Bedrock Protocol
Last changed 2026-10-10 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 41 → 58. Problems weighed by who is responsible: incidents the subject suffered −20, problems around the subject, caused by others −1.4; legitimacy credit long-running +4; the penalty for incidents it suffered is capped at 20; fact-check adjustments (−7) now shown as page reliability, not in the score. Version history →
Why this score
| Every page starts at | 65 |
| Incidents it suffered (e.g. hacks) | -20 |
| Problems around it, caused by others | -1.4 |
| Long-running | +4 |
| Sum | 48 |
- The penalty for incidents it suffered is capped at 20 points.
Score: 58/100 (kept between 0 and 100)
How scoring works →Summary
Bedrock Protocol is a multi-asset liquid restaking protocol developed by RockX, offering synthetic Bitcoin (uniBTC), liquid-staked ETH (uniETH), and IoTeX staking (uniIOTX). On September 27, 2024, the protocol suffered a critical smart contract exploit in which a flawed minting function allowed an attacker to mint uniBTC tokens at a 1:1 ETH-to-BTC ratio, draining approximately $2 million from DEX liquidity pools. Subsequent investigation by security firm Fuzzland, disclosed in June 2025, alleged that a former Fuzzland employee planted a supply-chain backdoor to execute the attack; Fuzzland stated it compensated Bedrock for losses and reported the matter to law enforcement.
Connected Entities
8 entities · 60 linked investigations- Ethereum→mentioned with→Bitcoin(60%)
- Aptos→mentioned with→Ethereum(80%)
- Aptos→mentioned with→Bitcoin(70%)
- Bedrock Protocol→mentioned with→Ethereum(70%)
- Bedrock Protocol→mentioned with→uniBTC(70%)
- Bedrock Protocol→mentioned with→Aptos(65%)
- Bedrock Protocol→mentioned with→Uniswap(70%)
- Bedrock Protocol→mentioned with→Pendle(80%)
- Bedrock Protocol→mentioned with→Chainlink(65%)
- Bedrock Protocol→mentioned with→Bitcoin(70%)
- + 11 more
Timeline(10 events)
15 March 2023
RockX publicly unveils Bedrock, a KYC/AML-compliant institutional liquid staking platform, via CoinDesk coverage.
CoinDesk25 September 2024
Bedrock deploys the uniBTC vault smart contract on Ethereum, less than 48 hours before it is exploited.
Dedaub / QuillAudits26 September 2024
Dedaub security team discovers and simulates the uniBTC minting vulnerability at approximately UTC 16:00 and reports it to Bedrock on Twitter at UTC 16:27; a SEAL 911 war room is created at UTC 16:41.
Dedaub27 September 2024
First exploit transaction is executed at approximately UTC 18:28. Attacker (0x2bFB3730...) mints uniBTC at a 1:1 ETH-to-BTC ratio and drains roughly $2 million from Uniswap and DEX liquidity pools. uniBTC price drops approximately 55% against Bitcoin spot price.
QuillAudits / CryptoNews27 September 2024
Bedrock pauses the uniBTC contract, halting all minting and transfers. Protocol confirms underlying BTC reserves are safe and commits to a reimbursement plan. Pendle Finance and Corn Protocol also pause operations proactively.
Bedrock Official X / The Defiant27 September 2024
Bedrock offers the attacker a job as a security consultant in an apparent white-hat outreach attempt.
CoinTelegraph29 September 2024
Bedrock announces integration of Chainlink Proof of Reserve into its minting function as a security upgrade, alongside plans for third-party audits and 24/7 smart contract monitoring.
CryptoBriefing / Chainlink TodayFebruary 2025
Bedrock wraps up its Boyco campaign, reporting contribution of 1,000 uniBTC to Berachain's $3 billion TVL, indicating operational recovery.
PR Newswire25 June 2025
Fuzzland publicly discloses that an alleged former employee planted a supply-chain backdoor (malicious Rust crate `rands`) to execute the September 2024 Bedrock exploit. Fuzzland states it compensated Bedrock for losses, engaged zeroShadow for forensic investigation, and filed reports with the FBI and Chinese law enforcement.
CoinTelegraph4 September 2025
Bedrock announces launch of uniBTC and brBTC on the Aptos blockchain with ~$700 million TVL reported across 15+ chains.
PR NewswireDecision Log
- slot 455364052 · hash D16sbEhjDMpnR3RPHSraxdQCkhhqqYEckHYVM9YRCTju
- slot 443508332 · hash 4n8DzorAhYr4rYBF4xYuP24SuwZ4N4u8676QasPvhvsw
- slot 425182128 · hash 8gH7W3H4DP3AxKrb1faQ7HDTdstqcEXqkSqnvBKwhvD9
- slot 425182125 · hash AdzsK1LHHkr2kdPV5zkSWafL9jKUUci6LEEPqqByEQbT
- slot 423640110 · hash CWDKUmp1BX1F3T56hoJay5SdKqDLDeen8jzxsDSsxPRz
This investigation is cryptographically anchored to the Solana blockchain (5 decisions). 15 of 18 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 6/1/2026, 5:46:59 PM
last updated: 10/10/2026, 6:44:18 PM
4 viewsavoid.net — verified advice for a post-truth world