Bent Finance
Last changed 2026-11-02 · Fact-check review — Fact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the judge moved the trust score from 28 to 18. Version history →
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·4ZfrNy…TGNcSummary
Bent Finance is an Ethereum-based DeFi yield aggregator built on top of Curve Finance and Convex Finance, offering staking and liquidity pool boosting for the BENT token. In December 2021, the protocol suffered an insider exploit in which a rogue developer with access to the contract deployer private key inserted a backdoor into the cvxCRV and MIM pool contracts, resulting in the theft of approximately 440 ETH (~$1.75M). Stolen funds were ultimately returned by the attacker and reimbursed to users by late December 2021, but the incident caused a 73% BENT token price collapse and left the protocol with negligible TVL.
Connected Entities
4 entities · 60 linked investigations- Bent Finance→mentioned with→Ethereum(60%)
- Convex Finance→mentioned with→Ethereum(80%)
- Curve Finance→mentioned with→Ethereum(80%)
- Bent Finance→mentioned with→Curve Finance(80%)
- Bent Finance→mentioned with→Convex Finance(80%)
- Convex Finance→mentioned with→Curve Finance(80%)
Timeline(7 events)
30 November 2021
Rogue developer silently updates Bent Finance cvxCRV pool contract to hardcode a malicious token balance for attacker address 0xd23cfffa066f81c7640e3f0dc8bb2958f7686d1f. A subsequent clean update is deployed to conceal the modification.
9 December 2021
Attacker's primary wallet receives two deposits from Tornado Cash, pre-funding the operation.
12 December 2021
Attacker begins executing withdrawals. First batch: 263,000 cvxCRV-f extracted from Bent Finance pools, converted to ETH, and sent to Tornado Cash.
19 December 2021
BENT token reaches all-time high of $15.90 per token.
20 December 2021
Exploit discovered at approximately 8:55 PM EST. Bent Finance disables reward claims and alerts users. Second batch of approximately 240 ETH laundered via Tornado Cash. Total: ~440 ETH (~$1.75M) laundered.
21 December 2021
PeckShield publicly confirms exploit originated from Bent Finance's own deployer address. Protocol issues official confirmation and advises all pool investors to withdraw funds. BENT token drops 73-74%. Team employs two independent white hat developers.
24 December 2021
Hacker agrees to return stolen funds to team multisig at 0xaBb8B277F49de499b902A1E09A2aCA727595b544. Full reimbursement of 512,696 cvxcrv-f tokens completed. Community contributed ~200,000 additional cvxCRV to cover deficit.
Decision Log
- slot 464357485 · hash 5nUV453NjQ6zResMNGtLsAz3NdmdHw9oHxj7KegS2FYt
- slot 464357480 · hash 3uc3so6yFGbnSzkU1TH1CNwwQ2742wtCMWcozMbxF4do
- slot 422768070 · hash 98AzT24xzUqRedErVcukMh71xLxMxuTT3x2jNSez445
This investigation is cryptographically anchored to the Solana blockchain (3 decisions). 10 of 10 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:52 AM
last updated: 11/2/2026, 4:16:00 AM
6 viewsavoid.net — verified advice for a post-truth world