{"investigation":{"slug":"solvbtc","entity_name":"SolvBTC","trust_score":38,"severity_base":null,"score_modifier":0,"confidence":0.78,"status":"published","content_type":"investigation","summary":"SolvBTC is the flagship wrapped Bitcoin product of Solv Protocol, designed to represent Bitcoin in DeFi systems across multiple chains. In March 2026, the BRO vault component of the protocol suffered a $2.7 million exploit due to a double-mint logic flaw in the BitcoinReserveOffering smart contract. Separately, in January 2025, the protocol faced credible public allegations of TVL manipulation prior to its SOLV token launch.","sections":[{"content":"SolvBTC is a wrapped Bitcoin reserve token issued by Solv Protocol, a DeFi platform founded in December 2020 by Ryan Chow and Will Wang. Each SolvBTC unit is intended to represent one Bitcoin held in on-chain or institutional custody, enabling holders to deploy Bitcoin into yield-generating DeFi strategies while maintaining price exposure. The token operates across more than ten blockchain networks including Ethereum, BNB Chain, Arbitrum, Avalanche, Base, Mantle, and Merlin. As of early 2026, Solv Protocol reported over $1.7 billion in total value locked (TVL). The protocol is backed by Binance Labs, Blockchain Capital, and Nomura. Reserve custody partners include Ceffu, Cobo, and Copper. Solv integrated Chainlink Proof of Reserves in September 2025 to provide real-time on-chain verification of reserve backing.","heading":"Overview","sources":[{"url":"https://docs.solv.finance/key-products/solvbtc","name":"docs.solv.finance","type":"other","credibility":3},{"url":"https://solv.finance/","name":"solv.finance","type":"other","credibility":3},{"url":"https://www.gate.com/learn/articles/what-is-solv-protocol-all-you-need-to-know-about-solv-btc/4422","name":"gate.com","type":"other","credibility":3},{"url":"https://en.cryptonomist.ch/2025/09/01/solv-and-chainlink-integrate-proof-of-reserve-into-solvbtc-live-on-chain-anti-manipulation-feed-on-ethereum/","name":"en.cryptonomist.ch","type":"other","credibility":3}],"severity":"medium"},{"content":"On March 3, 2026, the Solv Protocol BitcoinReserveOffering (BRO) vault contract suffered an exploit resulting in the theft of approximately 38.0474 SolvBTC, valued at roughly $2.7 million USD at the time. The affected contract address is 0x15f7c1ac69f0c102e4f390e45306bd917f21cfcf. The vulnerability was a double-mint logic flaw: the contract's mint() function minted BRO tokens twice for a single NFT redemption rather than once. The attacker executed this flaw 22 times, compounding gains each iteration. Starting with 135 BRO tokens, the attacker accumulated approximately 567 million BRO tokens, which were then swapped for 38 SolvBTC and subsequently converted to approximately 1,211 WETH. The exploit was isolated to a single BRO vault and affected fewer than ten users. All other vaults and user assets were confirmed unaffected. Security researchers at Verichains and Halborn noted that while the vulnerability involved callback execution via the ERC-3525/ERC-721 token standard, it was more precisely a flawed internal accounting logic rather than a canonical reentrancy attack. Solv Protocol publicly confirmed the exploit, pledged to reimburse all affected users in full, and offered the attacker a 10% white-hat bounty ($270,000) to return the remaining funds. Security firms Hypernative Labs, SlowMist, and CertiK were engaged for post-incident investigation. Prior to this incident, Solv Protocol had obtained security audits from Quantstamp and OpenZeppelin. The exploit nonetheless occurred in a component that was part of the live production system.","heading":"Security Incident: March 2026 BRO Vault Exploit ($2.7M)","sources":[{"url":"https://beincrypto.com/solv-protocol-hack-bro-vault-exploit/","name":"beincrypto.com","type":"other","credibility":3},{"url":"https://www.theblock.co/post/392492/solv-protocol-says-exploit-drained-2-7-million-from-bitcoin-yield-vault","name":"theblock.co","type":"other","credibility":3},{"url":"https://cointelegraph.com/news/hacker-steals-nearly-3-million-from-solv-protocol","name":"cointelegraph.com","type":"other","credibility":3},{"url":"https://blog.verichains.io/p/solv-protocol-hack-analysis","name":"blog.verichains.io","type":"other","credibility":3},{"url":"https://www.halborn.com/blog/post/explained-the-solv-hack-march-2026","name":"halborn.com","type":"other","credibility":3},{"url":"https://crypto.news/solv-protocol-exploit-drains-2-7m-in-solvbtc-10-bounty-offered/","name":"crypto.news","type":"other","credibility":3},{"url":"https://www.web3isgoinggreat.com/single/solv-protocol-exploit","name":"web3isgoinggreat.com","type":"other","credibility":3},{"url":"https://invezz.com/news/2026/03/06/solv-protocol-vault-exploit-drains-2-7m-worth-of-solvbtc/","name":"invezz.com","type":"other","credibility":3},{"url":"https://certificate.quantstamp.com/full/solv-protocol-solv-btc/1eca9413-0b03-4b7d-9885-e5373ee2d722/index.html","name":"certificate.quantstamp.com","type":"other","credibility":3}],"severity":"medium"},{"content":"In early January 2025, shortly before the SOLV token launch on January 17, 2025, Nubit co-founder Lianchuang Hans publicly alleged that Solv Protocol had been inflating its TVL figures. The core allegations were: (1) Solv reused the same Bitcoin deposits across multiple protocols simultaneously using pre-signed transactions, allowing a single BTC to be counted multiple times on platforms including DeFiLlama; and (2) a Bitcoin whale identified as @Clarissexx0805 alleged she had a private agreement with Solv to use her 1,800 BTC as reserve assets for SolvBTC while the Bitcoin remained under her own control, effectively making it a paper reserve rather than locked collateral. If the whale allegation is accurate, it would constitute a material misrepresentation of reserve composition and TVL. Solv Protocol co-founder Ryan Chow publicly disputed the accusations, stating that the TVL methodology reflected legitimate 15-day redeployment cycles across different SolvBTC liquid staking token products (such as SolvBTC.BBN for Babylon and SolvBTC.CORE for Core). Solv's marketing director Eva Binari described the claims as a 'calculated smear campaign' and the team threatened legal action against Hans if he did not retract them. DeFiLlama's reported TVL for Solv Protocol at the time stood at approximately $2.5 billion. The controversy was not resolved by any independent third-party investigation or regulatory finding and remains unresolved as of the date of this investigation.","heading":"TVL Manipulation Allegations (January 2025)","sources":[{"url":"https://www.cryptopolitan.com/solv-protocol-accused-of-manipulating-tvl/","name":"cryptopolitan.com","type":"other","credibility":3},{"url":"https://beincrypto.com/solv-protocol-dismisses-tvl-inflation/","name":"beincrypto.com","type":"other","credibility":3},{"url":"https://www.chaincatcher.com/en/article/2160857","name":"chaincatcher.com","type":"other","credibility":3},{"url":"https://www.bitget.com/news/detail/12560604473051","name":"bitget.com","type":"other","credibility":3},{"url":"https://cryptorank.io/news/feed/77900-solv-protocol-accused-of-manipulating-tvl","name":"cryptorank.io","type":"other","credibility":3}],"severity":"medium"},{"content":"SolvBTC is backed by a composition of Bitcoin-denominated assets rather than exclusively native BTC. According to Solv Protocol documentation, over 60% of backing is native Bitcoin held via regulated custodians (Ceffu, Cobo, Copper). The remainder includes wrapped Bitcoin tokens such as BTCB (Binance's BEP-20 wrapped Bitcoin), cbBTC (Coinbase's Base-chain wrapped Bitcoin), WBTC (BitGo-custodied wrapped Bitcoin), and other ecosystem-specific wrappers including fBTC, BTC.b, and tBTC. Solv does not govern these third-party wrapped Bitcoin products. Any failure, regulatory action, liquidity crisis, or de-pegging event in any of these underlying assets would directly affect SolvBTC's backing and potential redeemability. This dependency on third-party wrapping protocols is a structural risk inherent to SolvBTC's design. The protocol additionally relies on institutional custodians who introduce traditional counterparty risk. Redemption processing times are noted to extend during periods of market stress, creating potential liquidity risk for holders seeking exit.","heading":"Reserve Composition and Counterparty Risk","sources":[{"url":"https://docs.solv.finance/staking-btc-with-solv/solvbtc/reserves","name":"docs.solv.finance","type":"other","credibility":3},{"url":"https://coinbureau.com/review/solv-protocol-review/","name":"coinbureau.com","type":"other","credibility":3},{"url":"https://www.bitget.com/academy/solv-protocol-btc","name":"bitget.com","type":"other","credibility":3},{"url":"https://wublock.substack.com/p/talk-with-solv-from-wbtc-trust-crisis","name":"wublock.substack.com","type":"other","credibility":3}],"severity":"medium"},{"content":"Despite Solv Protocol's claims of decentralized reserve management using FROST (Flexible Round-Optimized Threshold Signatures) for Bitcoin mainnet custody, several centralization vectors remain. Reserve custody is concentrated among a small number of regulated custodians (Ceffu, Cobo, Copper), meaning users bear institutional counterparty risk rather than protocol-native guarantees. Monthly reserve attestations published by the protocol differ from full financial audits and cannot independently verify the absence of dual-use or re-hypothecation of reserves. The TVL manipulation allegations from January 2025 specifically highlighted a mechanism by which reserve-backing claims may not fully reflect locked and inaccessible collateral. The SOLV governance token distribution was criticized at launch for highly diluted initial distribution across multiple rounds all unlocked at TGE (token generation event), which creates potential governance concentration risks for large early holders.","heading":"Centralization and Governance Risks","sources":[{"url":"https://coinbureau.com/review/solv-protocol-review/","name":"coinbureau.com","type":"other","credibility":3},{"url":"https://www.bitget.com/academy/solv-protocol-guide","name":"bitget.com","type":"other","credibility":3},{"url":"https://www.chaincatcher.com/en/article/2160857","name":"chaincatcher.com","type":"other","credibility":3},{"url":"https://controverity.com/2025/01/16/solv-token-launches-a-new-chapter-in-bitcoin-staking/","name":"controverity.com","type":"other","credibility":3}],"severity":"medium"},{"content":"SolvBTC's yield-bearing derivative products (including SolvBTC.BBN staked via Babylon, SolvBTC.CORE deployed on Core blockchain, and SolvBTC.LST liquid staking tokens) expose users to multiple layers of smart contract risk beyond the base SolvBTC token itself. Each yield strategy introduces dependencies on external protocols — Babylon, Berachain, Ethena, and others — whose own smart contract security and operational continuity directly affect SolvBTC yield holders. The March 2026 BRO vault exploit demonstrated that a novel vault component using the BRO (BitcoinReserveOffering) mechanism contained an undetected critical vulnerability despite prior Quantstamp and OpenZeppelin audits of other protocol components. Cross-chain deployments across more than ten networks introduce additional attack surface, as each bridge integration represents a potential vulnerability. Yield rates are reported in the range of 3-8% annually under normal market conditions, but these rates depend on continued availability and performance of third-party protocols.","heading":"DeFi Yield Strategy and Smart Contract Risk","sources":[{"url":"https://www.bitget.com/academy/solv-protocol-guide","name":"bitget.com","type":"other","credibility":3},{"url":"https://www.stakingrewards.com/asset/solv-protocol-solvbtc-bbn","name":"stakingrewards.com","type":"other","credibility":3},{"url":"https://www.cryptoeq.io/articles/solv-protocol-bitcoin","name":"cryptoeq.io","type":"other","credibility":3},{"url":"https://olympixai.medium.com/the-2-7m-solv-protocol-exploit-a-reentrancy-bug-that-should-never-have-shipped-and-how-olympix-617e4703a531","name":"olympixai.medium.com","type":"other","credibility":3}],"severity":"medium"},{"content":"The SOLV governance and utility token launched on January 17, 2025, following a Binance Megadrop event on January 7, 2025 that distributed up to 4.7 million SOLV tokens to participants. The Megadrop total distribution comprised 588 million tokens representing 7% of total supply. The SOLV tokenomics drew criticism for distributing tokens across numerous allocation rounds (Ecosystem, Community Airdrop, Megadrop, Vesting Voucher, Community Reward, Business Dev) with all of these unlocked at TGE, creating immediate sell pressure and potential concentration of governance power in the hands of early allocations. No specific findings of insider dealing or market manipulation have been verified by a Tier 1 source as of this investigation.","heading":"SOLV Token Launch and Tokenomics","sources":[{"url":"https://www.chaincatcher.com/en/article/2160857","name":"chaincatcher.com","type":"other","credibility":3},{"url":"https://tradersunion.com/news/airdrops/show/44264-solv-protocol-launches/","name":"tradersunion.com","type":"other","credibility":3},{"url":"https://controverity.com/2025/01/16/solv-token-launches-a-new-chapter-in-bitcoin-staking/","name":"controverity.com","type":"other","credibility":3}],"severity":"medium"}],"timeline":[{"date":"2020-12","event":"Solv Protocol founded by Ryan Chow and Will Wang.","source":"","date_original":"2020-12-01"},{"date":"2025-01-03","event":"Nubit co-founder Lianchuang Hans publicly alleges Solv Protocol is manipulating TVL figures by recycling BTC deposits across multiple protocols. A Bitcoin whale separately claims her 1,800 BTC was used as reserve backing while remaining under her personal control.","source":""},{"date":"2025-01-05","event":"Solv Protocol co-founder Ryan Chow and marketing director Eva Binari publicly deny TVL manipulation allegations, describe them as a smear campaign, and threaten legal action against accusers.","source":""},{"date":"2025-01-07","event":"Binance Megadrop for SOLV token begins, offering up to 4.7 million SOLV to participants.","source":""},{"date":"2025-01-17","event":"SOLV governance token officially launches.","source":""},{"date":"2025-09","event":"Solv Protocol and Chainlink announce integration of Proof of Reserve into SolvBTC, enabling real-time on-chain verification of reserve backing on Ethereum.","source":"","date_original":"2025-09-01"},{"date":"2026-03-03","event":"BRO vault exploit occurs: attacker exploits double-mint logic flaw in BitcoinReserveOffering contract 22 times, draining 38.0474 SolvBTC (~$2.7M). Fewer than 10 users directly affected.","source":""},{"date":"2026-03-06","event":"Solv Protocol publicly confirms the exploit, pledges full reimbursement to affected users, and offers the attacker a 10% white-hat bounty ($270,000) for return of funds. Security firms Hypernative, SlowMist, and CertiK engaged.","source":""},{"date":"2026-03-13","event":"Verichains publishes technical post-mortem classifying the vulnerability as a double-mint logic flaw rather than a canonical reentrancy attack.","source":""}],"sources_used":[{"url":"https://docs.solv.finance/key-products/solvbtc","name":"docs.solv.finance","type":"other","archive_url":"http://web.archive.org/web/20260718152655/https://docs.solv.finance/key-products/solvbtc","credibility":3,"archive_timestamp":"2026-07-18T15:26:55+00:00"},{"url":"https://solv.finance/","name":"solv.finance","type":"other","archive_url":"http://web.archive.org/web/20260801210402/https://solv.finance/","credibility":3,"archive_timestamp":"2026-08-01T21:04:02+00:00"},{"url":"https://www.gate.com/learn/articles/what-is-solv-protocol-all-you-need-to-know-about-solv-btc/4422","name":"gate.com","type":"other","archive_url":"https://web.archive.org/web/20260829090033/https://www.gate.com/learn/articles/what-is-solv-protocol-all-you-need-to-know-about-solv-btc/4422","credibility":3,"archive_timestamp":"2026-08-29T09:00:33+00:00"},{"url":"https://en.cryptonomist.ch/2025/09/01/solv-and-chainlink-integrate-proof-of-reserve-into-solvbtc-live-on-chain-anti-manipulation-feed-on-ethereum/","name":"en.cryptonomist.ch","type":"other","archive_url":"https://web.archive.org/web/20260829032611/https://en.cryptonomist.ch/2025/09/01/solv-and-chainlink-integrate-proof-of-reserve-into-solvbtc-live-on-chain-anti-manipulation-feed-on-ethereum/","credibility":3,"archive_timestamp":"2026-08-29T03:26:11+00:00"},{"url":"https://beincrypto.com/solv-protocol-hack-bro-vault-exploit/","name":"beincrypto.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.theblock.co/post/392492/solv-protocol-says-exploit-drained-2-7-million-from-bitcoin-yield-vault","name":"theblock.co","type":"other","archive_url":"http://web.archive.org/web/20260309114450/https://www.theblock.co/post/392492/solv-protocol-says-exploit-drained-2-7-million-from-bitcoin-yield-vault","credibility":3,"archive_timestamp":"2026-03-09T11:44:50+00:00"},{"url":"https://cointelegraph.com/news/hacker-steals-nearly-3-million-from-solv-protocol","name":"cointelegraph.com","type":"other","archive_url":"http://web.archive.org/web/20260420054945/https://cointelegraph.com/news/hacker-steals-nearly-3-million-from-solv-protocol","credibility":3,"archive_timestamp":"2026-04-20T05:49:45+00:00"},{"url":"https://blog.verichains.io/p/solv-protocol-hack-analysis","name":"blog.verichains.io","type":"other","archive_url":"http://web.archive.org/web/20260419202649/https://blog.verichains.io/p/solv-protocol-hack-analysis","credibility":3,"archive_timestamp":"2026-04-19T20:26:49+00:00"},{"url":"https://www.halborn.com/blog/post/explained-the-solv-hack-march-2026","name":"halborn.com","type":"other","archive_url":"http://web.archive.org/web/20260414120303/https://www.halborn.com/blog/post/explained-the-solv-hack-march-2026","credibility":3,"archive_timestamp":"2026-04-14T12:03:03+00:00"},{"url":"https://crypto.news/solv-protocol-exploit-drains-2-7m-in-solvbtc-10-bounty-offered/","name":"crypto.news","type":"other","archive_url":"http://web.archive.org/web/20260417191404/https://crypto.news/solv-protocol-exploit-drains-2-7m-in-solvbtc-10-bounty-offered/","credibility":3,"archive_timestamp":"2026-04-17T19:14:04+00:00"},{"url":"https://www.web3isgoinggreat.com/single/solv-protocol-exploit","name":"web3isgoinggreat.com","type":"other","archive_url":"http://web.archive.org/web/20260413103934/https://www.web3isgoinggreat.com/single/solv-protocol-exploit","credibility":3,"archive_timestamp":"2026-04-13T10:39:34+00:00"},{"url":"https://invezz.com/news/2026/03/06/solv-protocol-vault-exploit-drains-2-7m-worth-of-solvbtc/","name":"invezz.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://certificate.quantstamp.com/full/solv-protocol-solv-btc/1eca9413-0b03-4b7d-9885-e5373ee2d722/index.html","name":"certificate.quantstamp.com","type":"other","archive_url":"https://web.archive.org/web/20260829025023/https://certificate.quantstamp.com/full/solv-protocol-solv-btc/1eca9413-0b03-4b7d-9885-e5373ee2d722/index.html","credibility":3,"archive_timestamp":"2026-08-29T02:50:23+00:00"},{"url":"https://www.cryptopolitan.com/solv-protocol-accused-of-manipulating-tvl/","name":"cryptopolitan.com","type":"other","archive_url":"http://web.archive.org/web/20260116211653/https://www.cryptopolitan.com/solv-protocol-accused-of-manipulating-tvl/","credibility":3,"archive_timestamp":"2026-01-16T21:16:53+00:00"},{"url":"https://beincrypto.com/solv-protocol-dismisses-tvl-inflation/","name":"beincrypto.com","type":"other","archive_url":null,"credibility":3,"archive_timestamp":null},{"url":"https://www.chaincatcher.com/en/article/2160857","name":"chaincatcher.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:gone","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://www.bitget.com/news/detail/12560604473051","name":"bitget.com","type":"other","archive_url":"https://web.archive.org/web/20260829044226/https://www.bitget.com/news/detail/12560604473051","credibility":3,"archive_timestamp":"2026-08-29T04:42:26+00:00"},{"url":"https://cryptorank.io/news/feed/77900-solv-protocol-accused-of-manipulating-tvl","name":"cryptorank.io","type":"other","archive_url":"http://web.archive.org/web/20260209024427/https://cryptorank.io/news/feed/77900-solv-protocol-accused-of-manipulating-tvl","credibility":3,"archive_timestamp":"2026-02-09T02:44:27+00:00"},{"url":"https://docs.solv.finance/staking-btc-with-solv/solvbtc/reserves","name":"docs.solv.finance","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://coinbureau.com/review/solv-protocol-review/","name":"coinbureau.com","type":"other","archive_url":"http://web.archive.org/web/20260422120915/https://coinbureau.com/review/solv-protocol-review","credibility":3,"archive_timestamp":"2026-04-22T12:09:15+00:00"},{"url":"https://www.bitget.com/academy/solv-protocol-btc","name":"bitget.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:not-found","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://wublock.substack.com/p/talk-with-solv-from-wbtc-trust-crisis","name":"wublock.substack.com","type":"other","archive_url":"http://web.archive.org/web/20250917023715/https://wublock.substack.com/p/talk-with-solv-from-wbtc-trust-crisis","credibility":3,"archive_timestamp":"2025-09-17T02:37:15+00:00"},{"url":"https://www.bitget.com/academy/solv-protocol-guide","name":"bitget.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:not-found","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://controverity.com/2025/01/16/solv-token-launches-a-new-chapter-in-bitcoin-staking/","name":"controverity.com","type":"other","archive_url":null,"credibility":3,"archive_timestamp":null},{"url":"https://www.stakingrewards.com/asset/solv-protocol-solvbtc-bbn","name":"stakingrewards.com","type":"other","archive_url":"http://web.archive.org/web/20250905232415/https://www.stakingrewards.com/asset/solv-protocol-solvbtc-bbn","credibility":3,"archive_timestamp":"2025-09-05T23:24:15+00:00"},{"url":"https://www.cryptoeq.io/articles/solv-protocol-bitcoin","name":"cryptoeq.io","type":"other","archive_url":"http://web.archive.org/web/20260411105046/https://www.cryptoeq.io/articles/solv-protocol-bitcoin","credibility":3,"archive_timestamp":"2026-04-11T10:50:46+00:00"},{"url":"https://olympixai.medium.com/the-2-7m-solv-protocol-exploit-a-reentrancy-bug-that-should-never-have-shipped-and-how-olympix-617e4703a531","name":"olympixai.medium.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://tradersunion.com/news/airdrops/show/44264-solv-protocol-launches/","name":"tradersunion.com","type":"other","archive_url":null,"credibility":3,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null}],"source_tags":["defillama"],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-sonnet-4-6","created_at":"2026-05-04T02:54:13.067211+00:00","updated_at":"2026-08-30T03:54:57.129704+00:00"}}