Skip to main content
AVOID.NET
Sign in

Bungee

avoid.net/bungee→42/100·72% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·5x1gia…D2Er

Summary

Bungee Exchange is a cross-chain bridge aggregator and liquidity routing protocol developed by Socket (formerly SocketDotTech), founded in 2021 by Vaibhav Chellani and Rishabh Khurana. On January 16, 2024, the underlying Socket infrastructure was exploited via an inadequately validated smart contract route, resulting in approximately $3.3 million stolen from roughly 700 wallets with infinite token approvals. The protocol recovered approximately $2.23 million of the stolen funds one week later and resumed operations; it remains active as of 2026.

Connected Entities

6 entities · 60 linked investigations
Organizations
□Synthetix58□Bungee□Polymarket22□ZachXBT82
Protocols
⌂Socket Protocol58
Tokens
♦Coinbase62
Relationships
  • Socket Protocol→mentioned with→Bungee(80%)
  • Socket Protocol→mentioned with→Coinbase(80%)
  • Coinbase→mentioned with→ZachXBT(70%)
  • Bungee→mentioned with→Socket Protocol(80%)
  • Bungee→mentioned with→Polymarket(60%)
  • Bungee→mentioned with→Coinbase(70%)
  • Bungee→mentioned with→Synthetix(60%)
  • Bungee→mentioned with→ZachXBT(70%)
Also appears in
Aperture LM·28Euler Finance·58Crossmint·70MoonHacker·18Ripple Labs·47Dean Daghita / CMDSS (Command Services and Support)·0Gurhan Kiziloz·0SafePal·42AnubisDAO·2SudoRare·2+ 50 more

Connected Through

6 shared actors · 636 investigations

Distinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.

Have evidence about Bungee?

Timeline(8 events)

2021

Socket Protocol founded by Vaibhav Chellani and Rishabh Khurana, previously from Biconomy.

2022

Socket raises seed/pre-seed funding from Coinbase Ventures, Lightspeed Venture Partners, Framework Ventures, Nascent, and others, reportedly totalling $5–12 million across rounds.

13 January 2024

Socket admin deploys a new bridging route to the SocketGateway contract containing an unvalidated .call() vulnerability.

16 January 2024

Exploit executed: attacker drains approximately $3.3 million from ~700 wallets with infinite token approvals to SocketGateway. @speekaway first flags attack at 18:20 UTC; PeckShield reports at 14:26 ET; Socket confirms and pauses contracts.

17 January 2024

Socket and Bungee restart bridging operations after patching the vulnerable route. Compensation plan for victims announced.

23 January 2024

Socket announces recovery of 1,032 ETH (~$2.23 million) of stolen funds; victim claim process initiated via on-chain message signing.

2024

CertiK publishes post-incident technical analysis confirming incomplete input validation as root cause.

27 April 2026

Bungee Exchange reports all services fully operational per its public status page.

Provenance & Audit Trail
Anchored on SolanaVerify on-chain14 Wayback Archivessrc:defillama

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event). 14 of 16 cited source URLs have an Internet Archive snapshot.

full audit log →version history →

model: claude-sonnet-4-6

generated: 5/4/2026, 2:54:35 AM

last updated: 9/1/2026, 3:53:19 AM

5 views

avoid.net — verified advice for a post-truth world