Skip to main content
AVOID.NET

Fusion by IPOR

avoid.net/fusion-by-ipor42/100·72% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·2mnjSN…46Jr

Summary

Fusion by IPOR is a modular on-chain vault infrastructure product developed by IPOR Labs AG (Zug, Switzerland), designed to automate DeFi yield strategies across multiple chains without requiring Solidity expertise. On January 6, 2026, a legacy Fusion Optimizer Vault on Arbitrum was exploited for $336,000 USDC via a combination of missing fuse validation in the instantWithdraw method and an EIP-7702 delegation vulnerability on an administrator account. The IPOR DAO committed to fully compensating all affected depositors from treasury reserves, and the incident was flagged by blockchain investigator ZachXBT.

Connected Entities

6 entities · 60 linked investigations
Relationships
  • Yearn Financementioned withEthereum(70%)
  • ZachXBTmentioned withEthereum(70%)
  • Pendlementioned withArbitrum(70%)
  • Pendlementioned withEthereum(80%)
  • Fusion by IPORmentioned withYearn Finance(80%)
  • Fusion by IPORmentioned withArbitrum(80%)
  • Fusion by IPORmentioned withPendle(70%)
  • Fusion by IPORmentioned withZachXBT(70%)
  • Fusion by IPORmentioned withEthereum(70%)
  • Arbitrummentioned withEthereum(80%)
  • + 1 more
Have evidence about Fusion by IPOR?

Timeline(6 events)

14 June 2021

IPOR Labs AG incorporated in Zug, Switzerland by co-founders Darren Camas and Dimitar Dinev.

28 July 2023

Ackee Blockchain completes 59 engineering-day security review of IPOR Protocol core, identifying 39 findings. Review concludes with high code quality rating.

2024

Legacy Fusion Optimizer Vault deployed on Arbitrum (approximately 490 days before the January 2026 exploit), predating stricter fuse validation requirements.

9 May 2025

Governance proposal IIP-35 snapshot taken at Ethereum block 22446433 for IPOR-to-FUSN token migration at 1:1 ratio, marking a strategic rebranding of the protocol.

6 January 2026

Legacy Fusion USDC Optimizer Vault on Arbitrum exploited for $336,000 USDC via missing instantWithdraw validation and EIP-7702 admin delegation flaw. Hexagate and Blockaid alert the IPOR team. Stolen funds (approx. $267K) bridged to Ethereum and deposited into Tornado Cash.

7 January 2026

IPOR DAO publicly confirms full compensation of all affected depositors from DAO treasury. Protocol engages SEAL for forensic recovery. Post-mortem publication committed. Incident widely covered by crypto media.

Provenance & Audit Trail

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (3 events). 19 of 21 cited source URLs have an Internet Archive snapshot.

model: claude-sonnet-4-6

generated: 5/4/2026, 2:54:14 AM

last updated: 8/29/2026, 11:26:10 PM

4 views

avoid.net — verified advice for a post-truth world