{"investigation":{"slug":"ocelotdex","entity_name":"OcelotDex","trust_score":18,"severity_base":null,"score_modifier":0,"confidence":0.42,"status":"published","content_type":"investigation","summary":"OcelotDex is a decentralized exchange (DEX) operating as an automated market maker (AMM) on ZetaChain, a cross-chain interoperability blockchain. The protocol has an extremely low total value locked of approximately $4.57 as of mid-2026, indicating near-total user abandonment. A security incident reportedly resulting in approximately $4.9 million in losses via an infinite mint and dump vulnerability was attributed to the protocol in September 2024, though independent Tier 1 or Tier 2 confirmation of this specific event remains limited.","sections":[{"content":"OcelotDex is a decentralized exchange built on ZetaChain, a Layer 1 blockchain designed for cross-chain interoperability. It operates as an automated market maker (AMM), allowing users to swap assets and provide liquidity. The protocol's own description frames it as 'your gateway to boundless liquidity and seamless asset exchange on Zetachain.' OcelotDex is tracked by DefiLlama and DappRadar as an active protocol, but its current total value locked (TVL) stands at approximately $4.57 — a figure indicative of functional abandonment rather than active use. For comparison, competing DEXs on ZetaChain such as SushiSwap v3 report TVLs exceeding $55 million on the same chain.","heading":"Protocol Overview","sources":[{"url":"https://defillama.com/protocol/ocelotdex","name":"defillama.com","type":"other","credibility":3},{"url":"https://dappradar.com/dapp/ocelotdex","name":"dappradar.com","type":"other","credibility":3},{"url":"https://defillama.com/chain/ZetaChain","name":"defillama.com","type":"other","credibility":3}],"severity":"medium"},{"content":"DefiLlama's protocol page for OcelotDex references a security incident on September 20, 2024, in which the protocol allegedly lost approximately $4.9 million due to a protocol logic vulnerability characterized as an 'Infinite Mint and Dump' attack. In this class of exploit, an attacker manipulates a vulnerability in smart contract logic to mint an unlimited or artificially large supply of tokens, then sells those tokens into liquidity pools, draining deposited assets. This alleged incident has not been independently confirmed by Tier 1 sources such as major news outlets, court filings, or regulatory records, nor by established Tier 2 crypto security outlets including rekt.news, CoinDesk, The Block, or Decrypt as of the date of this investigation. The absence of major press coverage for a $4.9 million exploit is itself a red flag, as incidents of that magnitude typically generate significant reporting. Users and researchers are advised to treat this claim with caution pending further corroboration.","heading":"Alleged Security Exploit (September 2024)","sources":[{"url":"https://defillama.com/protocol/ocelotdex","name":"defillama.com","type":"other","credibility":3},{"url":"https://pontem.network/posts/top-crypto-infinite-mint-hacks","name":"pontem.network","type":"other","credibility":3},{"url":"https://cointelegraph.com/explained/what-is-an-infinite-mint-attack-and-how-does-it-work","name":"cointelegraph.com","type":"other","credibility":3}],"severity":"medium"},{"content":"OcelotDex has been flagged by blockchain investigator ZachXBT, a pseudonymous on-chain forensics researcher known for identifying crypto scams, rug pulls, and illicit fund flows. ZachXBT joined Paradigm as an incident response advisor in February 2025 and maintains a public record of entity flags. The specific basis for the ZachXBT flag on OcelotDex — whether related to the alleged September 2024 exploit, founder conduct, or on-chain fund movement — was not retrievable from publicly indexed sources at the time of this investigation. ZachXBT flags typically indicate identified on-chain linkages to illicit activity, suspicious fund flows, or confirmed fraud, and should be treated as a serious risk signal even where specific details are not publicly detailed.","heading":"ZachXBT Flag and Third-Party Alerts","sources":[{"url":"https://en.wikipedia.org/wiki/ZachXBT","name":"en.wikipedia.org","type":"other","credibility":3},{"url":"https://zachxbt.live/","name":"zachxbt.live","type":"other","credibility":3},{"url":"https://iq.wiki/wiki/zachxbt","name":"iq.wiki","type":"other","credibility":3}],"severity":"medium"},{"content":"As of May 2026, OcelotDex's total value locked is approximately $4.57, a de facto zero figure for a DeFi protocol. This level of TVL means the protocol has essentially no active liquidity, and any interaction with its smart contracts — including swapping or adding liquidity — would be subject to extreme slippage, manipulation risk, and potential total loss. Protocols reaching this TVL threshold are commonly the result of a rug pull (where founders withdraw liquidity and abandon the project), a major exploit driving user exodus, or organic protocol failure. The trajectory from any prior higher TVL to the current near-zero state has not been reconstructed from available on-chain or news sources, but the outcome is consistent with a protocol in post-incident or post-exit-scam decay.","heading":"Near-Zero TVL and Functional Abandonment","sources":[{"url":"https://defillama.com/protocol/ocelotdex","name":"defillama.com","type":"other","credibility":3},{"url":"https://dappradar.com/narratives/defi/protocols/chain/zetachain","name":"dappradar.com","type":"other","credibility":3}],"severity":"medium"},{"content":"OcelotDex operates on ZetaChain, which itself has experienced security incidents. In April 2026, ZetaChain's GatewayEVM smart contract was exploited for approximately $333,868 due to three compounding bugs in its cross-chain architecture — a vulnerability that had reportedly been disclosed in a bug bounty submission but was dismissed before the exploit occurred. ZetaChain halted cross-chain activity following this incident. While this exploit is separate from OcelotDex and involved only internal team wallets, it illustrates that the broader ZetaChain ecosystem has faced material security challenges. DeFi protocols operating on chains with cross-chain complexity carry compounded smart contract risk.","heading":"Ecosystem Context: ZetaChain","sources":[{"url":"https://www.cryptotimes.io/2026/04/29/how-a-perfect-storm-of-3-bugs-led-to-zetachains-333k-gatewayevm-exploit/","name":"cryptotimes.io","type":"other","credibility":3},{"url":"https://www.theblock.co/post/399315/zetachain-post-mortem","name":"theblock.co","type":"other","credibility":3},{"url":"https://www.theblock.co/post/399092/zetachain-attack-smart-contract","name":"theblock.co","type":"other","credibility":3}],"severity":"medium"},{"content":"No official OcelotDex website, social media accounts, GitHub repository, or team disclosures were identified through web search. The protocol's absence from security audit databases and the lack of any published smart contract audit report represent significant transparency gaps. Projects that operate without disclosed audits, identifiable teams, or accessible governance documentation are considered high-risk under standard DeFi security evaluation frameworks. The combination of a ZachXBT flag, an alleged but poorly-documented major exploit, near-zero TVL, and absent public team presence collectively indicate a high probability that OcelotDex is either a defunct project following an exploit or exit event, or a project that was never transparently operated.","heading":"Transparency and Verifiability Concerns","sources":[{"url":"https://defillama.com/protocol/ocelotdex","name":"defillama.com","type":"other","credibility":3},{"url":"https://dappradar.com/dapp/ocelotdex","name":"dappradar.com","type":"other","credibility":3}],"severity":"medium"}],"timeline":[{"date":"2024","event":"OcelotDex launches as an AMM DEX on ZetaChain mainnet (approximate; exact launch date not independently confirmed from available public sources).","source":"","date_original":"2024-01-01"},{"date":"2024-02","event":"ZetaChain 1.0 goes live on mainnet, providing the foundational blockchain infrastructure on which OcelotDex operates.","source":"","date_original":"2024-02-01"},{"date":"2024-09-20","event":"OcelotDex allegedly suffers an 'Infinite Mint and Dump' exploit resulting in approximately $4.9 million in losses, per DefiLlama protocol data. This claim is not independently confirmed by major crypto news outlets as of the date of this investigation.","source":""},{"date":"2025-02","event":"ZachXBT joins Paradigm as incident response advisor; ZachXBT flag on OcelotDex noted (specific date of flag not publicly documented).","source":"","date_original":"2025-02-01"},{"date":"2026-04-26","event":"ZetaChain's GatewayEVM contract is exploited for approximately $333,868 in a separate incident unrelated to OcelotDex but reflecting continued cross-chain security risks on the host blockchain.","source":""},{"date":"2026-05-26","event":"OcelotDex TVL stands at approximately $4.57 on DefiLlama, indicating near-total liquidity abandonment.","source":""}],"sources_used":[{"url":"https://defillama.com/protocol/ocelotdex","name":"defillama.com","type":"other","archive_url":"http://web.archive.org/web/20250907083403/https://defillama.com/protocol/ocelotdex","credibility":3,"archive_timestamp":"2025-09-07T08:34:03+00:00"},{"url":"https://dappradar.com/dapp/ocelotdex","name":"dappradar.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:not-found","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://defillama.com/chain/ZetaChain","name":"defillama.com","type":"other","archive_url":"http://web.archive.org/web/20251114075306/https://defillama.com/chain/zetachain","credibility":3,"archive_timestamp":"2025-11-14T07:53:06+00:00"},{"url":"https://pontem.network/posts/top-crypto-infinite-mint-hacks","name":"pontem.network","type":"other","archive_url":"http://web.archive.org/web/20260612105504/https://pontem.network/posts/top-crypto-infinite-mint-hacks","credibility":3,"archive_timestamp":"2026-06-12T10:55:04+00:00"},{"url":"https://cointelegraph.com/explained/what-is-an-infinite-mint-attack-and-how-does-it-work","name":"cointelegraph.com","type":"other","archive_url":"http://web.archive.org/web/20260113144239/https://cointelegraph.com/explained/what-is-an-infinite-mint-attack-and-how-does-it-work","credibility":3,"archive_timestamp":"2026-01-13T14:42:39+00:00"},{"url":"https://en.wikipedia.org/wiki/ZachXBT","name":"en.wikipedia.org","type":"other","archive_url":"http://web.archive.org/web/20260711020137/https://en.wikipedia.org/wiki/ZachXBT","credibility":3,"archive_timestamp":"2026-07-11T02:01:37+00:00"},{"url":"https://zachxbt.live/","name":"zachxbt.live","type":"other","archive_url":"http://web.archive.org/web/20260526185801/https://zachxbt.live/","credibility":3,"archive_timestamp":"2026-05-26T18:58:01+00:00"},{"url":"https://iq.wiki/wiki/zachxbt","name":"iq.wiki","type":"other","archive_url":"http://web.archive.org/web/20260415220143/https://iq.wiki/wiki/zachxbt","credibility":3,"archive_timestamp":"2026-04-15T22:01:43+00:00"},{"url":"https://dappradar.com/narratives/defi/protocols/chain/zetachain","name":"dappradar.com","type":"other","archive_url":"https://web.archive.org/web/20260829133019/https://dappradar.com/rankings/protocol/zetachain","credibility":3,"archive_timestamp":"2026-08-29T13:30:19+00:00"},{"url":"https://www.cryptotimes.io/2026/04/29/how-a-perfect-storm-of-3-bugs-led-to-zetachains-333k-gatewayevm-exploit/","name":"cryptotimes.io","type":"other","archive_url":"http://web.archive.org/web/20260724165817/https://www.cryptotimes.io/2026/04/29/how-a-perfect-storm-of-3-bugs-led-to-zetachains-333k-gatewayevm-exploit/","credibility":3,"archive_timestamp":"2026-07-24T16:58:17+00:00"},{"url":"https://www.theblock.co/post/399315/zetachain-post-mortem","name":"theblock.co","type":"other","archive_url":"http://web.archive.org/web/20260430060812/https://www.theblock.co/post/399315/zetachain-post-mortem","credibility":3,"archive_timestamp":"2026-04-30T06:08:12+00:00"},{"url":"https://www.theblock.co/post/399092/zetachain-attack-smart-contract","name":"theblock.co","type":"other","archive_url":"http://web.archive.org/web/20260429074417/https://www.theblock.co/post/399092/zetachain-attack-smart-contract","credibility":3,"archive_timestamp":"2026-04-29T07:44:17+00:00"}],"source_tags":["defillama"],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-sonnet-4-6","created_at":"2026-05-04T02:54:29.103719+00:00","updated_at":"2026-08-29T15:48:22.122895+00:00"}}