{"investigation":{"slug":"snowdog","entity_name":"Snowdog","trust_score":5,"severity_base":null,"score_modifier":0,"confidence":0.82,"status":"published","content_type":"investigation","summary":"Snowdog (SDOG) was an Avalanche-based OlympusDAO fork launched in November 2021 as a self-described '8-day decentralized reserve meme coin experiment' by the anonymous team behind Snowbank DAO. The project accumulated a $44 million MIM treasury before a planned token buyback on November 25, 2021, collapsed the token price by over 90% within seconds, with alleged insiders exploiting a hidden 'challengeKey' mechanism to extract approximately $20 million in profits while ordinary holders were locked out. The team declined to acknowledge deliberate wrongdoing, characterizing the event as a 'game-theory experiment gone wrong,' and subsequently renounced ownership, leaving investors with near-total losses.","sections":[{"content":"Snowdog (ticker: SDOG) launched on the Avalanche C-Chain on approximately November 14, 2021, created by the same anonymous development team responsible for Snowbank DAO, an Avalanche-based fork of OlympusDAO. Unlike standard OlympusDAO forks which aimed for long-term protocol growth, Snowdog was explicitly designed with an 8-day lifespan. During that window, users could accumulate SDOG by minting (depositing collateral), staking, or buying from market. The team advertised extraordinarily high staking APYs and promised that at the end of Day 8, all treasury assets would be used to execute a 'massive buyback' of SDOG tokens. The protocol would then transition into a meme coin by fractionalizing each SDOG token by a factor of one billion. The token contract address on Avalanche is 0xdE9E52F1838951e4d2bb6C59723B003c353979b6. The project attracted significant attention and capital during the November 2021 OHM-fork mania on Avalanche.","heading":"Project Overview","sources":[{"url":"https://cryptobriefing.com/olympus-dao-fork-snowdog-hit-by-90-crash/","name":"cryptobriefing.com","type":"other","credibility":3},{"url":"https://wiki.defillama.com/wiki/Snowdog_DAO","name":"wiki.defillama.com","type":"other","credibility":3},{"url":"https://snowtrace.io/token/0xdE9E52F1838951e4d2bb6C59723B003c353979b6","name":"snowtrace.io","type":"other","credibility":3}],"severity":"medium"},{"content":"By the end of the 8-day accumulation period on November 22, 2021, the Snowdog treasury had grown to approximately $44.36 million in MIM (Magic Internet Money). The planned buyback event was executed on November 25, 2021 — USA Thanksgiving — at approximately 9:00 PM UTC. Rather than supporting the token price, the buyback caused a catastrophic collapse of over 90% within approximately 30 seconds.\n\nThe mechanism behind the collapse was Snowbank's custom automated market maker, Snowswap. Prior to the buyback, the team migrated all liquidity from Trader Joe (the main Avalanche DEX) into this private Snowswap pool. Critically, Snowswap required a 'challengeKey' — a password derived from a mathematical challenge — to execute trades. The team described this as a front-running prevention mechanism. However, the vast majority of ordinary users had no access to the key at the time of the buyback.\n\nThree wallet addresses, all created within roughly one day of the buyback event and funded hours apart, allegedly exploited advance knowledge of the challengeKey. These addresses purchased approximately $180,000 worth of SDOG in $10,000 batches using MIM, staked the tokens, and then executed buyback swaps on Snowswap at advantageous prices before other participants could act. The three wallets extracted approximately $10.4 million, $7.7 million, and $3.3 million in MIM respectively — a combined total of approximately $20 million. In a representative transaction, one address swapped 187.8 SDOG for approximately $10.4 million MIM.\n\nThe team and various on-chain analysts noted that the buyback pool was mathematically structured so that only the first 7% of SDOG supply sold could receive a price above the pre-buyback market price of approximately $1,200 per SDOG. The remaining 93% of holders were guaranteed to sell at a loss if they participated. The Snowdog team acknowledged they failed to communicate this fundamental constraint to investors.","heading":"The Buyback Collapse and Alleged Insider Exploit","sources":[{"url":"https://cryptoslate.com/avalanches-first-memecoin-sdog-ends-in-a-30m-rugpull/","name":"cryptoslate.com","type":"other","credibility":3},{"url":"https://losslessdefi.medium.com/the-snowdogdao-case-report-how-to-avoid-future-scenarios-604446f41fbf","name":"losslessdefi.medium.com","type":"other","credibility":3},{"url":"https://www.quadrigainitiative.com/casestudy/snowdogdaoliquidityblocked.php","name":"quadrigainitiative.com","type":"other","credibility":3},{"url":"https://insuredfinance.medium.com/snowdogdao-users-allege-rugpull-4fbfaabcca91","name":"insuredfinance.medium.com","type":"other","credibility":3}],"severity":"medium"},{"content":"Estimates of total investor losses vary by methodology. CryptoSlate and multiple crypto news outlets reported approximately $30 million in possible losses to the broader investor community. The Quadriga Initiative's structured case study placed the figure at $18.1 million in blocked or effectively lost liquidity. The three identified exploit wallets extracted a combined approximately $20 million in MIM. The treasury, which held approximately $44 million at peak, was drained to a fraction of that value. Token holders who did not participate in the buyback or were unable to access Snowswap were left holding SDOG tokens that had lost over 90% of their value, with limited to no liquidity on secondary markets following the event. The SDOG token contract on Snowtrace shows approximately 8,729 holders as of data available post-collapse.","heading":"Financial Losses","sources":[{"url":"https://cryptoslate.com/avalanches-first-memecoin-sdog-ends-in-a-30m-rugpull/","name":"cryptoslate.com","type":"other","credibility":3},{"url":"https://www.quadrigainitiative.com/casestudy/snowdogdaoliquidityblocked.php","name":"quadrigainitiative.com","type":"other","credibility":3},{"url":"https://www.benzinga.com/markets/cryptocurrency/21/11/24323511/avalanche-based-dogecoin-knockoff-coin-ends-in-a-massive-rug-pull","name":"benzinga.com","type":"other","credibility":3},{"url":"https://snowtrace.io/token/0xdE9E52F1838951e4d2bb6C59723B003c353979b6","name":"snowtrace.io","type":"other","credibility":3}],"severity":"medium"},{"content":"Following the collapse, the Snowbank/SnowdogDAO development team issued a post-mortem characterizing the entire protocol as an '8-day Game Theory Experiment.' The team stated: 'We deeply regret not having communicated more on this. We should have warned the community about the risks.' They acknowledged that only 7% of SDOG supply holders could have profited from the buyback but did not acknowledge deliberate insider trading or fraud.\n\nThe team denied that the event constituted a rug pull, attributing it instead to poor communication and inherent mathematical properties of the buyback pool. The development team's identity remained anonymous throughout. Critically, Snowbank subsequently renounced ownership of the Snowdog protocol and transferred social media accounts, Discord server, SDOG tokens, and SDOG-MIM LP tokens to the community — an action many observers interpreted as abandonment rather than resolution.\n\nThe community-run Snowdog DAO published a recovery proposal on December 3, 2021 via Snapshot governance, proposing a 1:1 issuance of new governance tokens to existing SDOG holders. The community recovery effort faced significant challenges given the absence of meaningful assets remaining in the protocol.","heading":"Team Response and Disputed Characterization","sources":[{"url":"https://cryptobriefing.com/olympus-dao-fork-snowdog-hit-by-90-crash/","name":"cryptobriefing.com","type":"other","credibility":3},{"url":"https://snowdogdao.medium.com/on-the-path-to-recovery-snowdog-daos-first-proposal-8c8e70d34fc1","name":"snowdogdao.medium.com","type":"other","credibility":3},{"url":"https://u.today/shib-competitor-snowdogdao-allegedly-falls-victim-to-largest-rug-pull-in-avalanche-history","name":"u.today","type":"other","credibility":3},{"url":"https://coincodecap.com/snowdogdao-is-supposedly-the-victim-of-a-rug-pull","name":"coincodecap.com","type":"other","credibility":3}],"severity":"medium"},{"content":"Multiple structural red flags were present in the Snowdog design and execution. First, the project was run by a fully anonymous team with no verifiable identities or prior track records. Second, the custom Snowswap AMM was not publicly documented or audited prior to use; its challengeKey requirement was not disclosed to ordinary users. Third, the three wallets identified as primary beneficiaries of the buyback exploit were created approximately one day before the buyback event and funded within hours of each other — a pattern consistent with insider preparation. Fourth, migrating all liquidity away from Trader Joe immediately before the buyback into a proprietary AMM effectively eliminated the ability of ordinary holders to execute emergency exits via normal market channels. Fifth, the 7% constraint — meaning only the first 7% of supply sold could be profitable — was never communicated in advance to investors who deposited capital based on the promise of a 'massive buyback.' Sixth, the extremely high staking APY advertising (described as 'the largest number you have ever seen in your life') is a classic high-yield lure associated with Ponzi-adjacent tokenomics. ZachXBT, the pseudonymous blockchain investigator, flagged Snowdog in connection with the broader OHM-fork rug pull pattern prevalent in late 2021.","heading":"Red Flags and Risk Indicators","sources":[{"url":"https://losslessdefi.medium.com/the-snowdogdao-case-report-how-to-avoid-future-scenarios-604446f41fbf","name":"losslessdefi.medium.com","type":"other","credibility":3},{"url":"https://cryptoslate.com/avalanches-first-memecoin-sdog-ends-in-a-30m-rugpull/","name":"cryptoslate.com","type":"other","credibility":3},{"url":"https://www.quadrigainitiative.com/casestudy/snowdogdaoliquidityblocked.php","name":"quadrigainitiative.com","type":"other","credibility":3},{"url":"https://cryptonews.net/news/security/2803019/","name":"cryptonews.net","type":"other","credibility":3}],"severity":"medium"},{"content":"On-chain data from Snowtrace (Avalanche's block explorer) confirmed the suspicious wallet activity. The three exploit addresses were newly created approximately one day before the buyback, received funding within hours of each other — a coordination pattern not consistent with independent retail investors. All three used the custom Snowswap AMM rather than Trader Joe, which was accessible only with prior knowledge of the challengeKey. The Lossless DeFi post-mortem noted that the accounts' sole activity was the buyback exploit: they bought SDOG in uniform $10,000 batches, staked, and then executed the buyback swap at the peak advantageous price. One address converted 187.8 SDOG into approximately $10.4 million MIM; another converted approximately 139 SDOG into over $10 million MIM. The SDOG/MIM liquidity pool on Trader Joe was subsequently abandoned. The Snowdog DAO multi-signature recovery wallet address 0xcFa8196852Cc36A8f46B7DDe957a11aD5149542f was established by the community following Snowbank's renunciation of the project. No formal law enforcement action or regulatory filing has been identified as of the time of this investigation.","heading":"On-Chain Evidence and Forensics","sources":[{"url":"https://www.quadrigainitiative.com/casestudy/snowdogdaoliquidityblocked.php","name":"quadrigainitiative.com","type":"other","credibility":3},{"url":"https://losslessdefi.medium.com/the-snowdogdao-case-report-how-to-avoid-future-scenarios-604446f41fbf","name":"losslessdefi.medium.com","type":"other","credibility":3},{"url":"https://snowtrace.io/token/0xdE9E52F1838951e4d2bb6C59723B003c353979b6","name":"snowtrace.io","type":"other","credibility":3},{"url":"https://www.geckoterminal.com/avax/pools/0xa3f1f5076499ec37d5bb095551f85ab5a344bb58","name":"geckoterminal.com","type":"other","credibility":3}],"severity":"medium"},{"content":"The SDOG token continues to trade at negligible prices on Avalanche, with CoinGecko tracking the token under the 'Snowdog' listing. As of available data, the token has approximately 8,729 holders and a total supply of 75,111.43 SDOG. No active development or meaningful recovery activity has been identified since the December 2021 community governance period. The original Snowbank DAO team has not been publicly identified and has made no further public communications about the Snowdog incident. No civil or criminal legal proceedings have been publicly identified in connection with the alleged insider exploit. The Snowdog incident is frequently cited in DeFi security literature as a case study in the risks of custom AMMs, undisclosed buyback mechanics, and anonymous team structures in OHM-fork projects.","heading":"Current Status","sources":[{"url":"https://www.coingecko.com/en/coins/snowdog","name":"coingecko.com","type":"other","credibility":3},{"url":"https://wiki.defillama.com/wiki/Snowdog_DAO","name":"wiki.defillama.com","type":"other","credibility":3},{"url":"https://snowtrace.io/token/0xdE9E52F1838951e4d2bb6C59723B003c353979b6","name":"snowtrace.io","type":"other","credibility":3},{"url":"https://losslessdefi.medium.com/the-snowdogdao-case-report-how-to-avoid-future-scenarios-604446f41fbf","name":"losslessdefi.medium.com","type":"other","credibility":3}],"severity":"medium"}],"timeline":[{"date":"2021-11-14","event":"SnowdogDAO announced on Twitter by the anonymous Snowbank DAO team; 8-day protocol lifespan and buyback plan disclosed.","source":""},{"date":"2021-11-17","event":"Minting window opens; users begin depositing collateral to accumulate SDOG tokens.","source":""},{"date":"2021-11-22","event":"Minting window closes. Treasury at this point held approximately $44.36 million in MIM.","source":""},{"date":"2021-11-24","event":"Three exploit wallet addresses created approximately one day before the buyback event; wallets funded within hours of each other.","source":""},{"date":"2021-11-25","event":"Day 8 buyback event executed at approximately 9:00 PM UTC. All liquidity migrated from Trader Joe to the proprietary Snowswap AMM. SDOG price spikes briefly then collapses over 90% within approximately 30 seconds. Three alleged insider wallets collectively extract approximately $20 million in MIM using the undisclosed challengeKey mechanism.","source":""},{"date":"2021-11-26","event":"CryptoSlate, Benzinga, U.Today, CryptoBriefing, and multiple other outlets report on the collapse. Community begins alleging rug pull. Snowbank team releases initial statement characterizing the event as a 'game-theory experiment gone wrong.'","source":""},{"date":"2021-11-27","event":"Snowbank DAO renounces ownership of Snowdog and promises to transfer all assets including social media accounts, Discord, and LP tokens to the community.","source":""},{"date":"2021-12-03","event":"Community-formed Snowdog DAO publishes its first governance proposal via Snapshot, seeking community vote on asset recovery path.","source":""},{"date":"2021-12-03","event":"Lossless DeFi publishes detailed technical case report on the SnowdogDAO exploit as a cautionary study.","source":""},{"date":"2022","event":"No substantive recovery or restitution materializes. Token remains active on Avalanche at sharply diminished value with no active development.","source":"","date_original":"2022-01-01"}],"sources_used":[{"url":"https://cryptobriefing.com/olympus-dao-fork-snowdog-hit-by-90-crash/","name":"cryptobriefing.com","type":"other","archive_url":"http://web.archive.org/web/20260819195550/https://cryptobriefing.com/olympus-dao-fork-snowdog-hit-by-90-crash/","credibility":3,"archive_timestamp":"2026-08-19T19:55:50+00:00"},{"url":"https://wiki.defillama.com/wiki/Snowdog_DAO","name":"wiki.defillama.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://snowtrace.io/token/0xdE9E52F1838951e4d2bb6C59723B003c353979b6","name":"snowtrace.io","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://cryptoslate.com/avalanches-first-memecoin-sdog-ends-in-a-30m-rugpull/","name":"cryptoslate.com","type":"other","archive_url":"http://web.archive.org/web/20260120130840/https://cryptoslate.com/avalanches-first-memecoin-sdog-ends-in-a-30m-rugpull/","credibility":3,"archive_timestamp":"2026-01-20T13:08:40+00:00"},{"url":"https://losslessdefi.medium.com/the-snowdogdao-case-report-how-to-avoid-future-scenarios-604446f41fbf","name":"losslessdefi.medium.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.quadrigainitiative.com/casestudy/snowdogdaoliquidityblocked.php","name":"quadrigainitiative.com","type":"other","archive_url":"http://web.archive.org/web/20260208165012/https://quadrigainitiative.com/casestudy/snowdogdaoliquidityblocked.php","credibility":3,"archive_timestamp":"2026-02-08T16:50:12+00:00"},{"url":"https://insuredfinance.medium.com/snowdogdao-users-allege-rugpull-4fbfaabcca91","name":"insuredfinance.medium.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.benzinga.com/markets/cryptocurrency/21/11/24323511/avalanche-based-dogecoin-knockoff-coin-ends-in-a-massive-rug-pull","name":"benzinga.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://snowdogdao.medium.com/on-the-path-to-recovery-snowdog-daos-first-proposal-8c8e70d34fc1","name":"snowdogdao.medium.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://u.today/shib-competitor-snowdogdao-allegedly-falls-victim-to-largest-rug-pull-in-avalanche-history","name":"u.today","type":"other","archive_url":"https://web.archive.org/web/20260829195623/https://u.today/price-analysis/xrp-shiba-inu-shib-stellar-xlm-and-bitcoin-btc-price-analysis-for-august-28-moment-where-bulls","credibility":3,"archive_timestamp":"2026-08-29T19:56:23+00:00"},{"url":"https://coincodecap.com/snowdogdao-is-supposedly-the-victim-of-a-rug-pull","name":"coincodecap.com","type":"other","archive_url":"http://web.archive.org/web/20260213192254/https://coincodecap.com/snowdogdao-is-supposedly-the-victim-of-a-rug-pull","credibility":3,"archive_timestamp":"2026-02-13T19:22:54+00:00"},{"url":"https://cryptonews.net/news/security/2803019/","name":"cryptonews.net","type":"other","archive_url":"https://web.archive.org/web/20260830125423/https://cryptonews.net/news/security/2803019/","credibility":3,"archive_timestamp":"2026-08-30T12:54:23+00:00"},{"url":"https://www.geckoterminal.com/avax/pools/0xa3f1f5076499ec37d5bb095551f85ab5a344bb58","name":"geckoterminal.com","type":"other","archive_url":"https://web.archive.org/web/20260901151505/https://www.geckoterminal.com/avax/pools/0xa3f1f5076499ec37d5bb095551f85ab5a344bb58","credibility":3,"archive_timestamp":"2026-09-01T15:15:05+00:00"},{"url":"https://www.coingecko.com/en/coins/snowdog","name":"coingecko.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null}],"source_tags":["defillama"],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-sonnet-4-6","created_at":"2026-05-04T02:54:53.159933+00:00","updated_at":"2026-09-01T15:17:58.588297+00:00"}}