Lien Finance
Summary
Lien Finance is a governance-free Ethereum DeFi protocol launched in August 2020 that enables users to create options and stablecoins by tranching ETH deposits into two derivative bond tokens (SBT and LBT). On July 24, 2026, the protocol was exploited for approximately 542,144 USDC through manipulation of its permissionless bond registration system and a flawed OTC pricing function. This is the protocol's second significant security incident, following a September 2020 near-miss in which a whitehat coalition rescued approximately $10 million from a related BondMaker contract vulnerability.
Connected Entities
1 entities · 10 linked investigationsTimeline(5 events)
2020-04-01
Lien Finance publishes its initial whitepaper covering the iDOL stablecoin design.
Coinranking — What is Lien (LIEN)?2020-08-01
Lien Protocol launches on Ethereum mainnet following audits by ConsenSys Diligence and CertiK. LIEN tokens distributed via airdrop to early contributors and beta testers.
Coinranking — What is Lien (LIEN)?2020-09-15
Security researcher samczsun identifies a critical vulnerability in Lien Finance's BondMaker contract, which holds approximately 25,000 ETH (~$10M). A whitehat coalition including samczsun, ConsenSys Diligence researcher Alexander Wade, and Scott Bigelow executes a rescue operation, moving all user funds to safety before exploitation. No funds are lost.
Sep 2020 — Lien Finance Rescued — Quadriga Initiative2020-09-16
Lien Finance publishes an incident analysis on Medium acknowledging the BondMaker contract vulnerability and confirming all user funds were returned.
Interruption of Service — Incident Analysis — Lien Protocol on Medium2026-07-24
Lien Finance's GeneralizedDotc OTC pools are exploited for 542,144.63 USDC. The attacker registers a malicious bond group using the protocol's permissionless bond registration, mints uncollateralized BondTokens by exploiting flawed validation in the exchangeEquivalentBonds function, then swaps fabricated bonds for real USDC via three pre-authorized OTC endpoints. The incident is first flagged by DefimonAlerts and amplified by exvulsec and SlowMist.
Lien Finance hit by $542K exploit tied to bond token logic bug — crypto.newsDecision Log
- #1publish⛓ pending7/24/2026, 11:08:38 PMhash: AiG8ZrrzuTkvQbSMHPcDY4VCjrEJQRXi77Y1jivDjt8A
0 of 10 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 7/24/2026, 11:08:32 PM
last updated: 7/24/2026, 11:08:38 PM
avoid.net — verified advice for a post-truth world