Skip to main content
AVOID.NET

Midas Capital

avoid.net/midas-capital→49/100·82% conf.
[AI-DRAFTED · AWAITING FACT-CHECK][src:defillama]

Last changed 2026-10-27 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 32 → 49. Problems weighed by who is responsible: incidents the subject suffered −9.6, concerns that are not fraud −6.4, problems around the subject, caused by others −1.6; legitimacy credit long-running +2. Version history →

Why this score
Every page starts at65
Concerns that are not fraud-6.4
Incidents it suffered (e.g. hacks)-9.6
Problems around it, caused by others-1.6
Long-running+2
Sum49

Score: 49/100 (kept between 0 and 100)

How scoring works →
anchored·2a1gts…HqJR
Submit evidence

Summary

Midas Capital is a multichain DeFi isolated lending protocol that forked its codebase from Rari Capital's Fuse implementation. The protocol suffered two separate security exploits in 2023 totaling approximately $1.26 million in losses, with both incidents attributed to known smart contract vulnerabilities that had previously affected other Compound V2 forks. ZachXBT flagged the protocol, and the second exploit resulted in laundered funds routed through Tornado Cash.

Connected Entities

11 entities · 60 linked investigations
Organizations
□Polygon65□Midas Capital□Ethereum□Binance□Rari Capital□ZachXBT□Compound V2
Protocols
⌂Fei Protocol / Rari Capital⌂Fei Protocol⌂Hundred Finance
Tokens
♦KuCoin
Relationships
  • Hundred Finance→mentioned with→Ethereum(70%)
  • Hundred Finance→mentioned with→Polygon(60%)
  • Compound V2→mentioned with→Ethereum(80%)
  • Compound V2→mentioned with→ZachXBT(70%)
  • Midas Capital→mentioned with→Polygon(60%)
  • Midas Capital→mentioned with→Ethereum(60%)
  • Midas Capital→mentioned with→Binance(60%)
  • KuCoin→mentioned with→ZachXBT(70%)
  • Midas Capital→mentioned with→ZachXBT(70%)
  • Midas Capital→mentioned with→Fei Protocol(75%)
  • + 23 more
Also appears in
Curve Finance·64BNB Chain Bridge·51Polygon·65June 2026 Cross-Chain Bridge Exploit ($127M, Three Protocols)·8Gamma Strategies·62BtcTurk·52Andean Medjedovic·26Shibarium Bridge·42StakeDAO — vsdCRV Deployer Key Exploit (May 2026)·38JUDAO·6

Connected Through

10 shared actors · 595 investigations

Distinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.

Have evidence about Midas Capital?

Timeline(11 events)

October 2021

Midas Capital conceptualized at LisCon 2021 as a multichain deployment of Rari Capital's Fuse isolated lending protocol.

2022

Midas Capital launched, offering Tribe DAO a 25% token allocation; proposal passed with 94% governance support.

April 2022

Parent ecosystem Rari Capital's Fuse pools exploited for approximately $80 million; Tribe DAO destabilized.

August 2022

Tribe DAO votes to wind down operations. Midas Capital continues independently.

October 2022

Read-only reentrancy vulnerability in Curve LP tokens exploited against market.xyz for $220,000 — a known precursor to the January 2023 Midas Capital attack.

15 January 2023

Jarvis Polygon pool exploited via read-only reentrancy on WMATIC-stMATIC Curve LP token collateral. Approximately $660,000 in jCHF, jEUR, jGBP, and agEUR stolen and swapped to MATIC. Jarvis Network covers ~$350,000 shortfall.

17 January 2023

Midas Capital publishes post-mortem on January exploit; attempts to contact attacker regarding bounty; no funds recovered.

April 2023

Hundred Finance exploited for approximately $7 million using the same Compound V2 rounding/inflation attack pattern that would later strike Midas Capital.

17 June 2023

BNB Chain Ankr-Helio isolated pool exploited via exchange rate inflation attack (rounding vulnerability in Compound V2 fork). Approximately $340,000 drained per team post-mortem; PeckShield reports over $600,000 total. 510+ BNB laundered through Tornado Cash.

18 June 2023

Midas Capital pauses all pools, contacts authorities, and announces pivot toward permissioned protocol design.

20 June 2023

Midas Capital publishes post-mortem on June exploit detailing rounding vulnerability and incomplete fix inherited from Compound V2 / Hundred Finance patch lineage.

Provenance & Audit Trail
Recorded on Solana ✓Verify on-chain13 Wayback Archivessrc:defillama

Decision Log

  • #2rescore+17Recorded on Solana ✓10/27/2026, 6:09:42 AM
    slot 461966839 · hash 9JTY8sLEVs3GF2hDYDp1nCop4Dj7Fgnwg2EL34jraJNT
  • #1publishRecorded on Solana ✓5/29/2026, 5:23:40 PM
    slot 422983060 · hash 2UA43mmK6TKkAsxP92uvYYbc7d5A6Wybgo69VyjLiTp8

This investigation is cryptographically anchored to the Solana blockchain (2 decisions). 13 of 21 cited source URLs have an Internet Archive snapshot.

full audit log →version history →

model: claude-sonnet-4-6

generated: 5/4/2026, 2:54:45 AM

last updated: 10/27/2026, 6:09:41 AM

4 views

avoid.net — verified advice for a post-truth world