{"investigation":{"slug":"seedify","entity_name":"Seedify","trust_score":28,"severity_base":null,"score_modifier":0,"confidence":0.72,"status":"published","content_type":"investigation","summary":"Seedify (Seedify.fund) is a blockchain gaming incubator and IDO/IGO launchpad founded in February 2021 by Levent Cem Aydan, operating on BNB Chain, Ethereum, and Avalanche with its native SFUND token. The platform suffered a critical $1.2–1.7 million bridge exploit in September 2025 attributed by ZachXBT and CZ (Binance) to the North Korean DPRK-affiliated 'Contagious Interview' hacking campaign, causing SFUND to collapse approximately 80–99% and affecting approximately 64,000 token holders. The platform's SFUND token has declined more than 99% from its November 2021 all-time high of approximately $17.67, and the project has been flagged by ZachXBT in connection with the on-chain forensics tying the exploit to state-sponsored theft infrastructure.","sections":[{"content":"On September 23, 2025, Seedify's cross-chain SFUND bridge was exploited by an attacker who had obtained a developer's private key. The attacker used the compromised key to access an OFT (Omnichain Fungible Token) bridge contract on Avalanche — a contract that had previously passed security audits — and minted a large volume of unauthorized SFUND tokens. These tokens were then sold into liquidity pools across Ethereum, Arbitrum, and Base before proceeds were bridged to BNB Chain. The total value drained has been reported at approximately $1.2 million by most sources and approximately $1.7 million by Web3 Is Going Great, which noted the vulnerable bridge contract had been deployed for three years prior to the breach.\n\nBlockchain investigator ZachXBT conducted on-chain forensic analysis and linked the funding wallets associated with the SFUND exploit to previous incidents tied to the DPRK-affiliated 'Contagious Interview' campaign — a North Korean state-sponsored operation distinct from the more widely known Lazarus Group. ZachXBT's analysis identified overlapping wallet addresses between the SFUND hack and prior exploits including those tied to Serenity Shield. Binance co-founder Changpeng Zhao (CZ) publicly stated 'Looks like North Korea DPRK' and confirmed that approximately $200,000 of stolen assets were successfully frozen at the HTX exchange following coordination with security teams.\n\nThe SFUND token experienced a decline of approximately 80% within hours of the exploit announcement, with some sources reporting a brief intraday drop of approximately 99% before partial recovery. The breach directly affected an estimated 64,000 SFUND token holders on BNB Chain. Seedify temporarily disabled all cross-chain bridges and coordinated with centralized exchanges to halt SFUND trading and blacklist attacker addresses. Web3 Is Going Great noted that the platform had reportedly been relying on 'vibe coding' — AI-generated code — which may have contributed to the underlying security vulnerabilities.","heading":"September 2025 Bridge Exploit and DPRK Attribution","sources":[{"url":"https://decrypt.co/341076/north-korean-hackers-drain-1-2m-from-seedify-bridge","name":"decrypt.co","type":"other","credibility":3},{"url":"https://www.web3isgoinggreat.com/single/seedify-bridge-exploit","name":"web3isgoinggreat.com","type":"other","credibility":3},{"url":"https://coinfomania.com/cz-confirms-1-2m-sfund-hack-says-dprk-hackers-likely-involved/","name":"coinfomania.com","type":"other","credibility":3},{"url":"https://cryptorank.io/news/feed/4bc08-sfund-token-crashes-99-as-north-korean-hackers-drain-1-2m-from-seedify-bridge","name":"cryptorank.io","type":"other","credibility":3},{"url":"https://bravenewcoin.com/insights/sfund-token-crashes-99-as-north-korean-hackers-drain-1-2m-from-seedify-bridge","name":"bravenewcoin.com","type":"other","credibility":3},{"url":"https://playtoearn.com/news/seedify-hit-by-major-security-breach-12m-drained-from-sfund-bridge","name":"playtoearn.com","type":"other","credibility":3},{"url":"https://gam3s.gg/news/seedify-suffers-breach/","name":"gam3s.gg","type":"other","credibility":3}],"severity":"medium"},{"content":"ZachXBT, a widely cited blockchain investigator, played a direct role in the post-exploit investigation. According to multiple Tier 2 crypto news sources, Seedify offered ZachXBT a substantial bounty to assist in identifying the attackers and attempting recovery of stolen funds. ZachXBT's on-chain analysis identified that the wallets funding the SFUND exploit shared addresses with wallets previously active in 'Contagious Interview' incidents — a campaign attributed to DPRK that has allegedly claimed over 230 victims since January 2025. ZachXBT specified that the group responsible was Contagious Interview rather than the Lazarus Group.\n\nSeedify's team publicly thanked ZachXBT for connecting them with ZeroShadow — another blockchain security firm — to help reconstruct the attack vector and identify the perpetrators. ZachXBT's findings were corroborated by CZ's public statements and by TRM Labs research into DPRK-linked theft networks. The ZachXBT flag on Seedify is therefore primarily associated with his forensic role in identifying the hack as state-sponsored theft rather than an allegation of fraud or misconduct by the Seedify team itself.","heading":"ZachXBT Involvement and On-Chain Forensics","sources":[{"url":"https://coinfomania.com/cz-confirms-1-2m-sfund-hack-says-dprk-hackers-likely-involved/","name":"coinfomania.com","type":"other","credibility":3},{"url":"https://gam3s.gg/news/seedify-suffers-breach/","name":"gam3s.gg","type":"other","credibility":3},{"url":"https://www.trmlabs.com/resources/blog/zachxbt-uncovers-crypto-theft-network-linked-to-us-government-seizure-funds","name":"trmlabs.com","type":"other","credibility":3},{"url":"https://cryptorank.io/news/feed/a0f18-cz-confirms-200k-frozen-at-htx-after-sfund","name":"cryptorank.io","type":"other","credibility":3}],"severity":"medium"},{"content":"SFUND launched in February 2021 at an initial price of approximately $0.40. By December 1, 2021, it reached an all-time high of approximately $17.67 according to CoinLore, representing a gain of roughly 4,300% from launch. The token then suffered a severe decline in 2022 consistent with the broader crypto market downturn, falling approximately 90% from $8.40 to $0.81 over the course of that year. By January 13, 2026, SFUND reached an all-time low of approximately $0.089.\n\nAt time of writing, SFUND trades approximately 99.9% below its November 2021 all-time high. While this price collapse mirrors broader GameFi/launchpad token trends from the 2021 bull cycle, the magnitude of the decline and the September 2025 hack — which caused a further 80–99% intraday drop — have resulted in significant investor losses. One investor publicly reported losing a six-figure investment made in January 2025. No documented evidence of deliberate pump-and-dump manipulation by the Seedify team was found in available public sources; however, the 16% team/founder token allocation with a four-year vesting schedule represents a structural concentration risk that observers have noted.","heading":"SFUND Token Price Collapse and Investor Losses","sources":[{"url":"https://www.coinlore.com/coin/seedify-fund/historical-data","name":"coinlore.com","type":"other","credibility":3},{"url":"https://finance.yahoo.com/news/seedify-token-dropped-nearly-60-161434570.html","name":"finance.yahoo.com","type":"other","credibility":3},{"url":"https://bravenewcoin.com/insights/sfund-token-crashes-99-as-north-korean-hackers-drain-1-2m-from-seedify-bridge","name":"bravenewcoin.com","type":"other","credibility":3},{"url":"https://cryptorank.io/news/feed/4bc08-sfund-token-crashes-99-as-north-korean-hackers-drain-1-2m-from-seedify-bridge","name":"cryptorank.io","type":"other","credibility":3}],"severity":"medium"},{"content":"Following the September 2025 exploit, Seedify launched the 'Phoenix Raise' on approximately October 10, 2025 — a 24-hour bonding-curve token sale designed to reboot the SFUND ecosystem and introduce a permissionless launchpad architecture. Legacy SFUND holders were offered a 1:1 token migration to a new contract. The migration window was set to close on October 8, 2026.\n\nFunds raised in the Phoenix Raise were stated to be earmarked for: compensating community members who lost funds in the liquidity pool breach; funding a full security stack overhaul; conducting SFUND buybacks; and supporting platform growth. Participants in the bonding-curve sale also received 'Operator Keys' — NFTs granting access to utilities in Seedify's planned 'Clockwork' framework. The bonding-curve pricing started at approximately $0.26, scaling to approximately $0.40 at full demand.\n\nCritics and community members raised concerns that a token migration following a catastrophic security breach — combined with a new fundraising round targeting the same retail base — could represent a mechanism to shift losses onto community members while recapitalizing the platform. These concerns are classified as low-confidence allegations given they originate primarily from social media and have not been substantiated by formal investigations.","heading":"Phoenix Raise Token Migration and Post-Hack Recovery","sources":[{"url":"https://ourcryptotalk.com/news/seedify-launches-phoenix-raise","name":"ourcryptotalk.com","type":"other","credibility":3},{"url":"https://blog.seedify.fund/everything-you-need-to-know-about-the-sfund-migration-e7e09c702199","name":"blog.seedify.fund","type":"other","credibility":3},{"url":"https://x.com/SeedifyFund/status/1970922016313139300","name":"x.com","type":"other","credibility":3},{"url":"https://gam3s.gg/news/seedify-suffers-breach/","name":"gam3s.gg","type":"other","credibility":3}],"severity":"medium"},{"content":"Seedify states that all projects undergo a five-stage due diligence process before being listed on its launchpad, including KYC/AML checks performed by third-party providers on project teams. The platform claims to have launched over 72 IDO/IGO projects with an average all-time-high ROI of 46.2x according to CoinCarp data. However, industry observers note that ATH ROI metrics for launchpad platforms are inherently optimistic and do not account for the majority of projects that never reached their ATH or which investors held through to losses.\n\nNo specific Seedify-incubated project has been confirmed as a deliberate rug pull or exit scam in available Tier 1 or Tier 2 sources at the time of this investigation. Seedify itself acknowledged the prevalence of rug pulls in the broader IDO space and in November 2025 introduced a 'Futarchy Milestones' launch model claiming to provide community-controlled fund escrow to protect against project abandonment. This initiative was framed as a direct response to the industry-wide problem of launchpad-facilitated rug pulls, which implicitly acknowledges that prior launches did not carry such protections.\n\nFounder Levent Cem Aydan also leads Seedworld, a separate metaverse project that has launched IGOs on the Seedify platform. Community observers have noted the potential conflict of interest inherent in a launchpad founder also operating a featured incubated project, though no formal investigation or ruling on this matter has been published.","heading":"Launchpad Due Diligence and Project Quality Concerns","sources":[{"url":"https://www.coincarp.com/launchpad-platform/seedify/","name":"coincarp.com","type":"other","credibility":3},{"url":"https://docs.seedify.fund/whitepaper/seedify.fund-incubator-basics","name":"docs.seedify.fund","type":"other","credibility":3},{"url":"https://blog.seedify.fund/a-launch-model-for-real-icm-builders-futarchy-milestones-775bb4b5105b","name":"blog.seedify.fund","type":"other","credibility":3},{"url":"https://cointelegraph.com/press-releases/seedify-premier-launchpad-and-incubator-presents-the-mounts-of-seedworld-nft-collection","name":"cointelegraph.com","type":"other","credibility":3},{"url":"https://theorg.com/org/seedify/org-chart/levent-aydan","name":"theorg.com","type":"other","credibility":3}],"severity":"medium"},{"content":"Multiple security researchers and website analyzers have documented the existence of fraudulent websites and social media accounts impersonating Seedify. PCRisk documented at least two distinct Seedify impersonation scams: a fake 'Seedify $SFUND' airdrop scam and a 'Seedify Registration Scam,' both designed to steal cryptocurrency from victims who believe they are interacting with the official platform. These fake sites are described as near-perfect visual copies of the legitimate Seedify website.\n\nSeedify itself has publicly warned users that no individuals claiming to represent the company through unsolicited outreach are legitimate affiliates. Scam Detector's automated validator assigned seedify.fund a trust score of 3.4 out of 100, one of the lowest on the platform, based on 53 aggregated algorithmic factors — though this score methodology is not fully transparent and may reflect the existence of lookalike scam sites rather than conduct by the legitimate Seedify entity. The launchpad-seedify.fund subdomain received similarly low automated trust ratings.","heading":"Impersonation Scams and Phishing Activity","sources":[{"url":"https://www.pcrisk.com/removal-guides/29668-seedify-sfund-scam","name":"pcrisk.com","type":"other","credibility":3},{"url":"https://www.pcrisk.com/removal-guides/31484-seedify-regstration-scam","name":"pcrisk.com","type":"other","credibility":3},{"url":"https://www.scam-detector.com/validator/seedify-fund-review/","name":"scam-detector.com","type":"other","credibility":3},{"url":"https://www.scamadviser.com/check-website/launchpad-seedify.fund","name":"scamadviser.com","type":"other","credibility":3}],"severity":"medium"},{"content":"The September 2025 exploit exposed significant infrastructure security deficiencies at Seedify. The attack vector — a compromised developer private key granting unauthorized minting access to a bridge contract — indicated inadequate operational security practices, including the likely absence of hardware security modules (HSMs) or multi-signature controls for privileged contract operations. Web3 Is Going Great noted that Seedify had been relying on 'vibe coding' (AI-generated code) for development, which security researchers have flagged as a practice that introduces systematic vulnerability patterns including missing authorization checks and insecure input handling.\n\nThe bridge contract implicated in the hack had passed prior security audits, underscoring that audit certification does not guarantee operational security. The Seedify team acknowledged the breach originated from a private key compromise rather than a contract code flaw, and committed to a full security stack overhaul as part of the Phoenix Raise recovery plan. No independent third-party security review of the post-migration infrastructure had been publicly published at the time of this investigation.","heading":"Security Practices and Infrastructure Risk","sources":[{"url":"https://www.web3isgoinggreat.com/single/seedify-bridge-exploit","name":"web3isgoinggreat.com","type":"other","credibility":3},{"url":"https://decrypt.co/341076/north-korean-hackers-drain-1-2m-from-seedify-bridge","name":"decrypt.co","type":"other","credibility":3},{"url":"https://www.okx.com/en-us/learn/seedify-hack-crypto-exploit","name":"okx.com","type":"other","credibility":3},{"url":"https://bravenewcoin.com/insights/sfund-token-crashes-99-as-north-korean-hackers-drain-1-2m-from-seedify-bridge","name":"bravenewcoin.com","type":"other","credibility":3}],"severity":"medium"}],"timeline":[{"date":"2021-02","event":"Seedify.fund founded by Levent Cem Aydan as a blockchain gaming incubator and IDO launchpad; SFUND token launches at approximately $0.40.","source":"","date_original":"2021-02-01"},{"date":"2021-11-29","event":"SFUND reaches all-time high of approximately $17.67, representing a roughly 4,300% gain from launch price.","source":""},{"date":"2022","event":"SFUND begins sustained decline throughout 2022, losing approximately 90% of value by year-end, falling from $8.40 to approximately $0.81.","source":"","date_original":"2022-01-01"},{"date":"2022-04","event":"Seedify claims to introduce refund system for launchpad participants, described as a first in the IDO launchpad industry.","source":"","date_original":"2022-04-01"},{"date":"2025-09-23","event":"North Korean DPRK-affiliated hackers ('Contagious Interview' campaign) exploit Seedify's SFUND cross-chain bridge on Avalanche via stolen developer private key, draining approximately $1.2–1.7 million. SFUND token collapses approximately 80–99% intraday. An estimated 64,000 token holders affected.","source":""},{"date":"2025-09-23","event":"ZachXBT links theft wallets to DPRK 'Contagious Interview' on-chain forensics. Binance CZ confirms approximately $200,000 frozen at HTX exchange.","source":""},{"date":"2025-10-10","event":"Seedify launches 'Phoenix Raise' — a 24-hour bonding-curve token sale — to recapitalize the platform and relaunch SFUND under a new contract with a 1:1 migration for legacy holders.","source":""},{"date":"2025-11","event":"Seedify introduces 'Futarchy Milestones' launch model designed to prevent rug pulls by placing project funds in community-controlled escrow.","source":"","date_original":"2025-11-01"},{"date":"2026-01-13","event":"SFUND reaches all-time low of approximately $0.089, down approximately 99.9% from November 2021 peak.","source":""}],"sources_used":[{"url":"https://decrypt.co/341076/north-korean-hackers-drain-1-2m-from-seedify-bridge","name":"decrypt.co","type":"other","archive_url":"http://web.archive.org/web/20260420025447/https://decrypt.co/341076/north-korean-hackers-drain-1-2m-from-seedify-bridge","credibility":3,"archive_timestamp":"2026-04-20T02:54:47+00:00"},{"url":"https://www.web3isgoinggreat.com/single/seedify-bridge-exploit","name":"web3isgoinggreat.com","type":"other","archive_url":"http://web.archive.org/web/20251110110942/https://www.web3isgoinggreat.com/single/seedify-bridge-exploit","credibility":3,"archive_timestamp":"2025-11-10T11:09:42+00:00"},{"url":"https://coinfomania.com/cz-confirms-1-2m-sfund-hack-says-dprk-hackers-likely-involved/","name":"coinfomania.com","type":"other","archive_url":"http://web.archive.org/web/20250926111945/https://coinfomania.com/cz-confirms-1-2m-sfund-hack-says-dprk-hackers-likely-involved/","credibility":3,"archive_timestamp":"2025-09-26T11:19:45+00:00"},{"url":"https://cryptorank.io/news/feed/4bc08-sfund-token-crashes-99-as-north-korean-hackers-drain-1-2m-from-seedify-bridge","name":"cryptorank.io","type":"other","archive_url":"http://web.archive.org/web/20250928133020/https://cryptorank.io/news/feed/4bc08-sfund-token-crashes-99-as-north-korean-hackers-drain-1-2m-from-seedify-bridge","credibility":3,"archive_timestamp":"2025-09-28T13:30:20+00:00"},{"url":"https://bravenewcoin.com/insights/sfund-token-crashes-99-as-north-korean-hackers-drain-1-2m-from-seedify-bridge","name":"bravenewcoin.com","type":"other","archive_url":"http://web.archive.org/web/20260217000937/https://bravenewcoin.com/insights/sfund-token-crashes-99-as-north-korean-hackers-drain-1-2m-from-seedify-bridge","credibility":3,"archive_timestamp":"2026-02-17T00:09:37+00:00"},{"url":"https://playtoearn.com/news/seedify-hit-by-major-security-breach-12m-drained-from-sfund-bridge","name":"playtoearn.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://gam3s.gg/news/seedify-suffers-breach/","name":"gam3s.gg","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.trmlabs.com/resources/blog/zachxbt-uncovers-crypto-theft-network-linked-to-us-government-seizure-funds","name":"trmlabs.com","type":"other","archive_url":"http://web.archive.org/web/20260526201333/https://www.trmlabs.com/resources/blog/zachxbt-uncovers-crypto-theft-network-linked-to-us-government-seizure-funds","credibility":3,"archive_timestamp":"2026-05-26T20:13:33+00:00"},{"url":"https://cryptorank.io/news/feed/a0f18-cz-confirms-200k-frozen-at-htx-after-sfund","name":"cryptorank.io","type":"other","archive_url":"https://web.archive.org/web/20260829114207/https://cryptorank.io/news/feed/a0f18-cz-confirms-200k-frozen-at-htx-after-sfund","credibility":3,"archive_timestamp":"2026-08-29T11:42:07+00:00"},{"url":"https://www.coinlore.com/coin/seedify-fund/historical-data","name":"coinlore.com","type":"other","archive_url":"http://web.archive.org/web/20260421111427/https://www.coinlore.com/coin/seedify-fund/historical-data","credibility":3,"archive_timestamp":"2026-04-21T11:14:27+00:00"},{"url":"https://finance.yahoo.com/news/seedify-token-dropped-nearly-60-161434570.html","name":"finance.yahoo.com","type":"other","archive_url":"http://web.archive.org/web/20250924181614/https://finance.yahoo.com/news/seedify-token-dropped-nearly-60-161434570.html","credibility":3,"archive_timestamp":"2025-09-24T18:16:14+00:00"},{"url":"https://ourcryptotalk.com/news/seedify-launches-phoenix-raise","name":"ourcryptotalk.com","type":"other","archive_url":"https://web.archive.org/web/20260829035852/https://ourcryptotalk.com/news/seedify-launches-phoenix-raise","credibility":3,"archive_timestamp":"2026-08-29T03:58:52+00:00"},{"url":"https://blog.seedify.fund/everything-you-need-to-know-about-the-sfund-migration-e7e09c702199","name":"blog.seedify.fund","type":"other","archive_url":null,"credibility":3,"archive_timestamp":null},{"url":"https://x.com/SeedifyFund/status/1970922016313139300","name":"x.com","type":"other","archive_url":null,"credibility":3,"archive_timestamp":null},{"url":"https://www.coincarp.com/launchpad-platform/seedify/","name":"coincarp.com","type":"other","archive_url":null,"credibility":3,"archive_timestamp":null},{"url":"https://docs.seedify.fund/whitepaper/seedify.fund-incubator-basics","name":"docs.seedify.fund","type":"other","archive_url":"http://web.archive.org/web/20260518092622/https://docs.seedify.fund/whitepaper/seedify.fund-incubator-basics","credibility":3,"archive_timestamp":"2026-05-18T09:26:22+00:00"},{"url":"https://blog.seedify.fund/a-launch-model-for-real-icm-builders-futarchy-milestones-775bb4b5105b","name":"blog.seedify.fund","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-job","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://cointelegraph.com/press-releases/seedify-premier-launchpad-and-incubator-presents-the-mounts-of-seedworld-nft-collection","name":"cointelegraph.com","type":"other","archive_url":"http://web.archive.org/web/20251211193417/https://cointelegraph.com/press-releases/seedify-premier-launchpad-and-incubator-presents-the-mounts-of-seedworld-nft-collection","credibility":3,"archive_timestamp":"2025-12-11T19:34:17+00:00"},{"url":"https://theorg.com/org/seedify/org-chart/levent-aydan","name":"theorg.com","type":"other","archive_url":"https://web.archive.org/web/20260829041922/https://theorg.com/org/seedify?p=levent-aydan","credibility":3,"archive_timestamp":"2026-08-29T04:19:22+00:00"},{"url":"https://www.pcrisk.com/removal-guides/29668-seedify-sfund-scam","name":"pcrisk.com","type":"other","archive_url":"http://web.archive.org/web/20260414054505/https://www.pcrisk.com/removal-guides/29668-seedify-sfund-scam","credibility":3,"archive_timestamp":"2026-04-14T05:45:05+00:00"},{"url":"https://www.pcrisk.com/removal-guides/31484-seedify-regstration-scam","name":"pcrisk.com","type":"other","archive_url":"http://web.archive.org/web/20260414235705/https://www.pcrisk.com/removal-guides/31484-seedify-regstration-scam","credibility":3,"archive_timestamp":"2026-04-14T23:57:05+00:00"},{"url":"https://www.scam-detector.com/validator/seedify-fund-review/","name":"scam-detector.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.scamadviser.com/check-website/launchpad-seedify.fund","name":"scamadviser.com","type":"other","archive_url":"https://web.archive.org/web/20260830035334/https://www.scamadviser.com/check-website/launchpad-seedify.fund","credibility":3,"archive_timestamp":"2026-08-30T03:53:34+00:00"},{"url":"https://www.okx.com/en-us/learn/seedify-hack-crypto-exploit","name":"okx.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:not-found","archive_status":"unarchivable","archive_timestamp":null}],"source_tags":["defillama"],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-sonnet-4-6","created_at":"2026-05-04T02:54:15.746647+00:00","updated_at":"2026-08-30T03:54:57.887102+00:00"}}