Matcha
Last changed 2026-10-27 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 62 → 69. Problems weighed by who is responsible: incidents the subject suffered −3.2, problems around the subject, caused by others −2.4; legitimacy credit long-running +10; 1 section(s) set aside until a failed fact-check is resolved; fact-check adjustments (−10) now shown as page reliability, not in the score. Version history →
Why this score
| Every page starts at | 65 |
| Incidents it suffered (e.g. hacks) | -3.2 |
| Problems around it, caused by others | -2.4 |
| Long-running | +10 |
| Sum | 69 |
- 1 section set aside: the claims did not hold up in a fact-check, pending correction.
Score: 69/100 (kept between 0 and 100)
How scoring works →Summary
Matcha (matcha.xyz) is a DEX aggregator built and operated by 0x Labs, launched in 2020, that routes trades across 130+ liquidity sources on 15+ blockchains using the 0x Protocol. The core Matcha platform has no history of direct exploits; however, Matcha Meta — a related but distinct meta-aggregator product launched later by the same team — suffered a $13.4M exploit in January 2026 via a third-party SwapNet contract, affecting users who had disabled the platform's default one-time approval security setting. 0x Labs is a well-funded, established entity whose protocol contracts have been audited by Trail of Bits, OpenZeppelin, and Ouroboros, and whose bug bounty program offers up to $1M via Immunefi.
Connected Entities
13 entities · 60 linked investigations- Ethereum→mentioned with→Coinbase(60%)
- Optimism→mentioned with→Arbitrum(65%)
- Balancer→mentioned with→Arbitrum(60%)
- Optimism→mentioned with→Ethereum(80%)
- Optimism→mentioned with→Coinbase(60%)
- Balancer→mentioned with→Polygon(60%)
- Balancer→mentioned with→Ethereum(70%)
- Balancer→mentioned with→Optimism(60%)
- Binance→mentioned with→Ethereum(65%)
- SushiSwap→mentioned with→Arbitrum(65%)
- + 40 more
Timeline(12 events)
2016
0x Labs founded by Will Warren and Amir Bandeali in San Francisco.
2018
0x Protocol v1 launches on Ethereum mainnet, enabling peer-to-peer token exchange via off-chain order books and on-chain settlement.
12 July 2019
Critical vulnerability disclosed in 0x v2.0 Exchange contract by researcher samczsun, allowing signature bypass. 0x team shuts down contracts within hours; no funds lost.
April 2020
Matcha launches in closed beta as a DEX aggregator frontend built on 0x Protocol.
June 2020
Matcha opens to the public with gas-free trades and smart order routing across 15 DEXs.
26 April 2022
0x Labs raises $70M Series B led by Greylock, with participation from Pantera Capital, Jump Crypto, Coinbase, and others.
24 May 2023
Matcha v2 launches with multi-chain support including Ethereum, BNB Chain, and Polygon.
December 2023
Cross-chain swap functionality launches on Matcha.
July 2024
0x Labs launches bug bounty program via Immunefi for 0x v2, offering up to $1M for critical vulnerabilities.
2025
Matcha expands to Solana, becoming one of the first DEX aggregators to support both SVM and EVM chains in a single app.
26 January 2026
Matcha Meta (meta.matcha.xyz) suffers $13.4M exploit via a vulnerability in integrated third-party SwapNet router contract. 18 users affected; those who had disabled the default one-time approval setting were exposed. 0x Labs' own contracts were not compromised.
27 January 2026
Matcha Meta removes SwapNet as an available aggregator, disables the toggle allowing users to turn off one-time approvals, and publishes post-mortem.
Decision Log
- slot 461962195 · hash 3pJ4j46cGxEcTakdVKD9SsST9Nh3zwyctd32REaXqpCA
- slot 445607296 · hash 5ZzxfteG4e8pAQczaKqwJydZfvSBmX1aZMFunoEGDAMZ
- slot 424133140 · hash FS3Ep3zjgni42Wwq5XQs8nCHqLjRNWp4TCRebuxnRA5N
- slot 424133125 · hash 86RBqtTY2Fqz2ScmZ2oRp6D2gSooQTXVYksxtLSDRqBT
- slot 420905010 · hash 54Biv4eUjQQbMXBDTkPrxPLEeoMuicuFga2zMfoaThaP
This investigation is cryptographically anchored to the Solana blockchain (5 decisions). 14 of 17 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:18 AM
last updated: 10/27/2026, 6:02:51 AM
17 viewsavoid.net — verified advice for a post-truth world