Skip to main content
Sign in
Fortress Loans1 decision on this page

Audit log

Every state-changing event for Fortress Loans: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

  1. #1publishby system:backfill
    2026-05-28 17:25:09Z
    Score: ?? (no score change)
    anchoranchored
    chain
    mainnet-betaslot 422,765,200
    sig
    3GjVKqSaocfy…HcAVUz3zexplorer ↗
    hash
    GZeupq97vYd2…cc758vhvsha256 → base58
    verifying row…full verify ↗
    canonical bytes (5823 B) ▸
    {"actor":"system:backfill","investigation_id":"c5ebecba-a25f-435c-afcf-b26ea3e8969d","kind":"publish","page_slug":"fortress-loans","published_at":"2026-05-28T17:25:09.253Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Fortress Loans","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://bsc.news/post/fortress-credit-and-lending-project-insight","type":"other","url":""},{"credibility":3,"name":"https://jetfuelfinance.medium.com/how-to-use-the-fortress-protocol-lending-borrowing-and-collecting-fts-rewards-aa6812389b9b","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/fortress-loans","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.certik.com/resources/blog/k6eZOpnK5Kdde7RfHBZgw-fortress-loans-exploit","type":"other","url":""},{"credibility":3,"name":"https://rekt.news/fortress-rekt","type":"other","url":""},{"credibility":3,"name":"https://slowmist.medium.com/slowmist-fortress-protocol-hack-analysis-19af24af723c","type":"other","url":""},{"credibility":3,"name":"https://therecord.media/defi-protocol-fortress-announces-3-million-hack","type":"other","url":""},{"credibility":3,"name":"https://medium.com/coinmonks/examination-of-the-fortress-protocol-hack-e261c96ea450","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/umbrella-network/update-on-umbrella-oracle-exploit-67ac0fe4414b","type":"other","url":""},{"credibility":3,"name":"https://therecord.media/defi-protocol-fortress-announces-3-million-hack","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.certik.com/resources/blog/k6eZOpnK5Kdde7RfHBZgw-fortress-loans-exploit","type":"other","url":""},{"credibility":3,"name":"https://sayfer.io/blog/3-hacks-an-audit-could-not-find/","type":"other","url":""},{"credibility":3,"name":"https://fortress.loans/audit_hash0x.pdf","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://jetfuelfinance.medium.com/fortress-attack-update-and-compensation-e7a66621cfe6","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/fortress-loans","type":"other","url":""},{"credibility":3,"name":"https://cryptopotato.com/fortress-protocol-hacked-for-3-million-drained-of-all-funds/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://coinmarketcap.com/currencies/fortress-lending/","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/fortress-loans","type":"other","url":""},{"credibility":3,"name":"https://coingecko.com/en/coins/fortress","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.certik.com/resources/blog/k6eZOpnK5Kdde7RfHBZgw-fortress-loans-exploit","type":"other","url":""},{"credibility":3,"name":"https://rekt.news/fortress-rekt","type":"other","url":""},{"credibility":3,"name":"https://slowmist.medium.com/slowmist-fortress-protocol-hack-analysis-19af24af723c","type":"other","url":""}]}],"sources_used":[],"summary":"Fortress Loans (fortress.loans) was an algorithmic money market and lending protocol on BNB Chain (Binance Smart Chain), launched in April 2021 by the JetFuel Finance team. On May 8, 2022, the protocol was drained of all funds — approximately $2.98 million — through a combined governance manipulation and oracle price manipulation attack. The protocol has been effectively inactive since, with DefiLlama recording a TVL of approximately $1,168 as of 2024, and the FTS governance token has lost effectively all of its value.","timeline":[{"date":"2021-04-01","event":"Fortress Loans launches on Binance Smart Chain as an algorithmic lending protocol developed by JetFuel Finance.","source":""},{"date":"2021-08-01","event":"Umbrella Network introduces buggy oracle smart contract code that would later be exploited; the code goes unaudited.","source":""},{"date":"2022-04-19","event":"The attacker first interacts with Fortress Loans, deploying an unverified custom contract in preparation for the later exploit.","source":""},{"date":"2022-04-29","event":"Attacker obtains 20 ETH via Tornado Cash on Ethereum mainnet and bridges 12.4 ETH to BNB Chain via cBridge.","source":""},{"date":"2022-05-08","event":"Exploit occurs: attacker purchases ~400,000 FTS tokens (~$8,000–$11 ETH), passes malicious Proposal FIP-11 raising FTS collateral factor to 70%, manipulates Umbrella oracle to inflate FTS price to near $1 trillion, and drains approximately $2.98 million in assets from all fToken markets.","source":""},{"date":"2022-05-08","event":"Fortress Protocol team pauses platform UI and announces hack on social media. FTS token price falls more than 45%. Umbrella Network deploys oracle hotfix.","source":""},{"date":"2022-05-08","event":"Stolen funds (1,048.1 ETH and 400,000 DAI) are bridged to Ethereum via Anyswap/Multichain and deposited into Tornado Cash.","source":""},{"date":"2022-05-14","event":"JetFuel Finance publishes compensation plan via Medium: over $1 million in compensation announced including $300,000 USDC immediate disbursement, $200,000 USDC reserve, and 10,000,000 UMB tokens from Umbrella Network on one-year vesting.","source":""},{"date":"2022-05-14","event":"Protocol restart scheduled; on-chain governance removal planned for May 16–17.","source":""},{"date":"2024-01-01","event":"DefiLlama records Fortress Loans TVL at approximately $1,168 with zero active loans; FTS token market cap approximately $13,900; protocol effectively dormant.","source":""}]},"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision da0cf183-40e2-486c-8b02-9a068329a88e
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine — python -m src.verify_decision <event_id>.