Earning.Farm
Last changed 2026-10-10 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 22 → 48. Problems weighed by who is responsible: concerns that are not fraud −9.6, incidents the subject suffered −6.4, problems around the subject, caused by others −0.8. Version history →
Why this score
| Every page starts at | 65 |
| Concerns that are not fraud | -9.6 |
| Incidents it suffered (e.g. hacks) | -6.4 |
| Problems around it, caused by others | -0.8 |
| Sum | 48 |
Score: 48/100 (kept between 0 and 100)
How scoring works →Summary
Earning.Farm is an Ethereum-based DeFi yield aggregator that deployed leveraged yield strategies on top of Aave. The protocol suffered two distinct security incidents — a flash loan attack in October 2022 that drained approximately 750 ETH (~$950,000), followed by a reentrancy exploit in August 2023 that resulted in an additional ~$528,000 loss. The protocol has been flagged by ZachXBT and has shown no evidence of recovery, compensation to users, or resumed operations following either incident.
Connected Entities
3 entities · 60 linked investigations- ZachXBT→mentioned with→Ethereum(70%)
- Earning.Farm→mentioned with→Ethereum(75%)
- Earning.Farm→mentioned with→ZachXBT(70%)
Timeline(3 events)
14 October 2022
Earning.Farm's EFLeverVault contract is targeted by two successive flash loan attacks. A total of approximately 750 ETH (~$950,000) is drained: 480 ETH captured by an MEV bot front-running the attacker, and 268 ETH extracted by the attacker directly. Supremacy Inc. publicly discloses the incident.
9 August 2023
A reentrancy attacker exploits a logic flaw in EFVault's withdraw function across nine transactions, taking a flash loan of 80,000 ETH and draining 291.64 ETH (~$528,000 at the time). PeckShield alerts the community. Stolen funds are moved to two consolidation wallets.
10 August 2023
Attacker transfers stolen funds to consolidation addresses. Earning.Farm team sends on-chain message to the attacker offering a 10% bounty (~$52,800) in exchange for return of remaining funds and cessation of third-party investigations. No public response from attacker is recorded.
Decision Log
- slot 455360861 · hash JP5Jup4iGkMfDFAQ7G8AF99sJpdrRCjmhx2kTQGcMZd
- slot 423150258 · hash 3A6Rd25GmXUoP71n4Yu4wah47RicZDXrmztPBpPqrHgC
This investigation is cryptographically anchored to the Solana blockchain (2 decisions). 7 of 8 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:39 AM
last updated: 10/10/2026, 6:41:40 PM
5 viewsavoid.net — verified advice for a post-truth world