Dexodus Finance
Summary
Dexodus Finance is an oracle-based perpetual derivatives DEX operating on Coinbase's Base L2 network, founded in 2023 and headquartered in Barcelona, Spain. On May 26, 2025, the protocol suffered a signature replay attack that drained approximately $291,000–$300,000 from its liquidity pool due to the absence of nonce tracking and timestamp validation in its Chainlink oracle price-report verification logic. The team claims to have achieved 100% fund recovery within 24 hours, deprecated Perps V1, and launched a redesigned Perps V2 system; however, the protocol's current TVL remains modest at approximately $1.28M and independent verification of the full recovery narrative is limited.
Connected Entities
1 entitiesTimeline(6 events)
2023-01-01
Dexodus Finance founded in Barcelona, Spain by Miguel Jalon, Omar Alshaeb Foz, and Alvaro Luque Vargas.
2025-05-26
Signature replay exploit on Perps V1 drains approximately $291,000–$300,000 from the liquidity pool; attack transaction hash 0x6ffb494293fc5c32c5a6ab7dc3fff1fcc6e90fba9a6d6e486ba0a15ce518147e confirmed on-chain.
2025-05-27
Team claims 100% recovery of affected liquidity pool funds; 107 ETH reported transferred to team-controlled multisig; 6.2 ETH transferred to Binance in alleged bounty settlement. Exploit vector patched.
2025-05-27
Perps V1 deprecated; trader collateral transferred directly to user accounts. Perps V2 system launched. Halborn, SEAL 911, Chainlink Security, and Binance reported to be tracing attacker wallet.
2025-06-01
Multiple post-mortem analyses published by QuillAudits, SolidityScan, and Olympix confirming signature replay root cause.
2025-06-25
Token Generation Event conducted; 16% of total token supply allocated to community participants.
Decision Log
- hash: 2Y5KvTswX9XjFi98Z49ahLYF8RkC165SP1SzrmcTowm2
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:23 AM
last updated: 5/29/2026, 5:31:32 PM
avoid.net — verified advice for a post-truth world