Skip to main content
AVOID.NET

Cozy Finance

avoid.net/cozy-finance→39/100·55% conf.
[AI-DRAFTED · AWAITING FACT-CHECK]

Last changed 2026-10-10 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 14 → 39. Problems weighed by who is responsible: incidents the subject suffered −20, concerns that are not fraud −6; legitimacy credit long-running +2; the penalty for incidents it suffered is capped at 20; a recent unresolved incident −12.3. Version history →

Why this score
Every page starts at65
Concerns that are not fraud-6
Incidents it suffered (e.g. hacks)-20
Long-running+2
Recent unresolved incident-12.3
Sum29
  • The penalty for incidents it suffered is capped at 20 points.

Score: 39/100 (kept between 0 and 100)

How scoring works →
anchored·4Svb7v…VrLd
Submit evidence

Summary

Cozy Finance, a DeFi coverage/insurance protocol built on the Cozy V2 stack and deployed on Optimism, has suffered two confirmed exploits within roughly thirteen months: an alleged $427,000 loss in August 2025 tied to a missing caller-identity check in its withdrawal code, and an alleged $170,000 loss on September 7, 2026 whose root cause is disputed across secondary reporting. The recurrence of a fund-draining incident on the same chain, with no public post-mortem or protocol response identified for the second event as of this writing, indicates unresolved security and governance risk independent of which technical account of the second exploit is correct.

Connected Entities

4 entities · 60 linked investigations
Organizations
□Cozy V259□Optimism92
Protocols
⌂Cozy Finance
Wallets
◇unwrap…draw
Relationships
  • unwrap…draw→mentioned with→Cozy Finance(50%)
  • Cozy V2→mentioned with→Optimism(70%)
  • Cozy Finance→mentioned with→Optimism(80%)
  • Cozy Finance→mentioned with→Cozy V2(75%)
  • Cozy V2→mentioned with→Cozy Finance(80%)
Also appears in
CrossCurve·64June 2026 Cross-Chain Bridge Exploit ($127M, Three Protocols)·8LendHub·50BNB Chain Bridge·51EVM Cross-Chain Wallet-Drain Campaign (June 2026)·0Transit Finance·62Coinbase·61Granary Finance (GRAIN)·50Poly Network·50Moonwell Lending·45

Connected Through

3 shared actors · 74 investigations

Distinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.

Have evidence about Cozy Finance?

Timeline(3 events)

29 August 2025

First confirmed exploit: approximately $427,000 allegedly drained via a missing caller-identity check in the completeWithdraw redemption function.

Verichains blog

September 2026

Attack contract for the second exploit allegedly deployed on Optimism, five days ahead of the drain.

bitcoinethereumnews.com

7 September 2026

Second confirmed exploit: approximately $170,000 (163,326 USDC.e) allegedly drained from Cozy Finance's Optimism deployment and bridged out within 13 minutes; root cause disputed between a CSET/CPT protocol-logic account and a UMA Optimistic Oracle manipulation account.

GNCrypto News / bitcoinethereumnews.com
Provenance & Audit Trail
Recorded on Solana ✓Verify on-chain11 Wayback Archives

Decision Log

  • #2rescore+25Recorded on Solana ✓10/10/2026, 6:42:32 PM
    slot 455362186 · hash GHao8pLhSY64GTmNpScXTafePZjqXH1z4eAgkiYrXNj5
  • #1publishRecorded on Solana ✓9/12/2026, 12:00:30 AM
    slot 446288088 · hash 9J1kXA5nq2dVErLTiVk8qWoVMVwTNAxEP6QCbkWLJHdn

This investigation is cryptographically anchored to the Solana blockchain (2 decisions). 11 of 12 cited source URLs have an Internet Archive snapshot.

full audit log →version history →

model: claude-code-investigator

generated: 9/11/2026, 11:19:11 PM

last updated: 10/10/2026, 6:42:32 PM

6 views

avoid.net — verified advice for a post-truth world