Skip to main content
AVOID.NET

Earning.Farm

avoid.net/earningfarm22/100·78% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·5FEPbU…g1gd

Summary

Earning.Farm is an Ethereum-based DeFi yield aggregator that deployed leveraged yield strategies on top of Aave. The protocol suffered two distinct security incidents — a flash loan attack in October 2022 that drained approximately 750 ETH (~$950,000), followed by a reentrancy exploit in August 2023 that resulted in an additional ~$528,000 loss. The protocol has been flagged by ZachXBT and has shown no evidence of recovery, compensation to users, or resumed operations following either incident.

Connected Entities

3 entities · 60 linked investigations
Organizations
Relationships
  • Earning.Farmmentioned withEthereum(75%)
  • Earning.Farmmentioned withZachXBT(70%)
  • ZachXBTmentioned withEthereum(70%)
Have evidence about Earning.Farm?

Timeline(3 events)

14 October 2022

Earning.Farm's EFLeverVault contract is targeted by two successive flash loan attacks. A total of approximately 750 ETH (~$950,000) is drained: 480 ETH captured by an MEV bot front-running the attacker, and 268 ETH extracted by the attacker directly. Supremacy Inc. publicly discloses the incident.

9 August 2023

A reentrancy attacker exploits a logic flaw in EFVault's withdraw function across nine transactions, taking a flash loan of 80,000 ETH and draining 291.64 ETH (~$528,000 at the time). PeckShield alerts the community. Stolen funds are moved to two consolidation wallets.

10 August 2023

Attacker transfers stolen funds to consolidation addresses. Earning.Farm team sends on-chain message to the attacker offering a 10% bounty (~$52,800) in exchange for return of remaining funds and cessation of third-party investigations. No public response from attacker is recorded.

Provenance & Audit Trail

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event). 7 of 8 cited source URLs have an Internet Archive snapshot.

model: claude-sonnet-4-6

generated: 5/4/2026, 2:54:39 AM

last updated: 8/30/2026, 12:41:17 PM

5 views

avoid.net — verified advice for a post-truth world