{"investigation":{"slug":"roll","entity_name":"Roll","trust_score":32,"severity_base":null,"score_modifier":0,"confidence":0.82,"status":"published","content_type":"investigation","summary":"Roll (tryroll.com) is an Ethereum-based social token infrastructure platform that allows creators to mint, distribute, and manage branded personal tokens. On March 14, 2021, Roll suffered a critical security breach in which an attacker compromised the private keys of its hot wallet and liquidated approximately $5.7 million worth of social tokens across 42 different creator tokens, routing stolen ETH through Tornado Cash. Roll subsequently upgraded its security infrastructure via a Fireblocks MPC integration and raised a $10M Series A in September 2021, but the root cause of the private key compromise was never publicly confirmed.","sections":[{"content":"Roll (operating at tryroll.com) is an Ethereum-based platform that provides infrastructure for the creator economy, enabling influencers, artists, and community builders to mint unique ERC-20 social tokens. The platform was founded in 2018 and launched in 2019 by co-founders Bradley Miles (CEO) and Sid Kalla (CTO), both former researchers in the crypto space — Miles at CoinDesk and Kalla at Smith & Crown and Bloomberg. The Roll network handles token minting, distribution, and custodial hot wallet management on behalf of creators. As of 2022, over 450 creators had minted social tokens through the platform. Roll is often described as aiming to be the \"Stripe for Social Tokens,\" providing APIs and infrastructure for token creation and redemption across social platforms. The company is headquartered in the United States and has pursued regulatory clearance at the state level, obtaining a Colorado no-action letter confirming it does not require a money transmitter license in that state. Total funding raised stands at approximately $12.7 million across multiple rounds.","heading":"Overview","sources":[{"url":"https://decrypt.co/109234/roll-upgrades-ethereum-social-token-platform-memberships-staking","name":"decrypt.co","type":"other","credibility":3},{"url":"https://www.prnewswire.com/news-releases/roll-raises-10m-to-become-the-stripe-for-social-tokens-301387479.html","name":"prnewswire.com","type":"other","credibility":3},{"url":"https://www.mcdermottlaw.com/media/mcdermott-guides-social-token-platform-cleared-to-launch-in-colorado/","name":"mcdermottlaw.com","type":"other","credibility":3},{"url":"https://thedefiant.substack.com/p/social-money-is-how-we-take-a-piece-67d","name":"thedefiant.substack.com","type":"other","credibility":3}],"severity":"medium"},{"content":"On March 14, 2021, Roll's centrally managed hot wallet was compromised, resulting in the theft of approximately 3,000 ETH valued at $5.7 million at the time. The attack occurred in the early morning UTC hours, with an initial public alert issued at approximately 8:16 AM UTC by security researcher MyCrypto. The attacker gained control of Roll's hot wallet private keys and executed a rapid drain of 42 creator social tokens that Roll held in custody on behalf of platform participants. The stolen tokens were immediately liquidated through Uniswap, causing a catastrophic cascade of price collapses across the social token market. Proceeds in ETH were then routed to Tornado Cash, an Ethereum privacy mixer, in an attempt to obscure the trail. Roll attributed the incident to a compromise of the private keys of its hot wallet, explicitly ruling out smart contract bugs. One week after the attack, Roll publicly acknowledged it still did not know how the private keys were accessed. CEO Bradley Miles admitted the platform had never undergone infrastructure security audits prior to launch, stating: \"We weren't ready from a security standpoint.\" Security was overseen solely by CTO Sid Kalla, with no dedicated cybersecurity staff on the team. Amazon Web Services cloud infrastructure with app-based authentication was the security posture at the time. Blockchain analyst Igor Igamberdiev of The Block noted that on-chain evidence — specifically that \"the victim who lost all their social tokens gave approvals so that an exploiter could transferFrom() their tokens\" — was consistent with either a private key compromise or an insider threat. No perpetrator was ever publicly identified.","heading":"Incident Details — March 2021 Hot Wallet Breach","sources":[{"url":"https://techcrunch.com/2021/03/16/5-7m-stolen-in-roll-crypto-heist-after-hot-wallet-hacked/","name":"techcrunch.com","type":"other","credibility":3},{"url":"https://techcrunch.com/2021/03/23/roll-still-doesnt-know-how-its-hot-wallet-was-hacked/","name":"techcrunch.com","type":"other","credibility":3},{"url":"https://www.coindesk.com/markets/2021/03/14/social-tokens-crash-after-reported-hack-at-roll","name":"coindesk.com","type":"other","credibility":3},{"url":"https://decrypt.co/61349/a-5-7-million-crypto-heist-leaves-social-tokens-in-freefall","name":"decrypt.co","type":"other","credibility":3},{"url":"https://www.theblock.co/linked/98261/roll-social-token-platform-exploit","name":"theblock.co","type":"other","credibility":3}],"severity":"medium"},{"content":"Blockchain data confirmed that the hacker transferred the stolen social tokens from Roll's hot wallet, liquidated them via Uniswap in rapid succession, and then routed hundreds of ETH to Tornado Cash to obscure the destination of funds. The Chainalysis blockchain analytics firm assisted Roll in tracing funds post-incident, though no public attribution report was released. On-chain analysis by Igor Igamberdiev highlighted that the transfer function approvals observed on-chain were consistent with a direct private key compromise rather than a smart contract exploit — the attacker was able to call transferFrom() on behalf of Roll's custodial wallet. Token price impacts were severe and immediate. MORK collapsed approximately 72%, FWB (Friends With Benefits) dropped approximately 96%, WHALE fell over 25%, KERMAN declined over 40%, and RARE and PICA each fell over 50% during European trading hours on March 14. A total of 42 distinct social tokens were affected, drawn from a pool of 400+ creator tokens on the platform. Rally's competing RLY token surged 15% during the incident as investors moved to alternatives. The on-chain transactions were publicly visible on Etherscan but no specific attacker wallet address has been confirmed in public reporting.","heading":"On-Chain Evidence and Market Impact","sources":[{"url":"https://cryptopotato.com/social-money-platform-roll-hacked-for-5-7m-as-social-tokens-dump/","name":"cryptopotato.com","type":"other","credibility":3},{"url":"https://decrypt.co/61349/a-5-7-million-crypto-heist-leaves-social-tokens-in-freefall","name":"decrypt.co","type":"other","credibility":3},{"url":"https://www.theblock.co/linked/98261/roll-social-token-platform-exploit","name":"theblock.co","type":"other","credibility":3},{"url":"https://protos.com/social-token-ethereum-crypto-roll-hack-million-tokens-uniswap/","name":"protos.com","type":"other","credibility":3},{"url":"https://cointelegraph.com/news/hacker-makes-off-with-5-7m-after-ransacking-social-token-platform","name":"cointelegraph.com","type":"other","credibility":3}],"severity":"medium"},{"content":"Roll was co-founded by Bradley Miles and Sid Kalla in 2018. Bradley Miles previously served as founding researcher at CoinDesk, where he authored the State of Blockchain quarterly market research reports. Sid Kalla's background includes software development at Bloomberg's trading solutions team and crypto research and writing for CoinDesk and other publications, with a focus on token economic protocols. The founders' shared interest in creator monetization independent of centralized platforms led them to build Roll on Ethereum. Prior to the March 2021 breach, Roll acknowledged it had no dedicated cybersecurity staff, with Kalla overseeing all security responsibilities. Post-breach, Roll committed to hiring a Chief Information Security Officer. The company has received backing from notable investors and angels including Galaxy Interactive, Hustle Fund, Gary Vaynerchuk (early backer), Ryan Selkis, Balaji Srinivasan, and, in the September 2021 Series A, IOSG Ventures (lead), Animoca Brands, Alchemy, Huobi Ventures, Wei Zhou (Binance CFO), and Jeff Zirlin (Axie Infinity co-founder), among others.","heading":"Team and Background","sources":[{"url":"https://thedefiant.substack.com/p/social-money-is-how-we-take-a-piece-67d","name":"thedefiant.substack.com","type":"other","credibility":3},{"url":"https://techcrunch.com/2021/03/23/roll-still-doesnt-know-how-its-hot-wallet-was-hacked/","name":"techcrunch.com","type":"other","credibility":3},{"url":"https://www.prnewswire.com/news-releases/roll-raises-10m-to-become-the-stripe-for-social-tokens-301387479.html","name":"prnewswire.com","type":"other","credibility":3},{"url":"https://medium.com/iosg-ventures/investing-in-roll-d65602321f88","name":"medium.com","type":"other","credibility":3}],"severity":"medium"},{"content":"Following the March 2021 hack, Roll undertook several remediation steps. In June 2021, Roll announced a partnership with Fireblocks, a crypto custody and infrastructure firm, to overhaul its private key management. The Fireblocks multiparty computation (MPC) wallet system distributes key shards so that no single point of failure can expose the full private key. Through this integration, Roll secured up to $30 million in cybersecurity insurance coverage for creators and users, described by Kalla as \"a first in crypto-creator insurance.\" Roll also released updated versions of its smart contracts, which were simultaneously audited by two separate firms, and committed to reducing the volume of tokens held in hot wallets. A creator relief fund was established with a reported value between $500,000 and $750,000 (figures vary across sources) to compensate affected creators and their communities. In September 2021, Roll closed a $10 million Series A funding round, bringing total funding to approximately $12.7 million. By 2022, Roll had expanded its platform to include on-chain Ethereum memberships and staking tools for creators.","heading":"Post-Incident Remediation","sources":[{"url":"https://www.coindesk.com/business/2021/06/24/roll-repairing-from-hack-enlists-fireblocks-for-key-protection","name":"coindesk.com","type":"other","credibility":3},{"url":"https://www.nasdaq.com/articles/roll-repairing-from-hack-enlists-fireblocks-for-key-protection-2021-06-24","name":"nasdaq.com","type":"other","credibility":3},{"url":"https://www.prnewswire.com/news-releases/roll-raises-10m-to-become-the-stripe-for-social-tokens-301387479.html","name":"prnewswire.com","type":"other","credibility":3},{"url":"https://decrypt.co/109234/roll-upgrades-ethereum-social-token-platform-memberships-staking","name":"decrypt.co","type":"other","credibility":3}],"severity":"medium"},{"content":"Roll presents a high-severity historical risk profile stemming primarily from the March 2021 hot wallet breach. Several factors are material to ongoing risk evaluation. First, the root cause of the private key compromise was never publicly confirmed. Roll's own post-incident investigation, conducted with Chainalysis, found no anomalous logins in access logs, leaving open the question of whether the breach was the result of external intrusion, a supply chain compromise, or insider access. Second, Roll's pre-breach security posture was materially deficient: no infrastructure audits had been performed before launch, there were no dedicated security staff, and the private key management relied on a single AWS-hosted instance. Third, the platform operates a centralized custodial model in which Roll, not creators or users, holds private keys to wallets containing creator tokens. This architecture creates a single point of failure that is structurally distinct from non-custodial protocols. Fourth, the suspected insider-threat angle (flagged at low confidence by analyst Igor Igamberdiev based on on-chain approval patterns) has not been publicly ruled out by Roll or law enforcement. Post-remediation, Roll's adoption of MPC custody via Fireblocks and dual smart contract audits represent meaningful security improvements. However, users and creators relying on the platform should treat Roll's custodial model as a concentrated counterparty risk and should be aware that the platform suffered one of the largest social token hacks on record. ZachXBT has flagged this entity. No regulatory enforcement actions are known to have been brought against Roll as of the time of this investigation.","heading":"Risk Assessment","sources":[{"url":"https://techcrunch.com/2021/03/23/roll-still-doesnt-know-how-its-hot-wallet-was-hacked/","name":"techcrunch.com","type":"other","credibility":3},{"url":"https://protos.com/social-token-ethereum-crypto-roll-hack-million-tokens-uniswap/","name":"protos.com","type":"other","credibility":3},{"url":"https://www.coindesk.com/business/2021/06/24/roll-repairing-from-hack-enlists-fireblocks-for-key-protection","name":"coindesk.com","type":"other","credibility":3},{"url":"https://cryptopotato.com/social-money-platform-roll-hacked-for-5-7m-as-social-tokens-dump/","name":"cryptopotato.com","type":"other","credibility":3}],"severity":"medium"}],"timeline":[{"date":"2018","event":"Roll founded by Bradley Miles and Sid Kalla.","source":"","date_original":"2018-01-01"},{"date":"2019","event":"Roll platform launched on Ethereum mainnet, enabling creators to mint social tokens.","source":"","date_original":"2019-01-01"},{"date":"2021-03-14","event":"Roll's hot wallet private keys compromised. Approximately 3,000 ETH ($5.7M) in social tokens across 42 creator tokens drained and liquidated via Uniswap. Hundreds of ETH subsequently moved to Tornado Cash. Multiple social tokens collapse 25-96% in value.","source":""},{"date":"2021-03-14","event":"Roll suspends all withdrawals and begins internal investigation. $500,000 creator relief fund announced.","source":""},{"date":"2021-03-23","event":"Roll publicly states it still cannot determine how private keys were accessed. CEO Bradley Miles acknowledges lack of pre-launch infrastructure security audits.","source":""},{"date":"2021-06-24","event":"Roll announces Fireblocks MPC wallet integration, securing up to $30M in cybersecurity insurance for creators and users. Updated smart contracts released for dual-firm audit.","source":""},{"date":"2021-09-28","event":"Roll closes $10M Series A funding round led by IOSG Ventures, bringing total raised to $12.7M. Investors include Animoca Brands, Alchemy, Huobi Ventures, and notable crypto angels.","source":""},{"date":"2022-09-13","event":"Roll launches on-chain Ethereum memberships and staking tools, expanding creator economy infrastructure.","source":""}],"sources_used":[{"url":"https://decrypt.co/109234/roll-upgrades-ethereum-social-token-platform-memberships-staking","name":"decrypt.co","type":"other","archive_url":"http://web.archive.org/web/20260603143155/https://decrypt.co/109234/roll-upgrades-ethereum-social-token-platform-memberships-staking","credibility":3,"archive_timestamp":"2026-06-03T14:31:55+00:00"},{"url":"https://www.prnewswire.com/news-releases/roll-raises-10m-to-become-the-stripe-for-social-tokens-301387479.html","name":"prnewswire.com","type":"other","archive_url":"http://web.archive.org/web/20260309163738/https://www.prnewswire.com/news-releases/roll-raises-10m-to-become-the-stripe-for-social-tokens-301387479.html","credibility":3,"archive_timestamp":"2026-03-09T16:37:38+00:00"},{"url":"https://www.mcdermottlaw.com/media/mcdermott-guides-social-token-platform-cleared-to-launch-in-colorado/","name":"mcdermottlaw.com","type":"other","archive_url":"http://web.archive.org/web/20260308140615/https://www.mcdermottlaw.com/media/mcdermott-guides-social-token-platform-cleared-to-launch-in-colorado/","credibility":3,"archive_timestamp":"2026-03-08T14:06:15+00:00"},{"url":"https://thedefiant.substack.com/p/social-money-is-how-we-take-a-piece-67d","name":"thedefiant.substack.com","type":"other","archive_url":"http://web.archive.org/web/20260514123559/https://thedefiant.substack.com/p/social-money-is-how-we-take-a-piece-67d","credibility":3,"archive_timestamp":"2026-05-14T12:35:59+00:00"},{"url":"https://techcrunch.com/2021/03/16/5-7m-stolen-in-roll-crypto-heist-after-hot-wallet-hacked/","name":"techcrunch.com","type":"other","archive_url":"http://web.archive.org/web/20251027234046/https://techcrunch.com/2021/03/16/5-7m-stolen-in-roll-crypto-heist-after-hot-wallet-hacked/","credibility":3,"archive_timestamp":"2025-10-27T23:40:46+00:00"},{"url":"https://techcrunch.com/2021/03/23/roll-still-doesnt-know-how-its-hot-wallet-was-hacked/","name":"techcrunch.com","type":"other","archive_url":"http://web.archive.org/web/20251030112557/https://techcrunch.com/2021/03/23/roll-still-doesnt-know-how-its-hot-wallet-was-hacked/","credibility":3,"archive_timestamp":"2025-10-30T11:25:57+00:00"},{"url":"https://www.coindesk.com/markets/2021/03/14/social-tokens-crash-after-reported-hack-at-roll","name":"coindesk.com","type":"other","archive_url":"http://web.archive.org/web/20251025005936/https://www.coindesk.com/markets/2021/03/14/social-tokens-crash-after-reported-hack-at-roll","credibility":3,"archive_timestamp":"2025-10-25T00:59:36+00:00"},{"url":"https://decrypt.co/61349/a-5-7-million-crypto-heist-leaves-social-tokens-in-freefall","name":"decrypt.co","type":"other","archive_url":"http://web.archive.org/web/20260421014139/https://decrypt.co/61349/a-5-7-million-crypto-heist-leaves-social-tokens-in-freefall","credibility":3,"archive_timestamp":"2026-04-21T01:41:39+00:00"},{"url":"https://www.theblock.co/linked/98261/roll-social-token-platform-exploit","name":"theblock.co","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://cryptopotato.com/social-money-platform-roll-hacked-for-5-7m-as-social-tokens-dump/","name":"cryptopotato.com","type":"other","archive_url":"http://web.archive.org/web/20260609030415/https://cryptopotato.com/social-money-platform-roll-hacked-for-5-7m-as-social-tokens-dump/","credibility":3,"archive_timestamp":"2026-06-09T03:04:15+00:00"},{"url":"https://protos.com/social-token-ethereum-crypto-roll-hack-million-tokens-uniswap/","name":"protos.com","type":"other","archive_url":"http://web.archive.org/web/20260517182639/https://protos.com/social-token-ethereum-crypto-roll-hack-million-tokens-uniswap/","credibility":3,"archive_timestamp":"2026-05-17T18:26:39+00:00"},{"url":"https://cointelegraph.com/news/hacker-makes-off-with-5-7m-after-ransacking-social-token-platform","name":"cointelegraph.com","type":"other","archive_url":"https://web.archive.org/web/20260829191836/https://cointelegraph.com/news/hacker-makes-off-with-5-7m-after-ransacking-social-token-platform","credibility":3,"archive_timestamp":"2026-08-29T19:18:36+00:00"},{"url":"https://medium.com/iosg-ventures/investing-in-roll-d65602321f88","name":"medium.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.coindesk.com/business/2021/06/24/roll-repairing-from-hack-enlists-fireblocks-for-key-protection","name":"coindesk.com","type":"other","archive_url":"https://web.archive.org/web/20260916004554/https://www.coindesk.com/business/2021/06/24/roll-repairing-from-hack-enlists-fireblocks-for-key-protection","credibility":3,"archive_timestamp":"2026-09-16T00:45:54+00:00"},{"url":"https://www.nasdaq.com/articles/roll-repairing-from-hack-enlists-fireblocks-for-key-protection-2021-06-24","name":"nasdaq.com","type":"other","archive_url":"https://web.archive.org/web/20260829203315/https://www.nasdaq.com/articles/roll-repairing-from-hack-enlists-fireblocks-for-key-protection-2021-06-24","credibility":3,"archive_timestamp":"2026-08-29T20:33:15+00:00"}],"source_tags":["defillama"],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-sonnet-4-6","created_at":"2026-05-04T02:54:58.485973+00:00","updated_at":"2026-09-16T00:50:18.899813+00:00"}}