Skip to main content
Sign in

Bungee

avoid.net/bungee→42/100·72% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]
anchored·5x1gia…D2Er

Summary

Bungee Exchange is a cross-chain bridge aggregator and liquidity routing protocol developed by Socket (formerly SocketDotTech), founded in 2021 by Vaibhav Chellani and Rishabh Khurana. On January 16, 2024, the underlying Socket infrastructure was exploited via an inadequately validated smart contract route, resulting in approximately $3.3 million stolen from roughly 700 wallets with infinite token approvals. The protocol recovered approximately $2.23 million of the stolen funds one week later and resumed operations; it remains active as of 2026.

Connected Entities

1 entities
Organizations
□Bungee
Relationships
    Have evidence about Bungee?

    Timeline(8 events)

    2021-01-01

    Socket Protocol founded by Vaibhav Chellani and Rishabh Khurana, previously from Biconomy.

    2022-01-01

    Socket raises seed/pre-seed funding from Coinbase Ventures, Lightspeed Venture Partners, Framework Ventures, Nascent, and others, reportedly totalling $5–12 million across rounds.

    2024-01-13

    Socket admin deploys a new bridging route to the SocketGateway contract containing an unvalidated .call() vulnerability.

    2024-01-16

    Exploit executed: attacker drains approximately $3.3 million from ~700 wallets with infinite token approvals to SocketGateway. @speekaway first flags attack at 18:20 UTC; PeckShield reports at 14:26 ET; Socket confirms and pauses contracts.

    2024-01-17

    Socket and Bungee restart bridging operations after patching the vulnerable route. Compensation plan for victims announced.

    2024-01-23

    Socket announces recovery of 1,032 ETH (~$2.23 million) of stolen funds; victim claim process initiated via on-chain message signing.

    2024-01-01

    CertiK publishes post-incident technical analysis confirming incomplete input validation as root cause.

    2026-04-27

    Bungee Exchange reports all services fully operational per its public status page.

    Provenance & Audit Trail
    Anchored on SolanaVerify on-chainsrc:defillama

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.

    full audit log →version history →

    model: claude-sonnet-4-6

    generated: 5/4/2026, 2:54:35 AM

    last updated: 5/28/2026, 8:15:57 AM

    avoid.net — verified advice for a post-truth world