Skip to main content
AVOID.NET
Sign in

Hedgey

avoid.net/hedgey→18/100·100% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·5SdooE…L5YK

Summary

Hedgey is a token vesting, lockup, and claims protocol that served over 100 on-chain projects before suffering a critical smart contract exploit on April 19, 2024, resulting in the theft of approximately $44.7 million across Ethereum and Arbitrum. The vulnerability — a missing input validation check in the ClaimCampaigns.sol contract — was present despite two prior audits by ConsenSys Diligence. No confirmed recovery of stolen funds has been reported; Hedgey was subsequently acquired by Anchorage Digital in late 2025.

Connected Entities

10 entities · 60 linked investigations
Organizations
□Bybit72□Polygon54□Ethereum□Fantom (Sonic Labs)□Arbitrum□Balancer□Unizen□Hedgey
Protocols
⌂FixedFloat⌂Hedgey Finance
Relationships
  • Hedgey Finance→mentioned with→Unizen(60%)
  • Hedgey Finance→mentioned with→Ethereum(80%)
  • Hedgey Finance→mentioned with→Hedgey(80%)
  • Hedgey Finance→mentioned with→Arbitrum(80%)
  • Hedgey Finance→mentioned with→Balancer(60%)
  • Hedgey Finance→mentioned with→Bybit(65%)
  • Hedgey Finance→mentioned with→FixedFloat(65%)
  • Balancer→mentioned with→Arbitrum(60%)
  • Balancer→mentioned with→Polygon(60%)
  • Balancer→mentioned with→Ethereum(70%)
  • + 18 more
Also appears in
Thorchain DEX·28Allo Protocol·57AnubisDAO·2SubQuery Network·38BNB Chain Bridge·16LiFi Finance·32TraderTraitor / UNC4899·0Triple-A Treasury Hack (July 2026)·22SushiSwap RouteProcessor Exploit·54Robinhood Crypto·54+ 50 more
Have evidence about Hedgey?

Timeline(6 events)

June 2023

ConsenSys Diligence completes second audit of Hedgey contracts, including the re-audit commissioned for Arbitrum DAO onboarding; vulnerable ClaimCampaigns.sol flaw goes undetected.

19 April 2024

Exploit begins at ~07:06 UTC. Attacker uses $1.3M Balancer flash loan to abuse createLockedCampaign input validation gap in ClaimCampaigns.sol. $2.1M drained on Ethereum; $42.6M in BONUS tokens drained on Arbitrum. Secondary copycat attacker linked to Unizen exploit also strikes on Ethereum. Total loss: ~$44.7M.

19 April 2024

Hedgey team disables new claims creation, engages SEAL 911, contacts Gate.io and Bybit to freeze attacker-linked deposits, and sends on-chain message to attacker requesting return of funds.

19 April 2024

CUBE3.AI publishes postmortem confirming real-time detection of the malicious transaction; CertiK and Halborn publish independent on-chain analyses identifying attacker addresses and laundering behavior.

20 April 2024

Official post-mortem published by Hedgey team via Medium, confirming 23 of 60 active campaigns were impacted, vesting/lockup contracts were unaffected, and law enforcement coordination was underway.

16 December 2025

Anchorage Digital announces acquisition of Hedgey, integrating the token vesting tooling into a full-stack institutional token lifecycle management product. Deal terms undisclosed.

Provenance & Audit Trail
Anchored on SolanaVerify on-chain11 Wayback Archivessrc:defillama

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event). 11 of 15 cited source URLs have an Internet Archive snapshot.

full audit log →version history →

model: claude-sonnet-4-6

generated: 5/4/2026, 2:54:33 AM

last updated: 8/30/2026, 4:24:06 PM

3 views

avoid.net — verified advice for a post-truth world