{"investigation":{"slug":"corepound","entity_name":"Corepound","trust_score":22,"severity_base":null,"score_modifier":0,"confidence":0.45,"status":"published","content_type":"investigation","summary":"Corepound (CORP) is an alleged yield aggregator protocol operating on the Core blockchain (Core DAO ecosystem), with its native CORP token traded primarily on Molten Finance V2. The protocol was flagged by on-chain investigator ZachXBT and has experienced an extreme price collapse exceeding 86% within a 24-hour window, consistent with a protocol logic incident or coordinated exit. The protocol's official website (corepound.xyz) is currently inaccessible, no independent security audit has been publicly identified, and the development team has not been publicly identified.","sections":[{"content":"Corepound is categorized as a yield aggregator protocol on the Core blockchain, an EVM-compatible Layer 1 blockchain launched in January 2023 that uses a consensus mechanism called Satoshi Plus combining Delegated Proof of Work, Delegated Proof of Stake, and non-custodial Bitcoin staking. The Core ecosystem hosts over 125 live applications and more than $353 million in total value locked as of early 2026, with protocols such as Colend and Pell Network accounting for the majority of activity. Corepound's native token is CORP, with a reported maximum supply of 10 million tokens and a fully diluted valuation pegged to a fraction of one Bitcoin at the time of review. The project's official website at corepound.xyz returned a connection refused error at the time of investigation, making primary source verification of the protocol's mechanics unavailable. A whitepaper URL at whitepaper.corepound.xyz was similarly unreachable. The project's only verifiable market presence is via CoinGecko listing and trading activity on Molten Finance V2, a decentralized exchange native to the Core chain. Corepound was previously featured in a Core ecosystem insider newsletter in connection with a SolvBTC staking campaign, which distributed 350 CORE tokens to the first-place winner and 6,000 CORP rewards among 30 winners, suggesting the protocol had some integration with the Core DAO promotional apparatus prior to the incident.","heading":"Protocol Overview","sources":[{"url":"https://www.coingecko.com/en/coins/corepound","name":"coingecko.com","type":"other","credibility":3},{"url":"https://coredao.org/blog/core-insider-issue-4","name":"coredao.org","type":"other","credibility":3},{"url":"https://www.tastycrypto.com/blog/core-blockchain-and-defi-ecosystem-explained/","name":"tastycrypto.com","type":"other","credibility":3}],"severity":"medium"},{"content":"On-chain investigator ZachXBT, known for exposing crypto fraud, insider trading, and protocol exploits across multiple blockchain ecosystems, flagged Corepound as a project of concern. ZachXBT operates primarily via a Telegram channel (@investigations) and X (formerly Twitter) account, and his flags have historically preceded or accompanied the discovery of rug pulls, flash loan exploits, insider misconduct, and protocol manipulation schemes. The specific nature and content of ZachXBT's Corepound flag could not be independently verified through publicly indexed web sources at the time of this investigation. ZachXBT's prior flagged entities include Axiom Exchange (alleged $400,000 insider trading ring, February 2026), Drift Protocol ($285 million exploit, April 2026), and the BitoPro exchange suspected exploit ($11.5 million outflows). The flag's presence on a low-liquidity, anonymous-team protocol with a non-functional website and an extreme price collapse materially elevates the risk profile of Corepound.","heading":"ZachXBT Flag and Investigator Attention","sources":[{"url":"https://en.wikipedia.org/wiki/ZachXBT","name":"en.wikipedia.org","type":"other","credibility":3},{"url":"https://t.me/investigations","name":"t.me","type":"other","credibility":3},{"url":"https://www.theblock.co/post/356522/zachxbt-flags-suspicious-11-5m-outflows-from-bitopro-exchanges-hot-wallets-says-it-was-likely-exploited","name":"theblock.co","type":"other","credibility":3},{"url":"https://finance.yahoo.com/news/axiom-crypto-exposed-zachxbt-alleges-122625589.html","name":"finance.yahoo.com","type":"other","credibility":3}],"severity":"medium"},{"content":"Corepound's CORP token experienced a price decline of approximately 86.20% within a single 24-hour period, with a corresponding 7-day decline of approximately 86.40%. This price action coincided with a 2,101.50% spike in trading volume, reaching $23,372.11 in reported 24-hour volume on Molten Finance V2. The all-time high price of CORP was recorded at $0.04660, compared to a post-incident price of approximately $0.006152, representing a drawdown of approximately 86% from peak. The pattern of rapid price collapse accompanied by a volume spike is consistent with documented DeFi protocol failure modes including: (1) smart contract logic vulnerabilities enabling fund extraction, (2) coordinated liquidity removal by controlling parties (colloquially termed a rug pull), and (3) cascading liquidations triggered by protocol logic errors. The term 'protocol logic incident' used in available descriptions of Corepound's situation is consistent with academic and industry classifications of attacks arising from protocol design flaws, missing invariant checks, or flawed economic logic rather than traditional implementation bugs. Independent confirmation of the specific technical root cause was not available through publicly indexed sources at the time of this investigation.","heading":"Protocol Logic Incident and Price Collapse","sources":[{"url":"https://www.coingecko.com/en/coins/corepound","name":"coingecko.com","type":"other","credibility":3},{"url":"https://www.coingecko.com/en/exchanges/molten-finance-v2","name":"coingecko.com","type":"other","credibility":3},{"url":"https://arxiv.org/abs/2507.20175","name":"arxiv.org","type":"other","credibility":3}],"severity":"medium"},{"content":"No independent security audit of the Corepound smart contracts has been identified through public sources. The protocol's website (corepound.xyz) and whitepaper (whitepaper.corepound.xyz) were both inaccessible at time of investigation, preventing review of any self-reported audit claims. Industry analysis of yield aggregator protocols consistently identifies the absence of third-party audits as a primary risk factor, given that such protocols typically interact with multiple underlying DeFi primitives (lending markets, DEX pools, staking contracts) and are therefore exposed to a wider attack surface than single-function contracts. Compound Finance V2 forks and derivatives, a category Corepound may belong to given its name etymology, carry known historical vulnerability patterns including governance manipulation, interest rate oracle manipulation, and liquidation logic errors — all of which have been exploited in protocols such as Cream Finance (approximately $130 million lost across multiple incidents) and Polter Finance ($12 million lost in November 2024). The Polter Finance incident is particularly instructive: it was an unaudited Compound V2 fork on Fantom that was exploited via a flash loan price oracle attack within days of launch. Whether Corepound shares this vulnerability class has not been independently established.","heading":"Security Posture and Audit Status","sources":[{"url":"https://threesigma.xyz/blog/exploit/polter-finance-exploit-explained-usd12m-loss","name":"threesigma.xyz","type":"other","credibility":3},{"url":"https://slowmist.medium.com/exploit-analysis-cork-protocol-attacked-over-10-million-lost-75de9f229307","name":"slowmist.medium.com","type":"other","credibility":3},{"url":"https://www.coingecko.com/en/coins/corepound","name":"coingecko.com","type":"other","credibility":3},{"url":"https://immunebytes.com/blog/list-of-largest-crypto-hacks-in-2024/","name":"immunebytes.com","type":"other","credibility":3}],"severity":"medium"},{"content":"The individuals behind Corepound have not been publicly identified in any indexed source. The project's official website was not accessible at investigation time, removing the primary mechanism by which projects typically disclose team composition or organizational background. The absence of named founders, developers, or public-facing team members is a documented risk factor in DeFi projects: anonymous development teams can abandon projects, extract funds, or disappear without legal accountability. The Core blockchain ecosystem itself, operated under the Core DAO governance structure launched in January 2023, maintains a separate identity and has not been implicated in any wrongdoing; Corepound is a third-party application built on Core's infrastructure. The CoinGecko listing identifies Corepound as a yield aggregator in the Core ecosystem but provides no team information. No corporate registration, legal entity disclosure, or DAO governance documentation has been identified for Corepound.","heading":"Team Anonymity and Transparency","sources":[{"url":"https://www.coingecko.com/en/coins/corepound","name":"coingecko.com","type":"other","credibility":3},{"url":"https://coredao.org/","name":"coredao.org","type":"other","credibility":3},{"url":"https://www.btcc.com/en-US/coin-news/market-updates/core-dao-launch-date-what-is-core-dao-mainnet","name":"btcc.com","type":"other","credibility":3}],"severity":"medium"},{"content":"Corepound's CORP token trades on Molten Finance V2, a decentralized exchange on the Core chain. At time of review, only two exchanges and two trading markets were reported to carry the token, indicating extremely concentrated liquidity. The primary active pair is CORP/USDT with approximately $22,900 in 24-hour volume. The token has no reported circulating supply on CoinGecko, a common indicator that tokenomics documentation is incomplete or withheld. The maximum supply is reported as 10 million tokens, but allocation details (team allocations, vesting schedules, liquidity lock status) have not been publicly verified. Thin order books in a two-market token structure make the CORP token susceptible to price manipulation, wash trading, and liquidity withdrawal events. The 2,101% volume spike coinciding with an 86% price crash is consistent with exit liquidity dynamics where early holders or insiders sell into retail demand. Molten Finance V2 is a legitimate Core ecosystem DEX and has not itself been implicated in misconduct; the risk applies to the CORP token structure rather than the exchange venue.","heading":"Market Structure and Liquidity Risks","sources":[{"url":"https://www.coingecko.com/en/coins/corepound","name":"coingecko.com","type":"other","credibility":3},{"url":"https://www.coingecko.com/en/exchanges/molten-finance-v2","name":"coingecko.com","type":"other","credibility":3},{"url":"https://coredao.org/blog/molten-finance-btcfi-dex-live-on-core-blockchain","name":"coredao.org","type":"other","credibility":3}],"severity":"medium"},{"content":"Corepound's risk profile shares characteristics with several documented DeFi failures. The Polter Finance exploit (November 2024) involved an unaudited Compound V2 fork on Fantom that lost approximately $12 million to a flash loan oracle manipulation attack shortly after launch. The Cork Protocol exploit (May 2025) resulted in $12 million in losses due to a protocol logic flaw that allowed attackers to use fake tokens as legitimate redemption assets. The CORE token price crash of approximately 50% in March 2026 triggered a liquidation cascade on Colend, the Core chain's primary lending protocol, demonstrating that the Core ecosystem itself is not immune to market-driven protocol stress. While none of these incidents directly implicate Corepound, they establish that: (1) unaudited Compound forks on emerging chains are high-risk, (2) the Core ecosystem has experienced serious volatility events, and (3) protocol logic flaws in yield aggregators can lead to total or near-total fund loss. Rug pull incidents in DeFi destroyed an estimated $1.8 billion in investor funds during 2025, with anonymous-team small-cap yield aggregators consistently representing a disproportionate share of incident counts.","heading":"Comparable Incidents and Risk Context","sources":[{"url":"https://threesigma.xyz/blog/exploit/polter-finance-exploit-explained-usd12m-loss","name":"threesigma.xyz","type":"other","credibility":3},{"url":"https://slowmist.medium.com/exploit-analysis-cork-protocol-attacked-over-10-million-lost-75de9f229307","name":"slowmist.medium.com","type":"other","credibility":3},{"url":"https://coinpedia.org/news/why-core-token-crashed-50-in-24-hours/","name":"coinpedia.org","type":"other","credibility":3},{"url":"https://coinlaw.io/rug-pulls-amp-ponzi-schemes-in-crypto-statistics/","name":"coinlaw.io","type":"other","credibility":3}],"severity":"medium"}],"timeline":[{"date":"2023-01-14","event":"Core blockchain mainnet launched, providing the underlying infrastructure on which Corepound would later be deployed.","source":""},{"date":"2024","event":"Corepound (CORP) token listed on CoinGecko as a yield aggregator on the Core ecosystem; exact launch date not publicly confirmed.","source":"","date_original":"2024-01-01"},{"date":"2024","event":"Corepound CORP token reaches an all-time high price of approximately $0.04660 per token; exact date of ATH not independently confirmed.","source":"","date_original":"2024-01-01"},{"date":"2024","event":"Corepound participates in a Core ecosystem SolvBTC staking event, distributing 350 CORE to first-place winner and 6,000 CORP rewards among 30 participants, indicating brief ecosystem integration.","source":"","date_original":"2024-01-01"},{"date":"2025","event":"No public security audit of Corepound smart contracts identified through this date; website corepound.xyz remains listed but details unverifiable.","source":"","date_original":"2025-01-01"},{"date":"2026","event":"ZachXBT flags Corepound as a protocol of concern; specific date and content of flag not independently confirmed through publicly indexed sources.","source":"","date_original":"2026-01-01"},{"date":"2026-05","event":"CORP token experiences an approximately 86% price collapse within 24 hours alongside a 2,101% spike in trading volume on Molten Finance V2, consistent with a protocol logic incident or coordinated exit event.","source":"","date_original":"2026-05-01"},{"date":"2026-05-29","event":"At time of this investigation, corepound.xyz and whitepaper.corepound.xyz both return connection refused errors; the protocol's operational status is unknown.","source":""}],"sources_used":[{"url":"https://www.coingecko.com/en/coins/corepound","name":"coingecko.com","type":"other","archive_url":"http://web.archive.org/web/20251004202720/https://www.coingecko.com/en/coins/corepound","credibility":3,"archive_timestamp":"2025-10-04T20:27:20+00:00"},{"url":"https://coredao.org/blog/core-insider-issue-4","name":"coredao.org","type":"other","archive_url":"http://web.archive.org/web/20260512184500/https://coredao.org/blog/core-insider-issue-4","credibility":3,"archive_timestamp":"2026-05-12T18:45:00+00:00"},{"url":"https://www.tastycrypto.com/blog/core-blockchain-and-defi-ecosystem-explained/","name":"tastycrypto.com","type":"other","archive_url":"http://web.archive.org/web/20260416061739/https://www.tastycrypto.com/blog/core-blockchain-and-defi-ecosystem-explained/","credibility":3,"archive_timestamp":"2026-04-16T06:17:39+00:00"},{"url":"https://en.wikipedia.org/wiki/ZachXBT","name":"en.wikipedia.org","type":"other","archive_url":"http://web.archive.org/web/20260711020137/https://en.wikipedia.org/wiki/ZachXBT","credibility":3,"archive_timestamp":"2026-07-11T02:01:37+00:00"},{"url":"https://t.me/investigations","name":"t.me","type":"other","archive_url":null,"credibility":3,"archive_timestamp":null},{"url":"https://www.theblock.co/post/356522/zachxbt-flags-suspicious-11-5m-outflows-from-bitopro-exchanges-hot-wallets-says-it-was-likely-exploited","name":"theblock.co","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://finance.yahoo.com/news/axiom-crypto-exposed-zachxbt-alleges-122625589.html","name":"finance.yahoo.com","type":"other","archive_url":"http://web.archive.org/web/20260228044640/https://finance.yahoo.com/news/axiom-crypto-exposed-zachxbt-alleges-122625589.html","credibility":3,"archive_timestamp":"2026-02-28T04:46:40+00:00"},{"url":"https://www.coingecko.com/en/exchanges/molten-finance-v2","name":"coingecko.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://arxiv.org/abs/2507.20175","name":"arxiv.org","type":"other","archive_url":"http://web.archive.org/web/20260206202934/https://arxiv.org/abs/2507.20175","credibility":3,"archive_timestamp":"2026-02-06T20:29:34+00:00"},{"url":"https://threesigma.xyz/blog/exploit/polter-finance-exploit-explained-usd12m-loss","name":"threesigma.xyz","type":"other","archive_url":"http://web.archive.org/web/20260415073640/https://threesigma.xyz/blog/exploit/polter-finance-exploit-explained-usd12m-loss","credibility":3,"archive_timestamp":"2026-04-15T07:36:40+00:00"},{"url":"https://slowmist.medium.com/exploit-analysis-cork-protocol-attacked-over-10-million-lost-75de9f229307","name":"slowmist.medium.com","type":"other","archive_url":"http://web.archive.org/web/20251113081358/https://slowmist.medium.com/exploit-analysis-cork-protocol-attacked-over-10-million-lost-75de9f229307","credibility":3,"archive_timestamp":"2025-11-13T08:13:58+00:00"},{"url":"https://immunebytes.com/blog/list-of-largest-crypto-hacks-in-2024/","name":"immunebytes.com","type":"other","archive_url":"http://web.archive.org/web/20251208111010/https://immunebytes.com/blog/list-of-largest-crypto-hacks-in-2024/","credibility":3,"archive_timestamp":"2025-12-08T11:10:10+00:00"},{"url":"https://coredao.org/","name":"coredao.org","type":"other","archive_url":"http://web.archive.org/web/20260804154319/https://coredao.org/","credibility":3,"archive_timestamp":"2026-08-04T15:43:19+00:00"},{"url":"https://www.btcc.com/en-US/coin-news/market-updates/core-dao-launch-date-what-is-core-dao-mainnet","name":"btcc.com","type":"other","archive_url":"http://web.archive.org/web/20251213124307/https://www.btcc.com/en-US/coin-news/market-updates/core-dao-launch-date-what-is-core-dao-mainnet","credibility":3,"archive_timestamp":"2025-12-13T12:43:07+00:00"},{"url":"https://coredao.org/blog/molten-finance-btcfi-dex-live-on-core-blockchain","name":"coredao.org","type":"other","archive_url":"http://web.archive.org/web/20260422205905/https://coredao.org/blog/molten-finance-btcfi-dex-live-on-core-blockchain","credibility":3,"archive_timestamp":"2026-04-22T20:59:05+00:00"},{"url":"https://coinpedia.org/news/why-core-token-crashed-50-in-24-hours/","name":"coinpedia.org","type":"other","archive_url":"http://web.archive.org/web/20260411043035/https://coinpedia.org/news/why-core-token-crashed-50-in-24-hours/","credibility":3,"archive_timestamp":"2026-04-11T04:30:35+00:00"},{"url":"https://coinlaw.io/rug-pulls-amp-ponzi-schemes-in-crypto-statistics/","name":"coinlaw.io","type":"other","archive_url":"http://web.archive.org/web/20260216090654/https://coinlaw.io/rug-pulls-amp-ponzi-schemes-in-crypto-statistics/","credibility":3,"archive_timestamp":"2026-02-16T09:06:54+00:00"}],"source_tags":["defillama"],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-sonnet-4-6","created_at":"2026-05-04T02:54:15.544405+00:00","updated_at":"2026-08-29T12:34:16.14577+00:00"}}