Skip to main content
AVOID.NET

Jimbos Protocol

avoid.net/jimbos-protocol→49/100·88% conf.
[✓ FACT-CHECKED]· reviewed once · last review 8 Nov 2026[src:defillama]

Last changed 2026-11-08 · Fact-check review — Fact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the trust score was recalculated from the page's findings, 48 → 49. Version history →

Why this score
Every page starts at65
Concerns that are not fraud-6
Incidents it suffered (e.g. hacks)-20
Sum39
  • The penalty for incidents it suffered is capped at 20 points.
  • 2 sections set aside: the claims did not hold up in a fact-check, pending correction.

Score: 49/100 (kept between 0 and 100)

How scoring works →

Page reliability: Fact-checked 2026-11-08 · 4 of 7 claims confirmed · 2 need better sources · 1 out of date

anchored·4J5RBS…FFVh

Summary

Jimbos Protocol was an Arbitrum-based DeFi liquidity protocol designed to provide a semi-stable floor price for its native JIMBO token. On May 28, 2023, just three days after launching its V2, the protocol was exploited via a flash loan attack that drained approximately 4,090 ETH (~$7.5 million) by exploiting a lack of slippage control in the JimboController contract. The attacker rejected a $800,000 bounty offer, laundered the full amount through Tornado Cash, and remains unidentified; no funds have been recovered.

Connected Entities

3 entities · 60 linked investigations
Organizations
Protocols
⌂Jimbos Protocol
Relationships
  • Arbitrum→mentioned with→Ethereum(80%)
  • Jimbos Protocol→mentioned with→Ethereum(80%)
  • Jimbos Protocol→mentioned with→Arbitrum(80%)
Have evidence about Jimbos Protocol?

Timeline(8 events)

May 2023

Jimbos Protocol launches initial version on Arbitrum

CoinDesk

25 May 2023

Jimbos Protocol V2 launches on Arbitrum

The Block

28 May 2023

Attacker exploits lack of slippage control in JimboController shift() function via flash loan, draining 4,090 ETH (~$7.5M). JIMBO token drops ~40%.

The Register

28 May 2023

Stolen ETH bridged from Arbitrum to Ethereum mainnet via Stargate and Celer Network

Halborn Security

28 May 2023

Jimbos Protocol team sends on-chain message to attacker offering to let them keep 10% if 90% is returned

CryptoPotato

31 May 2023

Jimbos Protocol opens case with U.S. Department of Homeland Security (New York branch) and additional jurisdictions

CoinDesk

June 2023

Jimbos Protocol announces $800,000 public bounty for information identifying the exploiter after hacker ignores private deal

CoinTelegraph

September 2023

PeckShield reports that all $7.5M in stolen funds has been laundered through Tornado Cash; attacker remains unidentified

CoinPaper
Provenance & Audit Trail

Decision Log

  • #5rescore+1Recorded on Solana ✓11/8/2026, 2:37:13 AM
    slot 466749739 · hash zqkugPnbdYtVDhT3MNX72hx5315R4Mb7VtaXsC7Ew2S
  • #4review reviseRecorded on Solana ✓11/8/2026, 2:37:12 AM
    slot 466749731 · hash CvEP77BGGLvyGCQXo1rfrqJStx1cPoyYKtEweN13WnQY
  • #3reviewRecorded on Solana ✓11/8/2026, 2:37:12 AM
    slot 466749725 · hash FqGTnNoauR73gDf83L34cjCwuqYQATBGgtbFTVaDKzxp
  • #2rescore+30Recorded on Solana ✓10/10/2026, 6:42:26 PM
    slot 455362000 · hash CCY5VrGWvwfnGLUBbUsnirxoXnYiyiEVMp9bJmQ72bo9
  • #1publishRecorded on Solana ✓5/28/2026, 3:33:58 PM
    slot 422748357 · hash Z5HQcuvn7ayx2Ynb3de1WMX1eW98xvyipbgYfSizFCC

This investigation is cryptographically anchored to the Solana blockchain (5 decisions). 14 of 19 cited source URLs have an Internet Archive snapshot.

Fact-checked 2026-11-087 claims checked1 correction pending0 applied⛓ anchoredSee findings →

model: claude-sonnet-4-6

generated: 5/4/2026, 2:54:41 AM

last updated: 11/8/2026, 2:37:13 AM

6 views

avoid.net — verified advice for a post-truth world