Audit log

Every state-changing event for BarnBridge: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

1. #1publishby system:backfill

   2026-07-22 02:26:05Z
   Score: ? → ? (no score change)
   anchorpending

   chain

   ●—

   hash

   HjKjXtcmjFK7…5SH3X6xFcopysha256 → base58

   verifying row…

   canonical bytes (15730 B) ▸

   {"actor":"system:backfill","investigation_id":"a8eee9c9-c468-429e-b77c-8794e519ad24","kind":"publish","page_slug":"barnbridge","published_at":"2026-07-22T02:26:05.152Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"BarnBridge","sections":[{"content":"BarnBridge was a decentralized finance protocol launched on Ethereum, structured and marketed as a DAO governed by holders of its BOND token. Its flagship product, SMART Yield, allowed users to deposit stablecoins into pools built on top of lending protocols such as Compound and Aave, splitting the resulting variable yield into 'senior' (fixed-rate) and 'junior' (variable-rate) tranches. According to the SEC's December 2023 order, SMART Yield attracted more than $509 million in investments from investors, including U.S. residents, and BarnBridge collected fees based on investment size and yield tranche selected. The protocol was co-founded by Tyler Ward and Troy Murray.","heading":"What BarnBridge Was","severity":"medium","sources":[{"credibility":1,"name":"SEC.gov — BarnBridge DAO Agrees to Stop Unregistered Offer and Sale of Structured Finance Crypto Product","type":"regulatory","url":"https://www.sec.gov/newsroom/press-releases/2023-258"},{"credibility":2,"name":"SEC's Settlement With BarnBridge DAO: Implications for the Future of DeFi — K&L Gates","type":"research","url":"https://www.klgates.com/SECs-Settlement-With-BarnBridge-DAO-Implications-for-the-Future-of-DeFi-1-25-2024"}]},{"content":"In July 2023, an attorney for BarnBridge posted in the project's Discord server that BarnBridge and 'individuals associated with the DAO' were under SEC investigation, and recommended that existing liquidity pools be closed and no further BarnBridge-related product work continue. On December 22, 2023, the SEC announced that BarnBridge DAO and founders Tyler Ward and Troy Murray agreed to pay more than $1.7 million to settle charges of failing to register the SMART Yield bonds as securities and operating the SMART Yield pools as unregistered investment companies. BarnBridge DAO agreed to disgorge approximately $1.457 million, and Ward and Murray each paid a $125,000 civil penalty; the order also required BarnBridge to cease selling the product. The SEC's order found that despite BarnBridge's decentralized-governance framing, founders Ward and Murray held sufficient voting power that 'every proposal approved by the DAO needed, and received, [their] votes to reach a quorum' — undercutting the project's decentralization claims. Respondents neither admitted nor denied the SEC's findings. This action is widely cited as one of the first SEC enforcement actions to directly target a DAO-structured crypto protocol.","heading":"SEC Enforcement Action and Wind-Down (2023)","severity":"high","sources":[{"credibility":1,"name":"SEC.gov — BarnBridge DAO Agrees to Stop Unregistered Offer and Sale of Structured Finance Crypto Product","type":"regulatory","url":"https://www.sec.gov/newsroom/press-releases/2023-258"},{"credibility":1,"name":"SEC order — BarnBridge DAO, Release No. 33-11262","type":"court_filing","url":"https://www.sec.gov/files/litigation/admin/2023/33-11262.pdf"},{"credibility":1,"name":"SEC Blasts 'Purportedly Decentralized' DAOs in $1.7M Settlement with BarnBridge — CoinDesk","type":"news_article","url":"https://www.coindesk.com/policy/2023/12/22/sec-blasts-purportedly-decentralized-daos-in-17m-settlement-with-barnbridge"},{"credibility":2,"name":"'Decentralized' BarnBridge closes up shop after claiming they are under SEC investigation — Web3 Is Going Just Great","type":"community_report","url":"https://www.web3isgoinggreat.com/?id=decentralized-barnbridge-closes-up-shop-after-claiming-they-are-under-sec-investigation"}]},{"content":"On July 15, 2026, roughly $776,000 (reported as approximately $776,000–$776,600) was drained from BarnBridge's SMART Yield protocol in what on-chain security firm BlockSec (via its Phalcon monitoring platform) characterized as a governance attack rather than a code exploit. According to BlockSec and multiple crypto-news outlets, an attacker acquired BOND governance tokens, used them to pass a malicious DAO proposal, and upgraded the SmartYield/CompoundProvider proxy contract to a malicious implementation. The malicious contract then exploited the `_takeUnderlying` function to sweep long-standing, unrevoked USDC token approvals from approximately 50 user wallets, aggregating the funds via a `transferFees`-style call to the attacker's address. Reporting from amlcrypto.io indicates the attacker spent only about 0.335 ETH (roughly $600) to acquire ~32,795 BOND tokens, of which 32,000 were locked for voting power — enough to pass a proposal through what multiple outlets described as an 'almost inactive' DAO. The stolen USDC was subsequently swapped for approximately 415 ETH via Uniswap and moved to a separate address, where it reportedly remained as of initial reporting. Security firm Blockaid separately issued a community alert about token-approval risk tied to old BarnBridge SMART Yield governance proposals. No official statement from BarnBridge or its former founders regarding the incident was found in available sourcing, consistent with the protocol having wound down operations in 2023.","heading":"July 2026 Governance-Takeover Attack","severity":"critical","sources":[{"credibility":2,"name":"BarnBridge Governance Attack Causes $776,000 Loss — Phemex News","type":"news_article","url":"https://phemex.com/news/article/barnbridge-governance-attack-results-in-776000-loss-93165"},{"credibility":2,"name":"BarnBridge SMART Yield Protocol Hit by Governance Attack, Suffers $776,000 Loss — KuCoin","type":"news_article","url":"https://www.kucoin.com/news/flash/barnbridge-smart-yield-protocol-hit-by-governance-attack-suffers-776-000-loss"},{"credibility":2,"name":"BarnBridge governance attack reportedly causes approximately $776,000 in losses — Odaily","type":"news_article","url":"https://www.odaily.news/en/newsflash/500794"},{"credibility":2,"name":"BarnBridge Hack: Governance Attack and $776K Theft — amlcrypto.io","type":"research","url":"https://amlcrypto.io/blog/barn-bridge-exploit"},{"credibility":2,"name":"Warning: The old proposal of BarnBridge — token authorization risk — ChainCatcher","type":"news_article","url":"https://www.chaincatcher.com/en/article/2276521"},{"credibility":2,"name":"Alert: Token authorization risk in old BarnBridge Smart Yield proposal — Bitget News","type":"news_article","url":"https://www.bitget.com/news/detail/12560605505315"},{"credibility":2,"name":"Clarification: BarnBridge 'CompoundProvider' incident – Compound protocol is not affected — Compound Community Forum","type":"community_report","url":"https://www.comp.xyz/t/clarification-barnbridge-compoundprovider-incident-compound-protocol-is-not-affected/7961"},{"credibility":3,"name":"Blockaid community alert on BarnBridge Smart Yield approval risk (X/Twitter)","type":"social_media","url":"https://x.com/blockaid_/status/2077197943195439588"}]},{"content":"The structural cause of the July 2026 incident, as described in BlockSec's and other outlets' analysis, was that BarnBridge's DAO governance mechanism and its SMART Yield contracts remained live and upgradeable on-chain even though the project had ceased active operations following its 2023 SEC settlement. Because voter turnout was minimal, a small BOND purchase (reportedly costing roughly $600) was sufficient to reach quorum on a proposal that upgraded a privileged proxy contract. Separately, many users had left USDC token approvals to BarnBridge contracts active for an extended period without revoking them, which allowed the attacker's malicious contract to pull funds directly once it gained the relevant permissions. This combination — dormant-but-functional DAO governance plus stale token approvals — has been cited by security commentators as a broader risk pattern for defunct or low-activity DeFi protocols that never formally revoked contract permissions or migrated to a fully immutable/non-upgradeable state.","heading":"Underlying Vulnerability: Abandoned but Still-Live Governance and Approvals","severity":"high","sources":[{"credibility":2,"name":"BarnBridge Hack: Governance Attack and $776K Theft — amlcrypto.io","type":"research","url":"https://amlcrypto.io/blog/barn-bridge-exploit"},{"credibility":2,"name":"BarnBridge governance attack reportedly causes approximately $776,000 in losses — Odaily","type":"news_article","url":"https://www.odaily.news/en/newsflash/500794"},{"credibility":3,"name":"Blockaid community alert on BarnBridge Smart Yield approval risk (X/Twitter)","type":"social_media","url":"https://x.com/blockaid_/status/2077197943195439588"}]},{"content":"BarnBridge has had no active product operations since mid-2023 and its BOND governance token has seen a sustained price decline, trading at roughly $0.017 as of early July 2026, down over 50% from three months prior per market-data aggregators, with bearish technical indicators reported through mid-July 2026. The July 2026 governance attack occurred against this backdrop of an effectively abandoned but technically still-functional protocol. Users who previously interacted with BarnBridge SMART Yield contracts and have not revoked related token approvals may remain at risk, per security-firm alerts issued after the attack.","heading":"Current Status and Token Performance","severity":"medium","sources":[{"credibility":3,"name":"BarnBridge (BOND) price prediction and technicals — CoinDataFlow","type":"other","url":"https://coindataflow.com/en/prediction/barnbridge"},{"credibility":3,"name":"Blockaid community alert on BarnBridge Smart Yield approval risk (X/Twitter)","type":"social_media","url":"https://x.com/blockaid_/status/2077197943195439588"}]}],"sources_used":[{"credibility":1,"name":"SEC.gov — BarnBridge DAO Agrees to Stop Unregistered Offer and Sale of Structured Finance Crypto Product","type":"regulatory","url":"https://www.sec.gov/newsroom/press-releases/2023-258"},{"credibility":1,"name":"SEC order — BarnBridge DAO, Release No. 33-11262","type":"court_filing","url":"https://www.sec.gov/files/litigation/admin/2023/33-11262.pdf"},{"credibility":1,"name":"SEC Blasts 'Purportedly Decentralized' DAOs in $1.7M Settlement with BarnBridge — CoinDesk","type":"news_article","url":"https://www.coindesk.com/policy/2023/12/22/sec-blasts-purportedly-decentralized-daos-in-17m-settlement-with-barnbridge"},{"credibility":2,"name":"SEC's Settlement With BarnBridge DAO: Implications for the Future of DeFi — K&L Gates","type":"research","url":"https://www.klgates.com/SECs-Settlement-With-BarnBridge-DAO-Implications-for-the-Future-of-DeFi-1-25-2024"},{"credibility":2,"name":"'Decentralized' BarnBridge closes up shop after claiming they are under SEC investigation — Web3 Is Going Just Great","type":"community_report","url":"https://www.web3isgoinggreat.com/?id=decentralized-barnbridge-closes-up-shop-after-claiming-they-are-under-sec-investigation"},{"credibility":2,"name":"BarnBridge Governance Attack Causes $776,000 Loss — Phemex News","type":"news_article","url":"https://phemex.com/news/article/barnbridge-governance-attack-results-in-776000-loss-93165"},{"credibility":2,"name":"BarnBridge SMART Yield Protocol Hit by Governance Attack, Suffers $776,000 Loss — KuCoin","type":"news_article","url":"https://www.kucoin.com/news/flash/barnbridge-smart-yield-protocol-hit-by-governance-attack-suffers-776-000-loss"},{"credibility":2,"name":"BarnBridge governance attack reportedly causes approximately $776,000 in losses — Odaily","type":"news_article","url":"https://www.odaily.news/en/newsflash/500794"},{"credibility":2,"name":"BarnBridge Hack: Governance Attack and $776K Theft — amlcrypto.io","type":"research","url":"https://amlcrypto.io/blog/barn-bridge-exploit"},{"credibility":2,"name":"Warning: The old proposal of BarnBridge — token authorization risk — ChainCatcher","type":"news_article","url":"https://www.chaincatcher.com/en/article/2276521"},{"credibility":2,"name":"Alert: Token authorization risk in old BarnBridge Smart Yield proposal — Bitget News","type":"news_article","url":"https://www.bitget.com/news/detail/12560605505315"},{"credibility":2,"name":"Clarification: BarnBridge 'CompoundProvider' incident – Compound protocol is not affected — Compound Community Forum","type":"community_report","url":"https://www.comp.xyz/t/clarification-barnbridge-compoundprovider-incident-compound-protocol-is-not-affected/7961"},{"credibility":3,"name":"Blockaid community alert on BarnBridge Smart Yield approval risk (X/Twitter)","type":"social_media","url":"https://x.com/blockaid_/status/2077197943195439588"},{"credibility":3,"name":"BarnBridge (BOND) price prediction and technicals — CoinDataFlow","type":"other","url":"https://coindataflow.com/en/prediction/barnbridge"}],"summary":"BarnBridge was an Ethereum-based DeFi protocol, structured as a DAO, best known for its SMART Yield product, which tranched variable-rate yield from lending markets like Compound and Aave into fixed and variable risk classes. The protocol halted operations in mid-2023 after founders disclosed an SEC investigation, and BarnBridge DAO and its two founders settled with the SEC in December 2023 for $1.7 million over unregistered offer and sale of crypto asset securities and unregistered investment company violations. On July 15, 2026, despite being effectively defunct, BarnBridge's SMART Yield governance and legacy token approvals were exploited in a governance-takeover attack that drained approximately $776,000 in USDC from roughly 50 wallets; the attacker reportedly spent only about $600 to acquire enough BOND voting power to pass a malicious upgrade proposal through an inactive DAO. The scout flag characterizing this as a governance-attack incident is substantiated: the event is corroborated across multiple independent crypto-news outlets and an on-chain security firm, though as of this writing it lacks coverage from top-tier wire/legal press specific to the 2026 incident itself (the 2023 SEC action is Tier 1 sourced).","timeline":[{"date":"2023-07-06","event":"An attorney for BarnBridge posted in the project's Discord stating BarnBridge and individuals associated with the DAO were under SEC investigation, recommending liquidity pools be closed and product work halted.","source":"Web3 Is Going Just Great","source_url":"https://www.web3isgoinggreat.com/?id=decentralized-barnbridge-closes-up-shop-after-claiming-they-are-under-sec-investigation"},{"date":"2023-12-22","event":"SEC announces BarnBridge DAO and founders Tyler Ward and Troy Murray agreed to pay over $1.7 million to settle charges over unregistered SMART Yield securities and unregistered investment company operation.","source":"SEC.gov press release 2023-258","source_url":"https://www.sec.gov/newsroom/press-releases/2023-258"},{"date":"2026-07-15","event":"Attacker acquires BOND tokens for roughly $600, passes a malicious DAO governance proposal, upgrades the SmartYield/CompoundProvider proxy to a malicious contract, and drains approximately $776,000 in USDC from roughly 50 wallets via stale token approvals; funds swapped to ~415 ETH and moved off.","source":"BlockSec Phalcon monitoring, reported by Phemex, KuCoin, Odaily, ChainCatcher, amlcrypto.io","source_url":"https://amlcrypto.io/blog/barn-bridge-exploit"},{"date":"2026-07-15","event":"Security firm Blockaid issues a community alert warning that old BarnBridge Smart Yield governance proposals could put existing token approvals at risk if maliciously executed or upgraded.","source":"Blockaid (X/Twitter)","source_url":"https://x.com/blockaid_/status/2077197943195439588"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision ea789fe8-692b-4aef-b348-a4db84218f5ecopy