Skip to main content
AVOID.NET

Kinto Bridge

avoid.net/kinto-bridge→50/100·82% conf.
[✓ FACT-CHECKED]· reviewed once · last review 2 Nov 2026[src:defillama]

Last changed 2026-11-02 · Fact-check review — Fact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the trust score did not change. Version history →

[DEFUNCT · NO LONGER OPERATING]
Why this score
Every page starts at65
Concerns that are not fraud-3.2
Incidents it suffered (e.g. hacks)-3.2
Problems around it, caused by others-3.2
Long-running+2
Sum57
  • No longer operating, so capped at 50.
  • 1 section set aside: the claims did not hold up in a fact-check, pending correction.

Score: 50/100 (kept between 0 and 100)

How scoring works →

Page reliability: Fact-checked 2026-11-02 · 5 of 8 claims confirmed · 2 need better sources · 1 disputed

anchored·2vQjXf…St4W

Summary

Kinto was a KYC-enforced Ethereum Layer 2 built on the Arbitrum Nitro stack, marketing itself as a 'safety-first' DeFi protocol with built-in AML and identity verification. On July 10, 2025, an attacker exploited a CPIMP proxy vulnerability in the $K token contract on Arbitrum, minting 110,000 unauthorized tokens and draining approximately $1.55–1.9 million from Uniswap V4 and Morpho Blue liquidity pools. Despite a partial recovery effort dubbed 'Phoenix,' the project announced shutdown effective September 30, 2025, as fundraising options collapsed and the team ran unpaid for months.

Connected Entities

7 entities · 60 linked investigations
Organizations
□Ethereum90□Kinto Bridge□Arbitrum□Rari Capital□ZachXBT
Protocols
⌂Fei Protocol⌂Uniswap
Relationships
  • ZachXBT→mentioned with→Ethereum(70%)
  • Kinto Bridge→mentioned with→Ethereum(80%)
  • Kinto Bridge→mentioned with→ZachXBT(70%)
  • Kinto Bridge→mentioned with→Arbitrum(80%)
  • Kinto Bridge→mentioned with→Uniswap(70%)
  • Uniswap→mentioned with→Ethereum(80%)
  • Fei Protocol→mentioned with→Rari Capital(80%)
  • Kinto Bridge→mentioned with→Rari Capital(80%)
  • Kinto Bridge→mentioned with→Fei Protocol(80%)
  • Rari Capital→mentioned with→Fei Protocol(80%)
  • + 5 more
Have evidence about Kinto Bridge?

Timeline(13 events)

15 November 2023

Kinto raises $3.5–5 million seed round led by SALT with participation from ParaFi Capital, Robot Ventures, SkyBridge Capital, Kraynos Capital, Modular Capital, and The Spartan Group; announces migration to Arbitrum Nitro stack.

May 2024

Kinto mainnet launches on the Arbitrum ecosystem as a KYC-enforced Layer 2.

30 June 2024

$K token contract deployed on Arbitrum.

2025

Final investor token round occurs at $10 per $K token.

19 March 2025

Kinto developers deploy the $K token proxy on Arbitrum without atomic initialization; attacker initializes the proxy with a backdoor hidden implementation two seconds later.

April 2025

$K token airdrop and public listing proceeds; token launches at approximately $7.68.

9 July 2025

CPIMP (ERC-1967 proxy) vulnerability publicly disclosed at 20:17 UTC; Venn Network runs a 36-hour remediation war room notifying affected protocols — Kinto is not reached in time.

10 July 2025

Attacker exploits $K token proxy at 08:40 UTC; mints 110,000 unauthorized $K tokens; drains 577 ETH (~$1.55–1.9M) from Uniswap V4 and Morpho Blue pools. Kinto issues first public alert at 09:50 UTC. $K token crashes 90–95%.

10 July 2025

Kinto freezes CEX trading, pulls remaining liquidity, and begins collaboration with ZeroShadow for on-chain investigation.

July 2025

Kinto launches Phoenix recovery initiative; raises just over $1 million in debt financing; deploys new hardened $K contract; restores balances to pre-hack block 356170028.

7 September 2025

Kinto announces full shutdown effective September 30, 2025, citing failed fundraising and unsustainable unpaid operations. $K token falls an additional 81–85% on announcement day.

30 September 2025

Kinto L2 operations, bridge, UI, and wallets shut down. Users directed to claim portals active October 1 through November 30, 2025.

15 October 2025

ERA airdrop distribution targeted; Ethereum mainnet claim contract for hack victims launches.

Provenance & Audit Trail

Decision Log

  • #4review reviseRecorded on Solana ✓11/2/2026, 4:56:24 AM
    slot 464368725 · hash 6y9VyQ9WHE3dVZXpWJ6hX6qqAfumFtnGmwXdTNw18Qop
  • #3reviewRecorded on Solana ✓11/2/2026, 4:56:24 AM
    slot 464368720 · hash 6cf77EwfLvJeRPUonmvX9vHzLcDqw5F8YtrkBo3JB2np
  • #2rescore+22Recorded on Solana ✓10/27/2026, 6:09:45 AM
    slot 461966860 · hash 3BieoqJ2dqTf4dW4cJ75fLgDdBiTSZf1W1BHjPr7Tqf3
  • #1publishRecorded on Solana ✓5/27/2026, 8:21:19 PM
    slot 422573701 · hash Ddn4iXf6UshmtNykr22p6DaCNxUfZApUp2eS1rovBnoN

This investigation is cryptographically anchored to the Solana blockchain (4 decisions). 19 of 24 cited source URLs have an Internet Archive snapshot.

Fact-checked 2026-11-028 claims checked1 correction pending0 applied⛓ anchoredSee findings →

model: claude-sonnet-4-6

generated: 5/4/2026, 2:54:22 AM

last updated: 11/2/2026, 4:56:25 AM

6 views

avoid.net — verified advice for a post-truth world