DEUS Finance
Summary
DEUS Finance is a decentralized derivatives and synthetic asset protocol built primarily on Fantom, co-founded by Lafayette Tabor and Mohammad Abrishami. The protocol suffered three separate security exploits between March 2022 and May 2023, resulting in combined losses exceeding $22 million across flash loan oracle attacks and a smart contract implementation flaw, with stolen funds routed through Tornado Cash in the 2022 incidents. Repeated security failures across distinct vulnerability classes raise severe concerns about the protocol's security practices and long-term viability.
Connected Entities
1 entitiesTimeline(6 events)
2022-03-15
First exploit: Flash loan attack manipulates Muon oracle on Fantom via USDC/DEI pool price data; approximately $3 million stolen (200,000 DAI and 1,101.8 ETH). Funds laundered through Tornado Cash.
2022-03-15
Lafayette Tabor deactivates affected contracts and pledges reimbursement via smart contract funded by personal and DAO reserves.
2022-04-28
Second exploit: A second flash loan oracle manipulation attack on Fantom drains approximately $13.4 million. Attacker borrows $143 million in a flash loan, artificially inflates DEI price, borrows additional capital against inflated collateral. Tx hash: 0x39825ff84b44d9c9983b4cff464d4746d1ae5432977b9a65a92ab47edac9c9b5. Funds bridged to Ethereum and laundered via Tornado Cash.
2022-04-28
DEUS token price drops approximately 16.5% within 24 hours. Team states loss falls on protocol, not individual users; pauses DEI lending.
2023-05-05
Third exploit: A burnFrom parameter reversal bug in the DEI stablecoin contract is exploited across Arbitrum (~$5M), BNB Smart Chain (~$1.3M), and Ethereum (~$135K), totaling approximately $6.38–$6.5 million. DEI depegs to approximately $0.20.
2023-05-07
DEUS Finance announces partial white-hat recovery of approximately 5.5 million out of 7 million DEI-equivalent tokens. Recovered funds placed in a 2/3 multisig managed by @lafachief and Yearn Finance contributors. All affected contracts paused and subsequently destroyed.
Decision Log
- hash: 2Syur4EB45dpDWS5oqxxvMbNVjVgMXXeHoxeo5U4CUis
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:49 AM
last updated: 5/20/2026, 10:36:28 PM
avoid.net — verified advice for a post-truth world