Skip to main content
AVOID.NET

Lien Finance

avoid.net/lien-finance22/100·78% conf.
[AI-DRAFTED · AWAITING VERIFICATION]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·53eZSA…m9NK

Summary

Lien Finance is a governance-free Ethereum DeFi protocol launched in August 2020 that enables users to create options and stablecoins by tranching ETH deposits into two derivative bond tokens (SBT and LBT). On July 24, 2026, the protocol was exploited for approximately 542,144 USDC through manipulation of its permissionless bond registration system and a flawed OTC pricing function. This is the protocol's second significant security incident, following a September 2020 near-miss in which a whitehat coalition rescued approximately $10 million from a related BondMaker contract vulnerability.

Connected Entities

1 entities
Protocols
Lien Finance
Relationships
    Have evidence about Lien Finance?

    Timeline(5 events)

    April 2020

    Lien Finance publishes its initial whitepaper covering the iDOL stablecoin design.

    Coinranking — What is Lien (LIEN)?

    August 2020

    Lien Protocol launches on Ethereum mainnet following audits by ConsenSys Diligence and CertiK. LIEN tokens distributed via airdrop to early contributors and beta testers.

    Coinranking — What is Lien (LIEN)?

    15 September 2020

    Security researcher samczsun identifies a critical vulnerability in Lien Finance's BondMaker contract, which holds approximately 25,000 ETH (~$10M). A whitehat coalition including samczsun, ConsenSys Diligence researcher Alexander Wade, and Scott Bigelow executes a rescue operation, moving all user funds to safety before exploitation. No funds are lost.

    Sep 2020 — Lien Finance Rescued — Quadriga Initiative

    16 September 2020

    Lien Finance publishes an incident analysis on Medium acknowledging the BondMaker contract vulnerability and confirming all user funds were returned.

    Interruption of Service — Incident Analysis — Lien Protocol on Medium

    24 July 2026

    Lien Finance's GeneralizedDotc OTC pools are exploited for 542,144.63 USDC. The attacker registers a malicious bond group using the protocol's permissionless bond registration, mints uncollateralized BondTokens by exploiting flawed validation in the exchangeEquivalentBonds function, then swaps fabricated bonds for real USDC via three pre-authorized OTC endpoints. The incident is first flagged by DefimonAlerts and amplified by exvulsec and SlowMist.

    Lien Finance hit by $542K exploit tied to bond token logic bug — crypto.news
    Provenance & Audit Trail

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain (1 event). 8 of 10 cited source URLs have an Internet Archive snapshot.

    model: claude-sonnet-4-6

    generated: 7/24/2026, 11:08:32 PM

    last updated: 7/27/2026, 5:41:20 PM

    3 views

    avoid.net — verified advice for a post-truth world