{"investigation":{"slug":"dego-finance","entity_name":"Dego Finance","trust_score":10,"severity_base":null,"score_modifier":0,"confidence":1,"status":"published","content_type":"investigation","summary":"Dego Finance is a multi-chain NFT and DeFi aggregator protocol launched in September 2020 by an anonymous team. On February 10, 2022, an attacker compromised the team's deployer private keys and drained approximately $10 million from liquidity pools on Uniswap and PancakeSwap across Ethereum, Binance Smart Chain, and Cronos. No stolen funds were recovered; the project responded with a token migration but offered no direct restitution to affected liquidity providers.","sections":[{"content":"Dego Finance is an open-source, multi-chain protocol that combines NFT infrastructure with DeFi primitives, allowing users to mine, stake, trade, and build applications around NFTs. It launched in September 2020 on Ethereum and subsequently expanded to Binance Smart Chain (BSC) and Cronos to reduce transaction fees. The protocol is governed by the DEGO token, which also functions as an equity and governance instrument. The founding team is anonymous; the project lists no named executives or legal entity. A core contributor identified only as Xavier Lee has been publicly associated with the project in some community materials. Dego Finance's token reached an all-time high of more than 400% appreciation during the 2021 bull market before the February 2022 security incident severely damaged its market position and community trust. The protocol is listed on Binance, KuCoin, Gate.io, and other major exchanges.","heading":"Background","sources":[{"url":"https://www.coinspeaker.com/guides/nfts-defi-what-is-dego-finance-dego/","name":"","type":"other","credibility":3},{"url":"https://docs.dego.finance","name":"","type":"other","credibility":3}],"severity":"medium"},{"content":"On February 10, 2022, at approximately 23:30 UTC, an unknown attacker exploited compromised private keys belonging to the Dego Finance team deployer address. The attacker gained control of multiple addresses that were supplying liquidity on Uniswap (Ethereum) and PancakeSwap (BSC). Using this access, the attacker removed all team-provided liquidity from the DEGO trading pairs on both decentralized exchanges. The attacker also hijacked Dego's on-chain minting contract and minted approximately 1,185,164.71 DEGO tokens to the deployer account, then liquidated a total of approximately 1,288,233.59 DEGO tokens through an instant exchange service. Specifically, the attacker drained 2,613.40 BNB and 492,316.41 DEGO tokens from BSC pools, and 378.76 ETH and additional DEGO tokens from Ethereum pools. The Cronos chain was also affected, with 196,256.72 USDT and 199,401.97 USDC stolen. The DEGO token price fell approximately 20%, dropping from $4.50 to $3.65 immediately following the incident. A simultaneous attack on Dego's strategic partner Cocos-BCX, which shared infrastructure, contributed to a combined loss estimated by security firm PeckShield at approximately $14.4 million across both projects. Security researcher Xuxian Jiang noted that the admin keys for both projects may have been stored on a single compromised device. The attacker liquidated stolen assets and routed proceeds through Tornado.Cash, converting portions into Bitcoin and Monero to obscure the trail. Dego Finance contacted Binance, KuCoin, Gate.io, Poloniex, and PancakeSwap to request suspension of DEGO deposits following the incident.","heading":"The Compromised Key Attack","sources":[{"url":"https://rekt.news/dego-finance-rekt","name":"","type":"other","credibility":3},{"url":"https://cryptobriefing.com/bsc-ethereum-defi-projects-hit-14-4m-hack/","name":"","type":"other","credibility":3},{"url":"https://cryptopotato.com/defi-project-dego-finance-hacked-exploiters-reportedly-drain-over-10m/","name":"","type":"other","credibility":3},{"url":"https://www.quadrigainitiative.com/hackfraudscam/degofinancekeycompromised.php","name":"","type":"other","credibility":3}],"severity":"medium"},{"content":"Blockchain security firm Beosin published an on-chain analysis attributing the attack to a suspected private key compromise rather than a smart contract vulnerability. The primary attacker address identified across Ethereum, BSC, and Cronos is 0x118203b0f2a3ef9e749d871c8fef5e5e55ef5c91. At the time of initial reporting, the attacker's BSC wallet held approximately $9.6 million in BNB and Binance-pegged ETH, while the Ethereum wallet held approximately $4.8 million. An example minting transaction on Ethereum is hash 0x9b65bb0e9899a56dff9a14aa6ac33dfb64d2e5b9906199367a7c1191720d0834, in which 592,582.35 DEGO tokens were minted to the deployer account before 269,502 DEGO tokens and 378 ETH were removed by stripping liquidity. Thirteen addresses spanning BSC, Ethereum, and Cronos were drained in total. Stolen assets were subsequently moved through Tornado.Cash and converted to privacy coins, significantly hindering on-chain tracing. PeckShield confirmed tracking of the attacker wallet and identified that the funds had not been transferred beyond the primary address in the immediate aftermath. Dego Finance stated it had collaborated with the Etherscan team to flag and label the attacker's known addresses.","heading":"On-Chain Evidence","sources":[{"url":"https://mirror.xyz/0xaB265E6124dedE46C85336e720521209d51E403e/gnhOffpQBoD7XRepsBiG8o-hQpH-ZRIzY-KS6tby4rM","name":"","type":"other","credibility":3},{"url":"https://cryptobriefing.com/bsc-ethereum-defi-projects-hit-14-4m-hack/","name":"","type":"other","credibility":3},{"url":"https://www.quadrigainitiative.com/hackfraudscam/degofinancekeycompromised.php","name":"","type":"other","credibility":3}],"severity":"medium"},{"content":"No stolen funds were recovered. Dego Finance did not establish a compensation fund or reimburse affected liquidity providers for on-chain losses. The primary recovery action was a token contract migration. On approximately April 18, 2022, Dego deployed new token contracts on both ERC-20 (0x3da932456d082cba208feb0b096d49b202bf89c8) and BEP-20 (0x3Da932456D082CBa208FEB0B096d49b202Bf89c8) to replace the compromised legacy contracts. Binance publicly confirmed support for the contract swap, suspending DEGO margin borrowing pairs (DEGO/BUSD, DEGO/USDT, DEGO/BTC) during the transition and reopening deposits and withdrawals after migration was complete. Token holders who held DEGO before block 14340334 on Ethereum or block 15853612 on BSC were eligible to swap to new tokens. The team stated it had received clues pointing to the attacker's identity and was collaborating with security experts, but no public report of an arrest or fund recovery was subsequently published. Cocos-BCX, the co-affected partner project, transferred its deployer ownership to a multi-signature wallet as a post-incident security measure. Dego's post-incident Medium post described collaboration efforts but offered no timeline or verifiable updates on fund recovery.","heading":"Recovery","sources":[{"url":"https://www.binance.com/en/support/announcement/81c8505080184d3ea8c0fa4bf0b1bb8e","name":"","type":"other","credibility":3},{"url":"https://www.binance.com/en/support/announcement/binance-has-completed-the-dego-finance-dego-contract-swap-a02d565775154364914cc6a10fc1ca6a","name":"","type":"other","credibility":3},{"url":"https://www.altcoinbuzz.io/cryptocurrency-news/dego-finance-receives-support-from-binance-on-contract-swapping/","name":"","type":"other","credibility":3}],"severity":"medium"},{"content":"Dego Finance presents several compounding risk factors. First, the protocol's team is entirely anonymous, with no named founders, no registered legal entity, and no auditable organizational accountability. This prevents any legal recourse for affected users. Second, the February 2022 attack demonstrated that critical private keys—specifically the deployer keys controlling liquidity provision and the minting contract—were insufficiently secured, potentially stored on a single device shared with a partner project. The incident was not a smart contract exploit but a private key compromise, which implies an operational security failure at the team level rather than a codebase flaw, though the outcome for users is equivalent. Third, no compensation was paid to liquidity providers who suffered direct losses, and the token migration addressed only the structural contract problem rather than restoring lost value. Fourth, following the incident the team's reliance on centralized exchange intervention—asking Binance, KuCoin, and others to halt trading—highlighted a contradiction between the project's DeFi branding and its actual operational dependencies on centralized infrastructure. Fifth, stolen funds were routed through Tornado.Cash and converted to privacy coins, indicating the attacker had premeditated obfuscation steps in place, which is inconsistent with the team's characterization of the event as a simple key leak. The combination of anonymous team, no user restitution, history of critical key mismanagement, and ongoing uncertainty about the root cause warrants a critical severity rating. Prospective users and liquidity providers should treat Dego Finance as a high-risk protocol with an unresolved security history.","heading":"Risk Assessment","sources":[{"url":"https://rekt.news/dego-finance-rekt","name":"","type":"other","credibility":3},{"url":"https://cryptobriefing.com/bsc-ethereum-defi-projects-hit-14-4m-hack/","name":"","type":"other","credibility":3},{"url":"https://www.coinspeaker.com/guides/nfts-defi-what-is-dego-finance-dego/","name":"","type":"other","credibility":3}],"severity":"medium"}],"timeline":[{"date":"2020-09","event":"Dego Finance launches on Ethereum as an open-source NFT and DeFi aggregator protocol with an anonymous founding team.","source":"","date_original":"2020-09-01"},{"date":"2021","event":"DEGO token reaches all-time high appreciation exceeding 400% during the 2021 bull market.","source":"","date_original":"2021-01-01"},{"date":"2022-02-10","event":"Attacker compromises team deployer private keys and drains approximately $10 million from DEGO liquidity pools on Uniswap (Ethereum), PancakeSwap (BSC), and Cronos. DEGO token drops approximately 20%. Partner project Cocos-BCX is simultaneously attacked; combined losses reach approximately $14.4 million.","source":""},{"date":"2022-02-10","event":"Dego Finance contacts Binance, KuCoin, Gate.io, Poloniex, and PancakeSwap requesting suspension of DEGO deposits.","source":""},{"date":"2022-02-10","event":"PeckShield and Beosin independently publish on-chain analyses attributing the attack to a private key compromise. Attacker address 0x118203b0f2a3ef9e749d871c8fef5e5e55ef5c91 identified across all affected chains.","source":""},{"date":"2022-02-11","event":"Dego Finance publishes a community post acknowledging the hack, stating the team is working with security experts and has received clues about the attacker's identity. No funds recovered.","source":""},{"date":"2022-04-13","event":"Binance announces support for the Dego Finance DEGO contract swap. New ERC-20 and BEP-20 contract addresses deployed.","source":""},{"date":"2022-04-18","event":"Binance completes the DEGO contract swap. Deposits and withdrawals reopen for new token contracts. Token migration snapshot block set at Ethereum block 14340334 and BSC block 15853612.","source":""}],"sources_used":[{"url":"https://www.coinspeaker.com/guides/nfts-defi-what-is-dego-finance-dego/","name":"","type":"other","archive_url":"http://web.archive.org/web/20260311073504/https://www.coinspeaker.com/guides/nfts-defi-what-is-dego-finance-dego/","credibility":3,"archive_timestamp":"2026-03-11T07:35:04+00:00"},{"url":"https://docs.dego.finance","name":"","type":"other","archive_url":"http://web.archive.org/web/20260514194016/https://docs.dego.finance/","credibility":3,"archive_timestamp":"2026-05-14T19:40:16+00:00"},{"url":"https://rekt.news/dego-finance-rekt","name":"","type":"other","archive_url":"http://web.archive.org/web/20260322055935/https://rekt.news/dego-finance-rekt","credibility":3,"archive_timestamp":"2026-03-22T05:59:35+00:00"},{"url":"https://cryptobriefing.com/bsc-ethereum-defi-projects-hit-14-4m-hack/","name":"","type":"other","archive_url":"http://web.archive.org/web/20251014072505/https://cryptobriefing.com/bsc-ethereum-defi-projects-hit-14-4m-hack/","credibility":3,"archive_timestamp":"2025-10-14T07:25:05+00:00"},{"url":"https://cryptopotato.com/defi-project-dego-finance-hacked-exploiters-reportedly-drain-over-10m/","name":"","type":"other","archive_url":"http://web.archive.org/web/20260610121035/https://cryptopotato.com/defi-project-dego-finance-hacked-exploiters-reportedly-drain-over-10m/","credibility":3,"archive_timestamp":"2026-06-10T12:10:35+00:00"},{"url":"https://www.quadrigainitiative.com/hackfraudscam/degofinancekeycompromised.php","name":"","type":"other","archive_url":"https://web.archive.org/web/20260830132838/https://www.quadrigainitiative.com/hackfraudscam/degofinancekeycompromised.php","credibility":3,"archive_timestamp":"2026-08-30T13:28:38+00:00"},{"url":"https://mirror.xyz/0xaB265E6124dedE46C85336e720521209d51E403e/gnhOffpQBoD7XRepsBiG8o-hQpH-ZRIzY-KS6tby4rM","name":"","type":"other","archive_url":null,"credibility":3,"archive_error":"forbiddenaccess","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.binance.com/en/support/announcement/81c8505080184d3ea8c0fa4bf0b1bb8e","name":"","type":"other","archive_url":"https://web.archive.org/web/20260830131631/https://www.binance.com/en/support/announcement/detail/81c8505080184d3ea8c0fa4bf0b1bb8e?utm_medium=GlobalSocial&utm_campaign=GlobalSocial&ref=AZTKZ9XS&utm_source=BinanceTwitter","credibility":3,"archive_timestamp":"2026-08-30T13:16:31+00:00"},{"url":"https://www.binance.com/en/support/announcement/binance-has-completed-the-dego-finance-dego-contract-swap-a02d565775154364914cc6a10fc1ca6a","name":"","type":"other","archive_url":"https://web.archive.org/web/20260830131720/https://www.binance.com/en/support/announcement/detail/a02d565775154364914cc6a10fc1ca6a","credibility":3,"archive_timestamp":"2026-08-30T13:17:20+00:00"},{"url":"https://www.altcoinbuzz.io/cryptocurrency-news/dego-finance-receives-support-from-binance-on-contract-swapping/","name":"","type":"other","archive_url":"http://web.archive.org/web/20250917202117/https://www.altcoinbuzz.io/cryptocurrency-news/dego-finance-receives-support-from-binance-on-contract-swapping/","credibility":3,"archive_timestamp":"2025-09-17T20:21:17+00:00"}],"source_tags":["defillama"],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-sonnet-4-6","created_at":"2026-05-04T02:54:51.288618+00:00","updated_at":"2026-08-30T13:44:38.186626+00:00"}}