{"investigation":{"slug":"btc24h","entity_name":"BTC24H","trust_score":18,"severity_base":null,"score_modifier":0,"confidence":0.62,"status":"published","content_type":"investigation","summary":"BTC24H is an ERC-20 token and associated DAO platform launched on Polygon in late 2024, marketed as a mechanism for continuous Bitcoin distribution through high-yield daily payouts. The platform's Lock contract suffered a critical access-control vulnerability in December 2024 that allowed any caller to drain tokens, resulting in an estimated $85,700 loss. Multiple independent scam-detection services rate associated BTC24H web domains as high-risk or outright malicious, and the project's tokenomics — 5% daily returns for 30 days via a multi-level referral structure — exhibit structural characteristics consistent with unsustainable high-yield investment programs.","sections":[{"content":"BTC24H (ticker: BTC24H) is an ERC-20 token deployed on the Polygon PoS blockchain. The associated platform — operating across several domains including btc24h.site and bitcoin24h.io — markets itself as a 'revolutionary DAO' enabling continuous Bitcoin distribution 24 hours a day via smart contracts. The total token supply is capped at 21,000,000 BTC24H tokens, with 20,790,000 (99%) allocated to a distribution pool and 210,000 (1%) to a liquidity pool. The project describes a deflationary mechanism through periodic smart-contract token burns. Participants contribute USDT and allegedly receive 5% of their contribution daily in BTC24H tokens for 30 days, implying a gross return of 150% over the investment period. A Uniswap v3 pool pairing BTC24H/WBTC was observed on Polygon in late 2024, with reported fully diluted valuation of approximately $2.12M at creation but only $129 in actual pool liquidity — a hallmark of thin, easily manipulated markets. The project has no identified founding team and maintains no public audit trail.","heading":"Project Overview","sources":[{"url":"https://btc24h.site/","name":"btc24h.site","type":"other","credibility":3},{"url":"https://bitcoin24h.io/","name":"bitcoin24h.io","type":"other","credibility":3},{"url":"https://polygonscan.com/token/0xbcde600B00232E49DCf9E5c89c588269999ac97a","name":"polygonscan.com","type":"other","credibility":3},{"url":"https://www.geckoterminal.com/polygon_pos/pools/0x8671b56bcc6cf8832593f78b6b01f12621133b0c","name":"geckoterminal.com","type":"other","credibility":3}],"severity":"medium"},{"content":"On or around December 16–17, 2024, BTC24H's Lock contract on Polygon was exploited due to a critical missing access-control check. The contract's 'claim' function failed to verify whether the calling address (msg.sender) was an eligible claimant. As a result, any external account could invoke the claim function after the specified unlock date and receive BTC24H tokens without authorization. The estimated loss from this vulnerability was approximately $85,700 USD. The exploit transaction has been recorded on-chain at PolygonScan (tx: 0x554c9e4067e3bc0201ba06fc2cfeeacd178d7dd9c69f9b211bc661bb11296fde). The incident was reported by on-chain security monitors including SlowMist's Hacked database and the @TenArmorAlert and @0xCommitAudits accounts. The vulnerability was classified as a contract logic error / access control flaw and is documented in the Quadriga Initiative's case study database. No public post-mortem or compensation plan has been issued by the project.","heading":"Smart Contract Exploit — December 2024","sources":[{"url":"https://quadrigainitiative.com/casestudy/btc24hclaimsystemcontractmissingeligibilitycheck.php","name":"quadrigainitiative.com","type":"other","credibility":3},{"url":"https://hacked.slowmist.io/?c=Polygon","name":"hacked.slowmist.io","type":"other","credibility":3},{"url":"https://www.nominis.io/insights/crypto-security-incidents-december-2024","name":"nominis.io","type":"other","credibility":3},{"url":"https://polygonscan.com/tx/0x554c9e4067e3bc0201ba06fc2cfeeacd178d7dd9c69f9b211bc661bb11296fde","name":"polygonscan.com","type":"other","credibility":3}],"severity":"medium"},{"content":"The BTC24H platform's stated return structure raises significant sustainability concerns. Participants are promised 5% of their initial USDT contribution per day for 30 days, equating to a total gross return of 150% in under five weeks. This return is paid in BTC24H tokens — a low-liquidity asset with no independent market depth — rather than in the advertised Bitcoin. The platform also incorporates a multi-level referral commission structure: 10% on direct referrals and 20% distributed across 40 referral levels at 0.5% per level. This design is structurally similar to high-yield investment programs (HYIPs) and multi-level marketing (MLM) schemes, where early participants are paid primarily from the contributions of new entrants. The Quadriga Initiative case study notes the platform has 'no apparent social media presence or active project communication.' The project's own FAQ materials have been reported to state that 'all profits are provided by new investments,' a candid acknowledgment of the HYIP model, though this claim cannot be independently verified by AVOID.NET at the time of publication.","heading":"High-Yield Investment Program Characteristics","sources":[{"url":"https://quadrigainitiative.com/casestudy/btc24hclaimsystemcontractmissingeligibilitycheck.php","name":"quadrigainitiative.com","type":"other","credibility":3},{"url":"https://btc24h.site/","name":"btc24h.site","type":"other","credibility":3},{"url":"https://www.beermoneyforum.com/threads/bitcoin24h-io-reviews-scam-or-legit.51695/","name":"beermoneyforum.com","type":"other","credibility":3}],"severity":"medium"},{"content":"Multiple BTC24H-associated domains have been evaluated by independent scam-detection services with adverse findings. The domain bitcoin24h.net received a trust score of 0 out of 100 from Scamadviser, flagged for recent registration (November 2024), identity concealment via a privacy proxy service, server hosting in Vietnam, co-hosting with other flagged sites, and a Gridinsoft malware warning. The domain bitcoin24h.org carries a similarly low trust score and has been flagged as likely unsafe. The primary landing pages at btc24h.site and bitcoin24h.io were inaccessible at time of investigation, suggesting the sites may be inactive, geo-blocked, or intermittently offline. No verifiable corporate registration, legal entity disclosure, or team identity has been publicly associated with any BTC24H domain. The registrar used by bitcoin24h.net has a documented history of hosting spam and fraud sites. The use of privacy-shielded domain registration, combined with anonymous operators and no regulatory filings, is consistent with patterns observed in fraudulent high-yield crypto schemes.","heading":"Domain and Operator Risk Assessment","sources":[{"url":"https://www.scamadviser.com/check-website/bitcoin24h.net","name":"scamadviser.com","type":"other","credibility":3},{"url":"https://www.scamadviser.com/check-website/bitcoin24h.org","name":"scamadviser.com","type":"other","credibility":3},{"url":"https://www.scamvoid.net/check/bitcoin24h.io/","name":"scamvoid.net","type":"other","credibility":3},{"url":"https://www.scam-detector.com/validator/bitcoin24h-org-review/","name":"scam-detector.com","type":"other","credibility":3}],"severity":"medium"},{"content":"The BTC24H token is deployed at contract address 0xbcde600B00232E49DCf9E5c89c588269999ac97a on the Polygon PoS network and is indexed on PolygonScan. The Lock contract associated with the December 2024 exploit is at address 0xea4b5c48a664501691b2ecb407938ee92d389a6f. A Uniswap v3 liquidity pool pairing BTC24H against WBTC (pool: 0x8671b56bcc6cf8832593f78b6b01f12621133b0c) and a BTC24H/USDT pool (0x1d99ab27a248a8ca2674b580edda0378e030a7e0) were observed on Polygon, both with extremely low liquidity. At the time of pool creation in late December 2024, the reported FDV was approximately $2.12M while actual pool liquidity was approximately $129 — a liquidity-to-FDV ratio below 0.01%, making large trades impossible and the token price trivially manipulable. The token contract has not been publicly audited by any named security firm. On-chain monitors flagged suspicious activity via @TenArmorAlert and @IncentiveFi in connection with the exploit, though no on-chain funds were recovered.","heading":"On-Chain Footprint and Token Market Data","sources":[{"url":"https://polygonscan.com/token/0xbcde600B00232E49DCf9E5c89c588269999ac97a","name":"polygonscan.com","type":"other","credibility":3},{"url":"https://coinmarketcap.com/dexscan/polygon/0x1d99ab27a248a8ca2674b580edda0378e030a7e0/","name":"coinmarketcap.com","type":"other","credibility":3},{"url":"https://www.geckoterminal.com/polygon_pos/pools/0x8671b56bcc6cf8832593f78b6b01f12621133b0c","name":"geckoterminal.com","type":"other","credibility":3},{"url":"https://quadrigainitiative.com/casestudy/btc24hclaimsystemcontractmissingeligibilitycheck.php","name":"quadrigainitiative.com","type":"other","credibility":3}],"severity":"medium"},{"content":"BTC24H has been flagged by on-chain investigator ZachXBT, whose Investigations Telegram channel (t.me/investigations) serves as a primary early-warning resource for the crypto community. The specific nature and date of ZachXBT's flag has not been independently confirmed by AVOID.NET through primary source retrieval; no public post linking ZachXBT directly to a BTC24H investigation was located in indexed web sources at the time of this report. This may reflect the flag occurring via Telegram only or in a format not indexed by search engines. Community review sites including BeerMoneyForum carry user threads labeling bitcoin24h.io as a scam, with users reporting non-payment and inability to contact support. The absence of any named team, public communications, or post-exploit response from the project further reduces confidence. All community-level reports are treated as Tier 3 (low credibility) absent corroboration from primary sources.","heading":"ZachXBT Flag and Community Signals","sources":[{"url":"https://t.me/s/investigations","name":"t.me","type":"other","credibility":3},{"url":"https://www.beermoneyforum.com/threads/bitcoin24h-io-reviews-scam-or-legit.51695/","name":"beermoneyforum.com","type":"other","credibility":3},{"url":"https://tgstat.com/channel/@investigations","name":"tgstat.com","type":"other","credibility":3}],"severity":"medium"}],"timeline":[{"date":"2024-11","event":"Domain bitcoin24h.net registered (approximate, based on Scamadviser analysis noting November 2024 registration date).","source":"","date_original":"2024-11-01"},{"date":"2024-12","event":"BTC24H token (0xbcde600B) deployed on Polygon PoS; Uniswap v3 liquidity pools created with near-zero liquidity.","source":"","date_original":"2024-12-01"},{"date":"2024-12-16","event":"BTC24H Lock contract on Polygon exploited via missing eligibility check in the 'claim' function; estimated loss of $85,700. Exploit transaction: 0x554c9e4067e3bc0201ba06fc2cfeeacd178d7dd9c69f9b211bc661bb11296fde.","source":""},{"date":"2024-12-17","event":"SlowMist Weekly Security Report documents the BTC24H Polygon exploit. Security monitors @TenArmorAlert, @0xCommitAudits, and @IncentiveFi flag the suspicious activity.","source":""},{"date":"2025-01-27","event":"Quadriga Initiative publishes case study formally documenting the BTC24H claim system contract missing eligibility check, classifying the loss at approximately $86,000.","source":""}],"sources_used":[{"url":"https://btc24h.site/","name":"btc24h.site","type":"other","archive_url":"http://web.archive.org/web/20251118165402/https://btc24h.site/","credibility":3,"archive_timestamp":"2025-11-18T16:54:02+00:00"},{"url":"https://bitcoin24h.io/","name":"bitcoin24h.io","type":"other","archive_url":null,"credibility":3,"archive_timestamp":null},{"url":"https://polygonscan.com/token/0xbcde600B00232E49DCf9E5c89c588269999ac97a","name":"polygonscan.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.geckoterminal.com/polygon_pos/pools/0x8671b56bcc6cf8832593f78b6b01f12621133b0c","name":"geckoterminal.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:not-found","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://quadrigainitiative.com/casestudy/btc24hclaimsystemcontractmissingeligibilitycheck.php","name":"quadrigainitiative.com","type":"other","archive_url":"https://web.archive.org/web/20260830034004/https://quadrigainitiative.com/casestudy/btc24hclaimsystemcontractmissingeligibilitycheck.php","credibility":3,"archive_timestamp":"2026-08-30T03:40:04+00:00"},{"url":"https://hacked.slowmist.io/?c=Polygon","name":"hacked.slowmist.io","type":"other","archive_url":"http://web.archive.org/web/20260708011601/https://hacked.slowmist.io/?c=Polygon","credibility":3,"archive_timestamp":"2026-07-08T01:16:01+00:00"},{"url":"https://www.nominis.io/insights/crypto-security-incidents-december-2024","name":"nominis.io","type":"other","archive_url":"http://web.archive.org/web/20260819150925/https://www.nominis.io/insights/crypto-security-incidents-december-2024","credibility":3,"archive_timestamp":"2026-08-19T15:09:25+00:00"},{"url":"https://polygonscan.com/tx/0x554c9e4067e3bc0201ba06fc2cfeeacd178d7dd9c69f9b211bc661bb11296fde","name":"polygonscan.com","type":"other","archive_url":"https://web.archive.org/web/20260829040702/https://polygonscan.com/tx/0x554c9e4067e3bc0201ba06fc2cfeeacd178d7dd9c69f9b211bc661bb11296fde","credibility":3,"archive_timestamp":"2026-08-29T04:07:02+00:00"},{"url":"https://www.beermoneyforum.com/threads/bitcoin24h-io-reviews-scam-or-legit.51695/","name":"beermoneyforum.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.scamadviser.com/check-website/bitcoin24h.net","name":"scamadviser.com","type":"other","archive_url":"https://web.archive.org/web/20260830035338/https://www.scamadviser.com/check-website/bitcoin24h.net","credibility":3,"archive_timestamp":"2026-08-30T03:53:38+00:00"},{"url":"https://www.scamadviser.com/check-website/bitcoin24h.org","name":"scamadviser.com","type":"other","archive_url":"https://web.archive.org/web/20260829091500/https://www.scamadviser.com/check-website/bitcoin24h.org","credibility":3,"archive_timestamp":"2026-08-29T09:15:00+00:00"},{"url":"https://www.scamvoid.net/check/bitcoin24h.io/","name":"scamvoid.net","type":"other","archive_url":"https://web.archive.org/web/20260829181433/https://www.scamvoid.net/check/bitcoin24h.io/","credibility":3,"archive_timestamp":"2026-08-29T18:14:33+00:00"},{"url":"https://www.scam-detector.com/validator/bitcoin24h-org-review/","name":"scam-detector.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://coinmarketcap.com/dexscan/polygon/0x1d99ab27a248a8ca2674b580edda0378e030a7e0/","name":"coinmarketcap.com","type":"other","archive_url":"https://web.archive.org/web/20260829074157/https://dex.coinmarketcap.com/token/polygon/0xbcde600b00232e49dcf9e5c89c588269999ac97a/","credibility":3,"archive_timestamp":"2026-08-29T07:41:57+00:00"},{"url":"https://t.me/s/investigations","name":"t.me","type":"other","archive_url":null,"credibility":3,"archive_timestamp":null},{"url":"https://tgstat.com/channel/@investigations","name":"tgstat.com","type":"other","archive_url":"http://web.archive.org/web/20260829142427/https://tgstat.com/channel/@investigations","credibility":3,"archive_timestamp":"2026-08-29T14:24:27+00:00"}],"source_tags":["defillama"],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-sonnet-4-6","created_at":"2026-05-04T02:54:26.904671+00:00","updated_at":"2026-08-30T03:55:00.619747+00:00"}}