{"investigation":{"slug":"origin-protocol","entity_name":"Origin Protocol","trust_score":28,"severity_base":null,"score_modifier":-10,"confidence":0.78,"status":"published","content_type":"investigation","summary":"Origin Protocol is a San Francisco-based DeFi and NFT platform founded in 2017 by Josh Fraser and Matthew Liu, best known for its yield-bearing stablecoin Origin Dollar (OUSD) and Origin Ether (OETH). In November 2020, before completing any security audit, OUSD was exploited via a reentrancy flash-loan attack resulting in approximately $7.7 million in losses including over $1 million from the team's own treasury. The protocol subsequently completed multiple audits, compensated affected users, and relaunched; it has continued operating with expanded DeFi yield products through 2025, though the OGN token trades at a fraction of its 2021 all-time high.","sections":[{"content":"On November 17, 2020 at approximately 00:47 UTC, Origin Protocol's yield-bearing stablecoin Origin Dollar (OUSD) was exploited in a reentrancy flash-loan attack. The attacker borrowed approximately 70,000 ETH (valued at over $32 million at the time) via a flash loan, then exploited a missing validation check and absent reentrancy guard in the VaultCore smart contract's mint logic. This allowed the attacker to trigger an artificial rebase event that inflated OUSD supply before the first mint was fully accounted for. The attacker received more OUSD than the contract held in assets, then swapped the excess tokens on Uniswap and SushiSwap for profit. Total funds stolen amounted to approximately 11,804 ETH and 2,249,821 DAI, valued at roughly $7–$7.7 million at the time. The attacker subsequently laundered funds through Tornado.cash and converted portions to renBTC. Co-founder Josh Fraser acknowledged the incident publicly and stated: 'This has been a rough day for everyone involved, but we're not going anywhere.' Co-founder Matthew Liu confirmed that the OUSD contracts had not completed any security audit at the time of the attack; Trail of Bits had an audit in progress but had not yet delivered findings. Over $1 million of the losses came from Origin's own founders and company treasury. PeckShield published a root cause analysis confirming the reentrancy vulnerability as the attack vector.","heading":"November 2020 OUSD Flash Loan Exploit","sources":[{"url":"https://www.coindesk.com/markets/2020/11/17/origin-protocol-loses-7m-in-latest-defi-attack","name":"coindesk.com","type":"other","credibility":3},{"url":"https://cryptobriefing.com/origin-protocol-emptied-7-million-latest-flash-loan-attack/","name":"cryptobriefing.com","type":"other","credibility":3},{"url":"https://peckshield.medium.com/origin-dollar-incident-root-cause-analysis-f27e11988c90","name":"peckshield.medium.com","type":"other","credibility":3},{"url":"https://blog.peckshield.com/2020/11/17/ousd/","name":"blog.peckshield.com","type":"other","credibility":3},{"url":"https://decrypt.co/48478/ethereum-based-origin-dollar-hacked-for-estimated-7-million","name":"decrypt.co","type":"other","credibility":3},{"url":"https://www.theblock.co/post/84804/defi-protocol-origin-attack-7-million-lost","name":"theblock.co","type":"other","credibility":3}],"severity":"critical"},{"content":"Origin Protocol launched OUSD in September 2020 without completing an independent smart contract security audit. Trail of Bits, a respected security research firm, was engaged to audit the contracts and was mid-engagement when the November 2020 exploit occurred. The reentrancy vulnerability that was exploited was introduced during a gas-optimization refactoring pass that replicated certain logic without carrying over the associated validation checks. Origin's own post-mortem acknowledged that the bug originated from this refactoring step. The absence of a completed audit prior to deploying a financial contract holding user deposits is a significant security process failure. The team subsequently acknowledged this gap and committed to comprehensive auditing before future launches.","heading":"Pre-Launch Security Practices","sources":[{"url":"https://www.originprotocol.com/blog/what-weve-changed-since-the-ousd-attack?lang=en","name":"originprotocol.com","type":"other","credibility":3},{"url":"https://medium.com/originprotocol/what-weve-changed-since-the-ousd-attack-5894f2bd77cf","name":"medium.com","type":"other","credibility":3},{"url":"https://cryptobriefing.com/origin-protocol-relaunches-stablecoin-following-hack/","name":"cryptobriefing.com","type":"other","credibility":3}],"severity":"high"},{"content":"Within days of the November 2020 exploit, Origin Protocol committed to compensating all affected users. Approximately two-thirds of affected users (approximately 700 total) received full reimbursement in newly minted OUSD, backed by freshly deposited stablecoins. The remaining users — primarily larger depositors — received 25% of their compensation upfront in OUSD, with the remaining 75% delivered in locked OGN tokens vesting over one year, with an additional 25% annual interest accrual to offset time value. In January 2021, Origin announced it was ready to accept compensation claims, with a 90-day claim window closing April 20, 2021. The stolen funds themselves were not recovered; the attacker used Tornado.cash and renBTC conversions to obscure and move funds. At the time of reporting, 7,137 ETH and 2.249 million DAI remained in a monitored attacker wallet, but no public disclosure of recovery or identification of the attacker has been found.","heading":"Compensation Plan and Fund Recovery","sources":[{"url":"https://blog.originprotocol.com/origin-dollar-ousd-detailed-compensation-plan-faa73f87442e","name":"blog.originprotocol.com","type":"other","credibility":3},{"url":"https://cointelegraph.com/news/origin-protocol-begins-accepting-compensation-claims-following-7m-exploit","name":"cointelegraph.com","type":"other","credibility":3},{"url":"https://medium.com/originprotocol/origin-delivers-on-compensation-promise-claim-your-ousd-and-ogn-now-a9fa9b840476","name":"medium.com","type":"other","credibility":3},{"url":"https://www.coindesk.com/business/2021/01/06/origin-brings-back-interest-earning-ousd-stablecoin-following-7m-hack","name":"coindesk.com","type":"other","credibility":3}],"severity":"high"},{"content":"Following the exploit, Origin Protocol undertook extensive security remediation before relaunching OUSD in January 2021. Trail of Bits completed its audit, identifying the critical reentrancy vulnerability along with several minor issues, all of which were resolved. Solidified conducted an additional independent audit of the full system including new staking and compensation contracts. OpenZeppelin subsequently conducted a further audit. Reentrancy guards were added to the OUSD Vault to prevent similar exploit patterns. Origin maintains a public audit registry at docs.originprotocol.com. The 2023-launched Origin Ether (OETH) product used approximately 95% of OUSD's audited codebase, inheriting the security improvements from prior audit cycles.","heading":"Post-Exploit Security Remediation","sources":[{"url":"https://github.com/OriginProtocol/security/blob/master/audits/Trail%20of%20Bits%20-%20Origin%20Dollar%20-%20Dec%202020.pdf","name":"github.com","type":"other","credibility":3},{"url":"https://medium.com/originprotocol/the-results-of-our-smart-contract-audit-with-trail-of-bits-and-how-we-approach-security-at-origin-175cc1646d71","name":"medium.com","type":"other","credibility":3},{"url":"https://blog.openzeppelin.com/origin-dollar-audit","name":"blog.openzeppelin.com","type":"other","credibility":3},{"url":"https://docs.originprotocol.com/security-and-risk/audits","name":"docs.originprotocol.com","type":"other","credibility":3}],"severity":"medium"},{"content":"Origin Protocol raised approximately $38.1 million across multiple funding rounds, including a $3 million seed round at $0.0685 per token, a $6.6 million public ICO on CoinList in mid-2018 at $0.1364, and a $28.5 million strategic round at $0.12. Backers have included Pantera Capital. The OGN token reached an all-time high of approximately $3.39 on April 8, 2021, representing significant appreciation from the ICO price. As of early 2026, OGN trades at a fraction of its peak — the current market capitalization is approximately $14.27 million, representing a decline of approximately 98% from peak. Protocol revenue has been used for OGN buybacks and staker rewards. In 2024, Origin distributed over $6.4 million in yield across its products. Super OETH launched on Base in Q3 2024 and achieved a top-10 TVL position on that network.","heading":"OGN Token Economics and Market Performance","sources":[{"url":"https://cryptorank.io/ico/origin-protocol","name":"cryptorank.io","type":"other","credibility":3},{"url":"https://coinmarketcap.com/currencies/origin-protocol/","name":"coinmarketcap.com","type":"other","credibility":3},{"url":"https://www.originprotocol.com/origin-2024-year-in-review","name":"originprotocol.com","type":"other","credibility":3},{"url":"https://chainbroker.io/projects/origin-protocol/","name":"chainbroker.io","type":"other","credibility":3}],"severity":"medium"},{"content":"Origin Protocol was co-founded in San Francisco in 2017 by Josh Fraser and Matthew Liu. Josh Fraser previously co-founded EventVue, Torbit (acquired by Walmart Labs), and Forage, and has been coding since the age of 10. Matthew Liu served as the third product manager at YouTube (acquired by Google) and as VP of product management at Qwiki (acquired by Yahoo) and Bonobos (acquired by Walmart), holds MS and BS degrees from Stanford, and has made over 50 early-stage investments. Yu Pan, a PayPal co-founding member and the first YouTube employee, joined Origin as lead research and development engineer in 2018. The founders have disclosed that they personally lost over $1 million in the November 2020 exploit, aligning their interests with affected users. No regulatory actions, criminal charges, or enforcement proceedings against team members have been found in available records.","heading":"Team and Background","sources":[{"url":"https://www.originprotocol.com/team","name":"originprotocol.com","type":"other","credibility":3},{"url":"https://blog.originprotocol.com/welcoming-yu-pan-to-the-origin-team-fcce3e3a2166","name":"blog.originprotocol.com","type":"other","credibility":3},{"url":"https://canvasbusinessmodel.com/blogs/brief-history/origin-protocol-brief-history","name":"canvasbusinessmodel.com","type":"other","credibility":3}],"severity":"low"},{"content":"No SEC enforcement actions or CFTC proceedings against Origin Protocol or its OGN token have been found in available records as of the research date. However, yield-bearing tokens such as OUSD and OETH carry an inherent risk of being classified as securities under U.S. law, a general regulatory concern applicable to the broader DeFi yield sector. The OGN token's significant price decline from its 2021 all-time high of ~$3.39 to approximately $0.03–$0.05 in 2025–2026 reflects broader market conditions and the sustained risk of holding long-tail DeFi governance tokens. The protocol has no documented second major exploit following its 2021 relaunch, and has continued to expand with Super OETH on Base and Origin Vault. The identity of the November 2020 attacker has not been publicly confirmed and the stolen funds were not recovered, representing an unresolved historical harm.","heading":"Ongoing Risks and Regulatory Considerations","sources":[{"url":"https://messari.io/project/origin-protocol","name":"messari.io","type":"other","credibility":3},{"url":"https://coinmarketcap.com/currencies/origin-protocol/","name":"coinmarketcap.com","type":"other","credibility":3},{"url":"https://www.originprotocol.com/march-2025-token-holder-update","name":"originprotocol.com","type":"other","credibility":3}],"severity":"medium"}],"timeline":[{"date":"2017","event":"Origin Protocol founded in San Francisco by Josh Fraser and Matthew Liu.","source":"","date_original":"2017-01-01"},{"date":"2018-06-18","event":"Origin Protocol conducts public ICO on CoinList, raising $6.6 million at $0.1364 per OGN token.","source":""},{"date":"2020-09","event":"Origin Dollar (OUSD) yield-bearing stablecoin launches on Ethereum mainnet without a completed security audit.","source":"","date_original":"2020-09-01"},{"date":"2020-11-17","event":"OUSD exploited via reentrancy flash-loan attack; approximately $7.7 million (11,804 ETH and 2,249,821 DAI) stolen. OUSD price collapses 85% to ~$0.14. Attacker launders funds via Tornado.cash and renBTC.","source":""},{"date":"2020-11-17","event":"Origin co-founders disclose team and treasury lost over $1 million in the exploit. Trail of Bits audit was in progress but not yet completed at time of attack.","source":""},{"date":"2020-12","event":"Trail of Bits completes OUSD audit, identifying the critical reentrancy vulnerability and several minor issues. Solidified conducts additional audit of full system.","source":"","date_original":"2020-12-01"},{"date":"2020-12","event":"Origin Protocol announces detailed compensation plan: full OUSD reimbursement for smaller depositors; 25% OUSD + 75% locked OGN for larger depositors, with 25% annual interest.","source":"","date_original":"2020-12-01"},{"date":"2021-01-06","event":"Origin Protocol relaunches OUSD stablecoin with reentrancy guards and post-exploit security improvements following Trail of Bits and Solidified audits.","source":""},{"date":"2021-01-20","event":"Origin opens compensation claims portal for the 700+ affected OUSD depositors. 90-day claim window set to close April 20, 2021.","source":""},{"date":"2021-04-08","event":"OGN token reaches all-time high of approximately $3.39.","source":""},{"date":"2023-05","event":"Origin Ether (OETH) launches, using ~95% of OUSD's audited codebase to generate yield on ETH via liquid staking.","source":"","date_original":"2023-05-01"},{"date":"2024-07","event":"Super OETH launches on Base blockchain, achieving top-10 TVL position on the network. Origin distributes over $6.4 million in yield to product users in 2024.","source":"","date_original":"2024-07-01"},{"date":"2025-08","event":"Origin launches Origin Vault in partnership with Levva, a diversified ETH yield strategy targeting up to ~23% APY.","source":"","date_original":"2025-08-01"}],"sources_used":[{"url":"https://www.coindesk.com/markets/2020/11/17/origin-protocol-loses-7m-in-latest-defi-attack","name":"CoinDesk: Origin Protocol Loses $7M in Latest DeFi Attack","type":"news_article","archive_url":"http://web.archive.org/web/20260724182943/https://www.coindesk.com/markets/2020/11/17/origin-protocol-loses-7m-in-latest-defi-attack","credibility":1,"archive_timestamp":"2026-07-24T18:29:43+00:00"},{"url":"https://cryptobriefing.com/origin-protocol-emptied-7-million-latest-flash-loan-attack/","name":"CryptoBriefing: Origin Protocol Emptied of $7 million in Flash Loan Attack","type":"news_article","archive_url":"http://web.archive.org/web/20260312070822/https://cryptobriefing.com/origin-protocol-emptied-7-million-latest-flash-loan-attack/","credibility":2,"archive_timestamp":"2026-03-12T07:08:22+00:00"},{"url":"https://peckshield.medium.com/origin-dollar-incident-root-cause-analysis-f27e11988c90","name":"PeckShield: Origin Dollar Incident Root Cause Analysis","type":"research","archive_url":"http://web.archive.org/web/20250804101735/https://peckshield.medium.com/origin-dollar-incident-root-cause-analysis-f27e11988c90","credibility":2,"archive_timestamp":"2025-08-04T10:17:35+00:00"},{"url":"https://blog.peckshield.com/2020/11/17/ousd/","name":"PeckShield Blog: OUSD Attack Technical Analysis","type":"research","archive_url":null,"credibility":2,"archive_error":"error:no-job","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://decrypt.co/48478/ethereum-based-origin-dollar-hacked-for-estimated-7-million","name":"Decrypt: Ethereum-based Origin Dollar Hacked for Estimated $7 Million","type":"news_article","archive_url":"http://web.archive.org/web/20260306114132/https://decrypt.co/48478/ethereum-based-origin-dollar-hacked-for-estimated-7-million","credibility":2,"archive_timestamp":"2026-03-06T11:41:32+00:00"},{"url":"https://www.theblock.co/post/84804/defi-protocol-origin-attack-7-million-lost","name":"The Block: DeFi protocol Origin gets attacked, loses $7 million","type":"news_article","archive_url":"http://web.archive.org/web/20251014015636/https://www.theblock.co/post/84804/defi-protocol-origin-attack-7-million-lost","credibility":1,"archive_timestamp":"2025-10-14T01:56:36+00:00"},{"url":"https://cointelegraph.com/news/origin-protocol-begins-accepting-compensation-claims-following-7m-exploit","name":"CoinTelegraph: Origin Protocol begins accepting compensation claims","type":"news_article","archive_url":"https://web.archive.org/web/20260724175204/https://cointelegraph.com/news/origin-protocol-begins-accepting-compensation-claims-following-7m-exploit","credibility":2,"archive_timestamp":"2026-07-24T17:52:04+00:00"},{"url":"https://blog.originprotocol.com/origin-dollar-ousd-detailed-compensation-plan-faa73f87442e","name":"Origin Protocol Blog: Detailed Compensation Plan","type":"official","archive_url":null,"credibility":2,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://blog.originprotocol.com/urgent-ousd-has-hacked-and-there-has-been-a-loss-of-funds-7b8c4a7d534c","name":"Origin Protocol Blog: Urgent OUSD Hack Disclosure","type":"official","archive_url":null,"credibility":2,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.originprotocol.com/blog/what-weve-changed-since-the-ousd-attack?lang=en","name":"Origin Protocol: What We've Changed Since the OUSD Attack","type":"official","archive_url":"https://web.archive.org/web/20260724184415/https://www.originprotocol.com/blog/what-weve-changed-since-the-ousd-attack?lang=en","credibility":2,"archive_timestamp":"2026-07-24T18:44:15+00:00"},{"url":"https://medium.com/originprotocol/what-weve-changed-since-the-ousd-attack-5894f2bd77cf","name":"Origin Medium: What We've Changed Since the OUSD Attack","type":"official","archive_url":"https://web.archive.org/web/20260725085330/https://blog.originprotocol.com/what-weve-changed-since-the-ousd-attack-5894f2bd77cf?gi=aed035b723b8","credibility":2,"archive_timestamp":"2026-07-25T08:53:30+00:00"},{"url":"https://www.coindesk.com/business/2021/01/06/origin-brings-back-interest-earning-ousd-stablecoin-following-7m-hack","name":"CoinDesk: Origin Brings Back Interest-Earning OUSD Following $7M Hack","type":"news_article","archive_url":"https://web.archive.org/web/20260725040355/https://www.coindesk.com/business/2021/01/06/origin-brings-back-interest-earning-ousd-stablecoin-following-7m-hack","credibility":1,"archive_timestamp":"2026-07-25T04:03:55+00:00"},{"url":"https://medium.com/originprotocol/origin-delivers-on-compensation-promise-claim-your-ousd-and-ogn-now-a9fa9b840476","name":"Origin Medium: Origin Delivers on Compensation Promise","type":"official","archive_url":null,"credibility":2,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://github.com/OriginProtocol/security/blob/master/audits/Trail%20of%20Bits%20-%20Origin%20Dollar%20-%20Dec%202020.pdf","name":"GitHub: Trail of Bits Audit - Origin Dollar Dec 2020","type":"research","archive_url":"http://web.archive.org/web/20251116071942/https://github.com/OriginProtocol/security/blob/master/audits/Trail%20of%20Bits%20-%20Origin%20Dollar%20-%20Dec%202020.pdf","credibility":1,"archive_timestamp":"2025-11-16T07:19:42+00:00"},{"url":"https://blog.openzeppelin.com/origin-dollar-audit","name":"OpenZeppelin: Origin Dollar Audit","type":"research","archive_url":"https://web.archive.org/web/20260724211751/https://www.openzeppelin.com/news/origin-dollar-audit","credibility":1,"archive_timestamp":"2026-07-24T21:17:51+00:00"},{"url":"https://docs.originprotocol.com/security-and-risk/audits","name":"Origin Docs: Audits","type":"official","archive_url":"http://web.archive.org/web/20260716164015/https://docs.originprotocol.com/security-and-risk/audits","credibility":2,"archive_timestamp":"2026-07-16T16:40:15+00:00"},{"url":"https://cryptorank.io/ico/origin-protocol","name":"CryptoRank: Origin Protocol ICO Details","type":"other","archive_url":"https://web.archive.org/web/20260725084948/https://cryptorank.io/ico/origin-protocol","credibility":2,"archive_timestamp":"2026-07-25T08:49:48+00:00"},{"url":"https://coinmarketcap.com/currencies/origin-protocol/","name":"CoinMarketCap: Origin Protocol","type":"other","archive_url":"http://web.archive.org/web/20260708211949/https://coinmarketcap.com/currencies/origin-protocol/","credibility":2,"archive_timestamp":"2026-07-08T21:19:49+00:00"},{"url":"https://www.originprotocol.com/origin-2024-year-in-review","name":"Origin Protocol: 2024 Year in Review","type":"official","archive_url":"https://web.archive.org/web/20260724184413/https://www.originprotocol.com/blog/origin-2024-year-in-review?lang=en","credibility":2,"archive_timestamp":"2026-07-24T18:44:13+00:00"},{"url":"https://www.originprotocol.com/team","name":"Origin Protocol Team Page","type":"official","archive_url":"http://web.archive.org/web/20260203095335/https://www.originprotocol.com/team","credibility":2,"archive_timestamp":"2026-02-03T09:53:35+00:00"},{"url":"https://blog.originprotocol.com/welcoming-yu-pan-to-the-origin-team-fcce3e3a2166","name":"Origin Protocol Blog: Welcoming Yu Pan","type":"official","archive_url":null,"credibility":2,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://messari.io/project/origin-protocol","name":"Messari: Origin Protocol","type":"research","archive_url":null,"credibility":2,"archive_error":"error:unauthorized","archive_status":"unarchivable","archive_timestamp":null}],"source_tags":["defillama"],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-sonnet-4-6","created_at":"2026-05-04T02:55:00.101566+00:00","updated_at":"2026-08-29T01:34:53.077+00:00"}}