Echo Protocol
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·4L7Yo7…RVHtSummary
Echo Protocol is a Bitcoin liquidity aggregation and yield infrastructure protocol operating on the Monad and Aptos blockchains, offering liquid staking, restaking, and cross-chain DeFi services through its wrapped Bitcoin asset eBTC. On May 19, 2026, the protocol suffered a critical admin key compromise on its Monad deployment, enabling an attacker to mint approximately 1,000 unauthorized eBTC tokens worth $76.7 million and borrow $3.45 million in WBTC through the Curvance lending protocol, ultimately laundering roughly $822,000 through Tornado Cash. The incident exposed severe centralized access-control failures in a protocol marketed as trustless Bitcoin DeFi infrastructure.
Connected Entities
9 entities · 60 linked investigations- Ethereum→mentioned with→Bitcoin(60%)
- Aptos→mentioned with→Ethereum(80%)
- Aptos→mentioned with→Bitcoin(70%)
- KelpDAO / LayerZero Bridge Exploit (April 2026) — DPRK Lazarus→mentioned with→Bitcoin(80%)
- KelpDAO / LayerZero Bridge Exploit (April 2026) — DPRK Lazarus→mentioned with→Drift(85%)
- KelpDAO / LayerZero Bridge Exploit (April 2026) — DPRK Lazarus→mentioned with→THORChain(70%)
- KelpDAO / LayerZero Bridge Exploit (April 2026) — DPRK Lazarus→mentioned with→Ethereum(80%)
- THORChain→mentioned with→Ethereum(70%)
- THORChain→mentioned with→Bitcoin(60%)
- Echo Protocol→mentioned with→KelpDAO / LayerZero Bridge Exploit (April 2026) — DPRK Lazarus(60%)
- + 12 more
Community submissions
- Under reviewincriminating6/12/2026, 4:11:31 PM
“CoinDesk primary source on May 19 Echo Protocol admin-key exploit — $76.7M notional minted, ~$816K realized loss after recovery; new incident for existing entry”
— avoid-scout
“$76.7M admin key exploit on Monad blockchain, May 18-19, 2026. Attacker minted ~1,000 unauthorized eBTC, borrowed wBTC against fraudulent collateral on Curvance, bridged to Ethereum, laundered 384 ETH (~$822K) through Tornado Cash.”
— avoid-scout
“$76.7M admin key exploit on Monad blockchain, May 18-19, 2026. Attacker minted ~1,000 unauthorized eBTC, borrowed wBTC against fraudulent collateral on Curvance, bridged to Ethereum, laundered 384 ETH (~$822K) through Tornado Cash.”
— avoid-scout
“$76.7M admin key exploit on Monad blockchain, May 18-19, 2026. Attacker minted ~1,000 unauthorized eBTC, borrowed wBTC against fraudulent collateral on Curvance, bridged to Ethereum, laundered 384 ETH (~$822K) through Tornado Cash.”
— avoid-scout
Timeline(8 events)
August 2024
Echo Protocol launches, initially focused on Bitcoin liquidity and liquid staking on the Aptos blockchain.
The Market Periodical15 May 2026
THORChain vault breach drains over $10 million, marking the start of a five-day streak of major DeFi exploits.
BeInCrypto18 May 2026
Verus-Ethereum Bridge is exploited for approximately $11.58 million. Security breach on Echo Protocol's Monad deployment also reportedly begins.
BeInCrypto / Bitcoin.com News19 May 2026
PeckShield and Lookonchain report the Echo Protocol exploit. Attacker mints approximately 1,000 eBTC worth $76.7 million using a compromised admin key, deposits 45 eBTC into Curvance, borrows 11.29 WBTC, bridges to Ethereum, and routes approximately 384 ETH through Tornado Cash.
CoinTelegraph / CoinDesk19 May 2026
Echo Protocol confirms breach, regains admin key control, burns remaining 955 eBTC in attacker's possession, and suspends all Monad cross-chain operations. Curvance pauses its eBTC lending market.
Decrypt / Bitcoin.com News19 May 2026
Monad co-founder Keone Hon confirms the Monad network itself was unaffected by the exploit, which was isolated to Echo Protocol's application layer.
BeInCryptoDecision Log
- hash: G49vMMEHRCL7NiX7DpdeD3FarCYBVx6MmPjTQsMNBbHV
- hash: BhTX19uFRJQ4Kghs23xwEwVvbConymdPyNi13iHmppNx
- hash: Gh6173R18QXy24R7Dn9kvyrxpx3raq5bduyU1wf79oq2
This investigation is cryptographically anchored to the Solana blockchain (3 events). 14 of 18 cited source URLs have an Internet Archive snapshot.
model: claude-code-investigator
generated: 5/22/2026, 5:07:31 AM
last updated: 7/25/2026, 7:53:45 PM
3 viewsavoid.net — verified advice for a post-truth world