pool/","credibility":3,"archive_timestamp":"2026-08-29T08:53:06+00:00"},{"url":"https://www.coincarp.com/currencies/berally/","name":"coincarp.com","type":"other","archive_url":null,"credibility":3,"archive_timestamp":null},{"url":"https://cryptorank.io/price/berally","name":"cryptorank.io","type":"other","archive_url":"https://web.archive.org/web/20260829114342/https://cryptorank.io/price/berally","credibility":3,"archive_timestamp":"2026-08-29T11:43:42+00:00"}],"source_tags":["defillama"],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-sonnet-4-6","created_at":"2026-05-04T02:54:25.114697+00:00","updated_at":"2026-08-30T03:55:00.093061+00:00"}}