Infini
Last changed 2026-10-28 · Fact-check review — Fact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the trust score did not change. Version history →
Why this score
| Every page starts at | 65 |
| Incidents it suffered (e.g. hacks) | -12.8 |
| Problems around it, caused by others | -1.6 |
| Long-running | +2 |
| Sum | 53 |
Score: 53/100 (kept between 0 and 100)
How scoring works →Page reliability: Fact-checked 2026-10-28 · 3 of 6 claims confirmed · 3 need better sources
anchored·3QT6VY…jJE8Summary
Infini (stylized 0xInfini, infini.money) is a Hong Kong-based stablecoin neobank offering yield-bearing accounts, payment cards and enterprise treasury tools built on DeFi infrastructure. In February 2025 a former contract developer who had covertly retained administrative privileges over Infini's smart contracts drained approximately $49.5 million in USDC from the Morpho MEVCapital USDC Vault, converted it to ETH and later laundered much of it through Tornado Cash. Founder Christian Li accepted responsibility, pledged personal coverage of losses and offered a 20% bounty; no funds had been recovered as of May 2026, while the company continued operating and obtained a Canadian FINTRAC MSB registration in May 2026.
Connected Entities
4 entities · 60 linked investigations- Infini Protocol→mentioned with→Infini(70%)
- Uniswap→mentioned with→Ethereum(80%)
- Infini→mentioned with→Ethereum(60%)
- Infini→mentioned with→Uniswap(65%)
Timeline(10 events)
November 2024
The former developer allegedly deploys the malicious contract approximately 114 days before the attack, retaining privileged admin role 0x8e0b over Infini's vault contracts after completing contracted work.
Rekt NewsFebruary 2025
Attacker funds the exploit wallet with 1 ETH from Tornado Cash and drains approximately $49.5 million in USDC from the Morpho MEVCapital USDC Vault in two transactions; the USDC is swapped to DAI and converted to about 17,696 ETH, sent to 0xfcc8ad911976d752890f2140d9f4edd2c64a6e49. CertiK flags the exploit at 3:18 am UTC on February 24; other reporting dates the first transaction to late on February 23. Cyvers, PeckShield and CertiK report the exploit, and Infini acknowledges it about 8 hours after initial detection.
CertiKFebruary 2025
Founder Christian Li acknowledges the breach on X, accepts personal responsibility and pledges to cover losses; Infini offers the attacker a 20% bounty (about $9.9M) and legal immunity for returning 80% of the funds within 48 hours.
CoinDeskFebruary 2025
The 48-hour bounty deadline elapses; stolen funds remain in the attacker's wallet and no contact from the attacker is reported.
March 2025
Christian Li publicly reaffirms the 20% bounty offer and legal immunity; no funds are returned and no response from the attacker is reported.
crypto.newsJuly 2025
Exploiter's wallet deposits 5,000 ETH into Tornado Cash and sells 1,770 ETH for approximately $5.88 million at $3,322/ETH, flagged by PeckShield and CertiK (one account); another account describes the first identified laundering tranche as 3,000 ETH moved through Tornado Cash on July 17.
August 2025
Exploiter sells a further 1,771 ETH at approximately $4,202/ETH near a local cycle high.
August 2025
Infini issues a final ultimatum (dated August 11), demanding return of the full $49.5 million by August 13, 2025 at 20:00 GMT+8; the deadline passes without compliance.
February 2026
After more than 200 days of inactivity, the exploiter's wallet resurfaces, buying 6,316 ETH at an average of $2,109 (about $13.32M) and moving the balance into Tornado Cash, per PeckShield and CertiK monitoring. At least 15,470 ETH (about $32.7M) has now been routed through Tornado Cash; no funds recovered.
The Coin RepublicMay 2026
Infini secures an MSB registration with Canada's FINTRAC covering foreign exchange, money transfer and remittance, and virtual currency services.
GlobeNewswireDecision Log
- slot 462280084 · hash 2PG3jYDw84gbLQb48mwoySRwapK7k3MvbVUzpjSCH6zC
- slot 462280080 · hash 7dvxzYZnNRRzHLr3CmYrFEaroBqyKnKLS2HbjLfjhfFg
- slot 455369526 · hash 5Lwxxe1Xy1xEUWBrATdyPhMje3LzabyeQo4jcz5s3Hj1
- slot 420910774 · hash 7n6kobAbigzhVeY3G5yukfvzNacWA5fUp4uKV9Se2BTz
This investigation is cryptographically anchored to the Solana blockchain (4 decisions). 26 of 26 cited source URLs have an Internet Archive snapshot.
model: claude-code-merge-writer
generated: 5/4/2026, 2:54:25 AM
last updated: 10/28/2026, 12:51:26 AM
5 viewsavoid.net — verified advice for a post-truth world