EasyFi Network
Summary
EasyFi Network was a Polygon-based DeFi lending protocol that suffered one of the largest private-key compromise incidents in early DeFi history. On April 19, 2021, an attacker remotely compromised founder Ankitt Gaur's machine and extracted MetaMask admin keys, stealing approximately $6 million in stablecoins and 2.98 million EASY tokens (face value ~$75–80 million, liquid value ~$6 million). Following a hard fork to a new EZ token and a partial compensation plan, the protocol never recovered meaningful adoption; the EZ token as of 2025 trades at near-zero value.
Connected Entities
1 entities · 10 linked investigationsTimeline(7 events)
2021-04-06
EASY token reaches all-time high of approximately $44.39 USD, days before the hack.
CoinMarketCap2021-04-19
At approximately 10:40 AM UTC, an attacker compromises founder Ankitt Gaur's computer, extracts MetaMask mnemonic keys, and drains $6 million in stablecoins and 2.98 million EASY tokens from EasyFi protocol contracts on Polygon and Ethereum.
EasyFi Official Medium / CoinDesk2021-04-20
EasyFi CEO Ankitt Gaur publicly discloses the hack, suspends deposits and withdrawals, and announces a $1 million bounty for the return of funds. Attacker address identified as 0x83a2EB63B6Cc296529468Afa85DbDe4A469d8B37.
CoinDesk2021-04-20
EasyFi executes token snapshots on Ethereum (block 12276665), Polygon (block 13497393), and BSC (block 6729137) to establish legitimate holder balances for the forthcoming hard fork.
EasyFi Official Medium2021-04-23
EasyFi publishes its Reinstatement Plan, announcing the hard fork to EASY V2 (ticker: EZ) at a 1:1 swap ratio, with the intent of rendering the attacker's stolen EASY tokens worthless.
EasyFi Network Medium2021-05-01
EasyFi announces its compensation plan: 25% of depositor losses to be paid immediately in stablecoins, 75% in IOU tokens vesting over six months redeemable for EZ v2 at a 25% discount.
CoinTelegraph2025-01-01
EZ token trading near $0.001 USD with near-zero volume and market capitalization under $10,000. Protocol shows no measurable TVL. Attacker remains unidentified and no law enforcement action has been publicly reported.
CoinMarketCap / EtherscanDecision Log
- hash: E79J2WAPW6xmo4Lgiac6uFV3XEL5QTYBvauLDV2CVXqf
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-6
generated: 5/31/2026, 6:59:20 AM
last updated: 5/31/2026, 6:59:23 AM
avoid.net — verified advice for a post-truth world