Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·627Ufm…CnqQSummary
Concentric (Concentric.fi) was an automated liquidity management protocol built on Camelot v3 on the Arbitrum network, offering vault-based yield optimization for concentrated liquidity positions. On January 22, 2024, the protocol suffered a critical security breach when a team member's deployer wallet was compromised through a targeted social engineering attack, resulting in approximately $1.85 million in losses and a 57% crash in the CONE token price. The protocol was subsequently halted entirely, and blockchain forensics firm CertiK linked the exploiter's wallets to prior incidents targeting OKX, UnoRe, and LunaFi, suggesting a sophisticated and recurring threat actor.
Connected Entities
4 entities · 60 linked investigations- OKX DEX→mentioned with→ZachXBT(70%)
- Concentric→mentioned with→ZachXBT(70%)
- Concentric→mentioned with→OKX DEX(85%)
- Concentric→mentioned with→Arbitrum(75%)
Connected Through
4 shared actors · 600 investigationsDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- □ZachXBTorganizationalso inDean Daghita / CMDSS (Command Services and Support)·0Gurhan Kiziloz·0Gurhan Kiziloz (BlockDAG Co-Founder)·0$91M Bitcoin Social Engineering Theft — Hardware Wallet Impersonation (August 2026)·0Blockchain Bandit·0Faris Ali / UK Crypto Home Invasion Ring·0Yelo (yelotree)·0Lab·0H2 2026 July Bridge Hack Wave — Seven Attacks, $M+ Lost·0Wojtek Kulisz aka Merry (SIM-Swap Gang)·0Ben 'BitBoy' Armstrong·0Inferno Drainer·0DSJEX / BG Wealth Sharing·0Poland SIM-Swap Crypto Theft Ring — June/July 2026·0LastPass threat actor·0Fake Trezor Support Social Engineering — $282M Heist·0LAB / LABUSDT·0Chris Larsen·0Gamer Crew $263M Social Engineering Ring (New Defendants)·0Drift Protocol DPRK Exploit (April 2026)·0fake Ledger Live app·0Malone Lam·0LAB Token (LabsAI)·0Tiffany Milanovich·0AscendEX — Insolvency and Withdrawal Freeze (July 2026)·0Malone Lam Crypto Syndicate·0Broox Bauer / Axiom Insider Trading Ring·0Swift Wave Capital·0EVM Cross-Chain Wallet-Drain Campaign (June 2026)·0DPRK·0DSJEX / BG Wealth Sharing Ponzi·0AscendEX (BitMax)·0John Daghita (aka Lick) — US Marshals Crypto Theft·0Fake MetaMask Update Phishing Campaign (May 2026)·0Apple App Store — Systematic Fake Crypto Wallet Cluster (26 Apps, April 2026)·0CREAM Lending·0Pump.fun·0263M RICO Social Engineering Crypto Theft Gang (DC — 2024-2026 Prosecutions)·0Fake Hyperliquid App·0Heisenberg Guru (HSBG)·0Cream Finance·0StableMagnet·2AnubisDAO·2SudoRare·2Jonathan Spalletta·2Aman Kesar India Crypto Scam Ring·2HQI Exchange·2Trenton Richard Johnston·2Blur Finance·2ETHTrustFund·2Gotbit·2HyperVault·2Bitforex·2Wiz Khalifa Pump Fun·2Iran War Panic Crypto Scam Network (ORAMAMA / X Account Manipulation)·2Mr. Parveen India Social Engineering Scam Ring·2Aqua·2eXch·2Malone Lam·2Vkevin·2AnubisDAO·2Transit Finance·2Marlon Ferro (GothFerrari)·2Wojtek Kulisz ('Merry') — SIM Swap Crypto Theft Ring·2Leva Heal Limited (Fake Ledger Live App - Apple App Store)·2Faris Ali·2RaveDAO·2MangoFarmSOL·2Veer Chetal·2AI Fake X Account Crypto Scam Network 2026·2Magnate Finance·2NFTMachine·2Glori Finance·2ArbiSwap·2Trenton Johnston — Crypto Social Engineering Theft Ring·2RiskOnBlast·2ORAMAMA X War-Panic Scam Network·2Aquabot (AQUA)·2Kokomo Finance·2M1llionz (RichMilly666)·3AudiA6 Mixing Service·3ORAMAMA Token ($ORAMAMA)·3Sahil Arora·3ZKasino·3Garden Finance Cross-Chain Bridge — July 2026 Solver Database Exploit·3LAB Token (Smartliquid AI)·4AscendEX Exchange·4Brandon Michael Tardibone·4RaveDAO (RAVE Token)·4LML/USDT staking protocol·4Raidparty·4Friend Tech·47zarc·4Crypto Beast (ALT Token Influencer)·4LAB Token·4Axiom Exchange·4Meerkat Finance·4LAB Token (AI Terminal / Vova Sadkov)·4CrediX Finance·4Merlin DEX·4DogWifTools·4Ashcrypto — ROYA Token Pump-and-Dump·4Crypto Beast·4Safe Dollar·4BlockDAG Network·4Uranium Finance·4Undisclosed KOL Promo Network (ZachXBT Exposé, September 2025)·5Grand Base·5WallStreetBets·5JELLY·5GANA Payment·5Nobitex·50x327a81d0d128db8886d265be73c9fdda97194f30·5LuBian·5Sportsbet·6Rivus DAO·8Wonderland Finance·8Axiom DEX Insider Trading (Broox Bauer)·8C&M Software·8ValueDefi·8UwuLend·8James Wynn·8pump.fun·8Trove Markets·8SUNRAY·FINANCE·8Humanity Protocol June 2026 Exploit·8SIREN Token·9MemeCore (M Token)·9Nobitex June 2025 Hack (Predatory Sparrow)·10Sheldon Xia (BitMart Founder)·10UwU Lend·10xToken·10AlphaPo·10Munchables·10Phemex·10PolyNetwork·10PrismaLST·10FixedFloat·10Abracadabra Spell·10US Government Crypto Wallet·10BearnFi·12Rain Protocol (RAIN Token)·12Meteora / Benjamin Chow·12Abracadabra Money MIM Depeg June 2026·12ZachXBT Crypto Influencer Paid-Promotion Leak (200+ Influencers, September 2025)·12Gym Network·12Popsicle Finance·12LastPass·12Masa·12Tapioca DAO·12Harmony Protocol (2026 ONE Token Exploit and L1 Shutdown)·12Dough Finance·12LND·12Soulja Boy (DeAndre Cortez Way)·12MyAlgo·12Undisclosed KOL Paid-Promotion Network (2025)·12Vee Finance·12ElementalDeFi·12pNetwork·12Cypher Protocol·12Indexed Finance·12Uwerx·12Humanity Protocol H Token Hack·13Terence Kwok — Humanity Protocol Staged Hack·14Ionic Money·14Shawn Liu·14Garden Finance·14Garden·14Rain Protocol·14AutoShark Finance·14ARA Finance·14Bybit v. DPRK Lazarus Group -- $1.5B Hack Civil Lawsuit (August 2026)·14Arthur Hayes — Maelstrom CIO Exit Liquidity Allegations·14Austin Fine (@xmrfine)·18MoonHacker·18JUDAO·18Skyward Finance·18Cyrus Finance·18Humanity Protocol June 2026 Hack·18Kroll·18Cetus CLMM·18Noones·18Alpha Finance Lab·18HyPC·18OKX DEX·18Convergence·18OcelotDex·18BTC24H·18CheeseBank·18Ionic Protocol·18LaunchZone·18MonoSwap·18WAYGU CASH·18Broox Bauer·18Humanity Protocol - Staged Hack Allegation (ZachXBT)·18Axiom DEX·18Ashcrypto·18Stabble·18Wasabi Protocol·18Eesee (Abandoned NFT Marketplace by LAB Founders)·18RIVER Token·18TMX TRIBE·18Siren (SIREN)·18BitcoinDepot·18ForceBridge·201EU2pMence1UfifCco2UHJCdoqorAtpT7·20FEGex·22EdgeX / EDGE Token·22XT Exchange·22ElasticSwap·22DeltaPrime·22Ratio Finance·22Locus Finance·22Wise Lending V1·22Axiom DEX Employee Insider Trading·22FutureSwap·22Shido·22Earning.Farm·22Eclipse·22RocketSwap Base·22Pike V1·22Renzo·22MYX Finance·22Geoffrey Woo / AntiHunter (ANTIHUNTER) Memecoin·22Arcadia Finance v1·22Molt EVM·22SurgeBNB·22Warp Protocol·22ApeRocket·22Palmswap·22Corepound·22MSCST (MSC Protocol)·22MemeCore·22WXETA·22Onyx Protocol·22Abracadabra Finance (MIM Stablecoin)·22Local Traders·22Minterest·22Magic Internet Money·22Punk Protocol·22Metawin·23BigONE Exchange·24ALEX Lab·24Giddy·25Vitalik Buterin·25Shuffle (shuffle.com)·26PAAL AI·28SharedStake·28Aperture LM·28Orion Pools·28TBTFW (Beverly Hills Luxury Car Dealer — Crypto Laundering Vector)·28Kinto Bridge·28ALEX Lab·28Truflation·28Token 2049·28GeniusAI·28JRNY Crypto·28Growth DeFi·28KyberSwap Classic·28Moola Market·28OlaXBT·28UPCX·28CrossCurve·28BtcTurk·28Spartans Bet·28Portal·28SBI Crypto·28Level Finance·28Kronos Research·28US Permissionless Dollar·28GriffinAI·28Roe Finance·28BetterBank·28Rubic·28MEXC·28ACT·28Omm·28Crema Finance·28Axiom Trading·28Arcadia V2·28MM Finance Cronos·28Revest Finance·28BitBNS·28Trust Wallet Chrome Extension Hack (December 2025)·28Trinity Wallet·28Seedify·28Singularity Finance·28Thorchain DEX·28AzukiDAO·28Netmind AI·28Platypus Finance·28Slope Wallet·28Cardex·28KuCoin·28Orange Finance·28ANDY·28Abracadabra Money·28Compound V2·28Belt Finance·28edgeX Exchange·28Arthur Hayes (Maelstrom)·30OKX NFT Aggregator·30Axiom Exchange — Employee Insider Trading Scandal·30Revolut Data Breach (Fake Government Request, September 2026)·30Hegic(old contract)·30Akropolis·30Across Protocol Solana Bridge Exploit (July 2026)·30KAITO·30Nexera·32Serenity Shield·32Arena SocialFi·32PiggyBank Protocol·32Axiom·32Geoffrey Woo·32TeleSwap·32Themis Protocol·32Sentiment·32Eleven Finance·32Tropykus RSK·32LeetSwap·32uniBTC·32zkFinance·32Treasure (TreasureDAO)·32GoonFi·32CoinEx·32Impermax V3·32Axiom (Solana DEX)·32BlueBerry Protocol·32Gate.io·32BingX·32Exactly Protocol·32Berally·32$OATH·32LiFi Finance·32Tender Finance·32Midas Capital·32Zircon Gamma·32Stonk·32Revert Lend·33Neutrl·33Strike·34Andy Ayrey·34Bitget Exchange (Shawn Liu)·34Hyperdrive HL·35CoinStats·35Makina Finance·35Kiln·35Aethir·36Cod3x·36Panoptic V1.1·37Tenderize V2·37Astera.fi·38Ansem / $ANSEM ("Black Bull") creator-coin controversy·38MONA (Monavale / DIGITALAX)·38Volo Vault·38Polymarket — June 2026 Supply Chain Attack·38Dogwifhat (WIF)·38CoinDCX·38PRXVT·38Amun·38Kipseli·38BitoPro·38Astrid Finance·38Thunder Terminal·38Offshore Cryptocurrency Exchanges to Avoid·38MustStopMurad·38WazirX·38four.meme·38Sharwa.Finance·38SIR (Synthetics Implemented Right)·38Polycule·38SubQuery Network·38Sovryn·38Yield Protocol·38Wise Lending V2·38StablR·38Port3 Network·38Rain·38Stake.com·38Save·38Wintermute·38Veil Cash·38GMBL.COMPUTER·38LeadBlock's Morpho Blue Market·38JayPegs Automart·38Bonad·38M2·39Juicebox V3·40Nelly·40SafePal·42CoinEx Exchange Closure (September 2026)·42Tectonic·42DGLD·42Cozy V2·42Raga Finance·42Spectral Labs·42YO Protocol·42Ambient Finance·42Allbridge Core·42Fusion by IPOR·42Lava·42Peapods Finance·42Hacken Token·42Bungee·42DIMO·420G Labs·43Silo V2·44SwissBorg·47Maestro·47Silo Finance·47Ledger Live·50PeopleDAO·52SushiSwap·52Bittensor·52Revolut·52Gondi V3·52Frax Finance·52Bitget·52DMM Bitcoin·52Zabu Finance·52Curve LlamaLend·52LCX·54Trust Wallet·55Transak·55Blast·55Trezor·57Sui·57Gate.io·57Crypto.com·58Ethena·58Eigenlayer·58Ankr·58Monero·58Raydium AMM·62Cointelegraph·62Coinbase·62Circle Internet Financial·62Jupiter Exchange·62Porkbun·62Circle·62Phantom Wallet·63Litecoin·64Hypurr NFTs·66Superteam·72Bybit·72Cardano·72ZachXBT·82
- □Arbitrumorganizationalso inQ2 2026 Bridge Exploit Wave·0Mach-O Man Malware Campaign (Lazarus / Chollima)·0KelpDAO / LayerZero Bridge Exploit (April 2026) — DPRK Lazarus·0Q2 2026 Record Crypto Hack Wave·0Andean Medjedovic (KyberSwap / Indexed Finance Attacker)·0H1 2026 Bridge Hack Cluster — Same-Day $35.6M Attack Wave July 22-23·0Inferno Drainer·0H2 2026 July Bridge Hack Wave — Seven Attacks, $M+ Lost·0July 2026 Bridge Hack Wave — Three Protocols, $35.6M, One Day·02026 Violent Crypto Wrench Attack Wave — H1 Chainalysis Report·0DPRK Lazarus April 2026 $635M Blitz — Drift + Kelp Combined Campaign·0Ill Bloom Vulnerability·0EVM Cross-Chain Wallet-Drain Campaign (June 2026)·0Fake MetaMask Update Phishing Campaign (May 2026)·0Quark Drainer·0North Korea Lazarus Group — H1 2026 Systematic Crypto Theft Campaign·0H1 2026 Crypto Hack Landscape — AI Agent Attack Vector Emerges·0DPRK Crypto Theft H1 2026 (TRM Labs / Blockaid Report)·0Andean Medjedovic·2Robinhood Chain Scam Ecosystem·2Vladhood ($VLAD) Memecoin Scam·2Transit Finance·2Swaprum·2ArbiSwap·2Glori Finance·2RiskOnBlast·2Magnate Finance·2Fake GTA 6 Leak Wallet-Drainer Campaign·2Kokomo Finance·2Garden Finance Cross-Chain Bridge — July 2026 Solver Database Exploit·3Hope Finance·4Bald·4Stream Finance·4Fei Protocol / Rari Capital·6Ostium Protocol — Oracle Signer Key Compromise (July 2026)·8Notional Finance (V1 Legacy Escrow)·8SUNRAY·FINANCE·8Hundred Finance·8Allbridge Core — CCTP Base Chain Exploit (August 2026)·8DEUS Finance·10June 2026 Cross-Chain Bridge Exploit ($127M, Three Protocols)·10Multichain·10Phemex·10Abracadabra Spell·10Penpie·10Radiant V2·10Binance Bridge·10Saddle Finance·10KyberSwap Elastic·10CrossCurve Bridge Hack (February 2026)·10Ploutos Money·12Rain Protocol (RAIN Token)·12CrossCurve (formerly EYWA) Bridge Exploit (Feb 2026)·12Tapioca DAO·12DEUS DAO·12Waygu / Wagyu·12AFX Trade Bridge Exploit (July 2026)·12Supra Oracle — Bonzo Lend Attack Vector·12Rodeo Finance·12The Sandbox SAND — LayerZero Bridge Exploit August 2026·12Garden Finance·14Garden·14Rain Protocol·14BNB Chain Bridge·16Ostium Protocol·16Cascade Protocol·18Dexible V2·18Alpha Finance Lab·18LaunchZone·18Hedgey·18Bonzo Finance·18402bridge·18Visor Finance·18Summer Finance (Summer.fi) — Lazy Summer Protocol Flash Loan Exploit and Shutdown·18Kelp·18AFX Trade·18Jimbos Protocol·18KelpDAO Bridge Exploit (April 2026)·18TMX TRIBE·18Lodestar Finance·20B-Squared Network·20Triple-A Treasury Hack (July 2026)·22DeltaPrime·22ElasticSwap·22FutureSwap·22MYX Finance·22Pike V1·22Summer.fi (Lazy Summer Protocol)·22Locus Finance·22RocketSwap Base·22Lodestar V0·22Wise Lending V1·22Shido·22Maya Protocol — August 2026 Six-Bug Exploit·22Lien Finance·22Seneca·22Bonzo Lend·22Onyx V2·22Abracadabra Finance (MIM Stablecoin)·22Onyx Protocol·22Harvest Finance·22Magic Internet Money·22B² Network·23Aster (ASTER)·23Syndicate Labs (SYND)·23Hyperbridge (Polkadot-Ethereum Bridge) — April 2026 Exploit·24Summer.fi·25Seneca Protocol·25Aurory·26BullX·27Shibarium·28Boop (boop.fun)·28Bunni Protocol·28Pike Finance·28Aperture LM·28Kinto Bridge·28dForce Lending·28EraLend·28KyberSwap Classic·28Florence Finance·28WOOFi Swap·28GMX V1 Perps·28CrossCurve·28Level Finance·28BtcTurk·28Gamma Strategies·28GemPad·28CrossCurve Bridge·28Everclear Protocol (formerly Connext)·28Seedify·28Matcha Meta·28Beanstalk Farms·28Zero Network (Zerion L2)·28DFX V2·28ParaSpace Lending V1·28Bridgers Cross-Chain Swap·28Orange Finance·28Abracadabra Money·28Across Protocol Solana Bridge Exploit (July 2026)·30Dolomite·32Eleven Finance·32Sentiment·32Themis Protocol·32numa.·32Treasure (TreasureDAO)·32uniBTC·32Hyperbridge·32BingX·32Impermax V3·32Rhea Finance·32Ostium·32The Sandbox (SAND)·32Unizen·32LiFi Finance·32Tender Finance·32Hedgey Finance·32dForce Network·32Gamma Strategies·33Revert Lend·33Treasure DAO·34Steadefi·35Cod3x·36Stake DAO·36Tenderize V2·37Hemi (Genesis Drop / MerkleBox Exploit)·38StakeDAO — vsdCRV Deployer Key Exploit (May 2026)·38Sharwa.Finance·38Moby Trade·38LiFi Protocol·38Triple-A·38SolvBTC·38Port3 Network·38Hyperbridge (Polkadot-Ethereum Bridge)·38WOO X·38Wise Lending V2·38Yield Protocol·38GMBL.COMPUTER·38Superfluid·38Railgun·40Balancer·42YO Protocol·42Fusion by IPOR·42Granary Finance (GRAIN)·42Peapods Finance·42Lava·42Across Protocol·42Silo V2·44Fluid (Instadapp)·44Maestro·47Silo Finance·47Pendle·50Arbitrum·52THORChain·52SushiSwap·52Curve LlamaLend·52GHO·53SushiSwap RouteProcessor Exploit·54Celestia·54Loopring·54Trust Wallet·55Blast·55KyberSwap·55LayerZero Protocol·55Allo Protocol·57Spicenet·58Socket Protocol·58Cega·58Optimism·60Ondo US Dollar Yield (USDY)·60Starknet·62Hyperliquid·62Curve DEX·62Convex Finance·62Matcha·62Wormhole·62Spark Protocol·62LayerZero Executor Wallet Incident (July 2026)·62Safe{Wallet}·68Spiko EU T-Bills Money Market Fund·68USD Coin (USDC)·71Aave·74BlackRock USD Institutional Digital Liquidity Fund (BUIDL)·82Janus Henderson Anemoy Treasury Fund (JTRSY)·82
- △OKX DEXexchange
- □Concentricorganization
Timeline(7 events)
13 December 2023
OKX DEX exploit occurs, resulting in approximately $2.7 million in losses. Wallet later connected to the Concentric attacker is involved in this incident.
22 January 2024
Concentric Finance exploited via social engineering attack on a team member's deployer wallet. Attacker upgrades vault contracts, mints LP tokens via adminMint(), drains vaults of approximately 715 ETH. A second phase sweeps 65.4 ETH from user approvals. Total losses approximately 780 ETH (~$1.85 million).
22 January 2024
Cyvers detects suspicious activity. CertiK publishes Skynet alert identifying the exploiter wallet as linked to the OKX exploit. Initial loss estimates cited as approximately $1.6 million, later revised upward.
22 January 2024
Concentric team confirms breach via official channels, urges all users to revoke approvals on vault contracts, halts the protocol entirely.
22 January 2024
CONE token price drops approximately 57% following public announcement of the exploit.
22 January 2024
CertiK publishes full incident analysis linking the exploiter to OKX, UnoRe, and LunaFi incidents, indicating a pattern of coordinated attacks.
22 January 2024
Protocol announced as halted indefinitely, with 8 ETH and residual USDC remaining in the treasury.
Decision Log
- hash: 3WVdEFFcXS8jfkkrwH8PcMNB2kkFihWAmT5DFKhmw3tc
This investigation is cryptographically anchored to the Solana blockchain (1 event). 9 of 14 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:35 AM
last updated: 8/30/2026, 4:24:07 PM
6 viewsavoid.net — verified advice for a post-truth world