INK Finance
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·42rPj4…5C3uSummary
INK Finance is a multichain DeFi governance and treasury management protocol, native token QUILL, with deployments on Polygon, Ethereum, Avalanche, and BNB Chain. On May 11, 2026, an attacker drained approximately $140,180 USDT from its Workspace Treasury Proxy contract on Polygon by exploiting a whitelist authorization flaw amplified with a Balancer V2 flash loan. The exploit was confirmed on-chain via Polygonscan; as of the time of writing the INK Finance team had not released a formal post-mortem or recovery plan.
Connected Entities
1 entities · 10 linked investigationsTimeline(10 events)
October 2022
INK Finance completes $2.5 million funding round, bringing total raised to $4 million across two rounds.
ICOholder — Ink Finance project detailsDecember 2022
INK Finance expands to the Polygon network, enabling lower-cost DAO treasury operations.
Ink Finance Medium — Polygon expansion announcement15 August 2023
SALUS security firm completes comprehensive smart contract audit, threat modeling, and business logic audit of INK Finance contracts.
Ink Finance Medium — Into Q1 2024December 2023
Workspace Treasury Proxy contract (0xa184Af4B1c01815A4B57422A3419E4FB78a96Ee4) deployed on Polygon as an EIP-1967 beacon proxy. No material upgrades are applied to this contract between deployment and the May 2026 exploit.
CryptoTimes / Cryip — INK Finance exploit reporting2 December 2024
QUILL token reaches its all-time high price of approximately $1.43.
CoinGecko — QUILL price history11 May 2026
Attacker wallet receives funds through Railgun privacy protocol on Ethereum, then bridges to Polygon approximately 32 minutes before the exploit transaction.
CryptoTimes — INK Finance exploit11 May 2026
At approximately 13:41 UTC, the attacker executes exploit transaction 0xb469a24ec737be16fe41367a7b5b315c7f03b4e0ff3af50b3a2db03b3066b982, draining 140,180.18 USDT0 from INK Finance's Workspace Treasury Proxy via a whitelist bypass and a $24,982 Balancer V2 flash loan.
Polygonscan — on-chain transaction record11 May 2026
Blockaid publicly alerts the community to the exploit, identifying the victim contract, attacker address, and exploit transaction.
KuCoin News — Blockaid alert on INK Finance exploit11 May 2026
On the same day, a separate exploit drains $101,400 from Huma Finance's deprecated V1 contracts on Polygon, establishing a pattern of simultaneous attacks on aged Polygon DeFi infrastructure.
Cryptopolitan — Huma Finance Polygon exploit11 May 2026
INK Finance has not issued a formal public post-mortem, recovery plan, or protocol pause announcement as of the date of initial reporting.
Phemex News — INK Finance treasury exploitDecision Log
- hash: ATKx8NTSx5WupUFN96cxuXTZG1Sa8hC4RoDLpAec6G87
This investigation is cryptographically anchored to the Solana blockchain (1 event). 14 of 17 cited source URLs have an Internet Archive snapshot.
model: claude-code-investigator
generated: 5/30/2026, 4:52:14 AM
last updated: 7/25/2026, 7:53:46 PM
avoid.net — verified advice for a post-truth world