Fortress Protocol
Last changed 2026-10-10 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 12 → 42. Problems weighed by who is responsible: incidents the subject suffered −20, concerns that are not fraud −9.2, problems around the subject, caused by others −1.5; the penalty for incidents it suffered is capped at 20. Version history →
Why this score
| Every page starts at | 65 |
| Concerns that are not fraud | -9.2 |
| Incidents it suffered (e.g. hacks) | -20 |
| Problems around it, caused by others | -1.5 |
| Sum | 34 |
- The penalty for incidents it suffered is capped at 20 points.
Score: 42/100 (kept between 0 and 100)
How scoring works →Summary
Fortress Protocol was a BSC-based lending and borrowing protocol operated as the lending arm of JetFuel Finance. On May 9, 2022, an attacker exploited simultaneous vulnerabilities in the protocol's governance system and Umbrella Network price oracle, draining approximately $2.98 million in user funds. Stolen assets were laundered through Tornado Cash and were never recovered; the protocol subsequently removed on-chain governance and has remained largely inactive.
Connected Entities
4 entities · 60 linked investigations- Fortress Loans→mentioned with→Ethereum(80%)
- Fortress Loans→mentioned with→Binance(80%)
- Fortress Loans→mentioned with→Fortress Protocol(80%)
- Binance→mentioned with→Ethereum(65%)
- Fortress Protocol→mentioned with→Fortress Loans(80%)
- Fortress Protocol→mentioned with→Ethereum(70%)
- Fortress Protocol→mentioned with→Binance(70%)
Timeline(9 events)
21 April 2022
FTS governance token issued; total supply set at 10,000,000 tokens.
SlowMist Hack Analysis29 April 2022
Attacker obtained 20 ETH via Tornado Cash and bridged 12.4 ETH to BSC using cBridge, beginning pre-attack preparations approximately 19 days before execution.
SlowMist Hack Analysis4 May 2022
Attacker swapped approximately 11.4 ETH for ~400,000 FTS tokens (4% of total supply) and submitted malicious governance proposal FIP-11, which proposed raising the FTS collateral factor from 0% to 70%.
CertiK — Fortress Loans Incident Analysis7 May 2022
FIP-11 three-day voting period concluded with attacker's votes as the only recorded votes; proposal passed.
SlowMist Hack Analysis9 May 2022
FIP-11 executed after 2-day implementation delay. Attacker called Umbrella Network's unprotected submit() oracle function to set FTS price to a near-trillion-dollar value, then used ~100 FTS as collateral to drain all protocol liquidity. Approximately $2.98 million stolen across BNB, ETH, stablecoins, and other tokens.
Rekt News — Fortress Protocol9 May 2022
Stolen assets bridged to Ethereum via Anyswap and cBridge; 1,048.1 ETH and 400,000 DAI deposited into Tornado Cash. FTS token price fell over 45%.
The Record — DeFi protocol Fortress announces $3 million hack9 May 2022
JetFuel Finance team disabled supply/borrow UI, alerted Binance and Umbrella Network, and issued public disclosure acknowledging the attack.
Fortress Attack Update and Compensation — JetFuel Finance10 May 2022
JetFuel Finance announced compensation plan: $300,000 USDC immediate distribution from Umbrella Network, $200,000 USDC in reserve, and 10,000,000 UMB tokens on one-year vesting.
Fortress Attack Update and Compensation — JetFuel Finance13 May 2022
Protocol restart scheduled following remediation; on-chain governance removal proposal (FIP) scheduled for May 16–17 passage.
Fortress Attack Update and Compensation — JetFuel FinanceDecision Log
- slot 455363311 · hash 2ZmMC4Gb9vFbgYPaeFWnVwJtDNDrUH36uFp4JH47aDf8
- slot 423324569 · hash C7FUcmdY9A5B31L5ZQSfZhauKnH7hNwgkD19DRaQf2LL
This investigation is cryptographically anchored to the Solana blockchain (2 decisions). 11 of 13 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/31/2026, 6:59:31 AM
last updated: 10/10/2026, 6:43:13 PM
5 viewsavoid.net — verified advice for a post-truth world