mySwap CL Protocol (Starknet)
Summary
mySwap launched in 2022 as the first automated market maker on Starknet and later introduced a Concentrated Liquidity (CL) product that reached a peak TVL of approximately $9.7 million in April 2024 before declining sharply to near-zero. On June 19, 2026, an attacker deployed a malicious token named EVIL to abuse the protocol's CL pool accounting and shared vault logic, draining approximately $305,000 in residual LP assets from over 100,000 positions. The stolen funds were bridged cross-chain and routed through Railgun; no recovery or formal post-mortem has been confirmed.
Connected Entities
1 entities · 10 linked investigationsTimeline(7 events)
2022-03-01
mySwap launches as the first AMM on Starknet mainnet, initially supporting ETH, USDC, DAI, and WBTC pools.
Braavos Blog2023-11-28
mySwap announces migration from the legacy constant-product AMM to mySwap Concentrated Liquidity (CL), offering a 14-day migration window with an incentive reward for users who migrate.
mySwap on X (@mySwapxyz)2024-04-01
mySwap CL reaches peak total value locked of approximately $9.7 million according to DefiLlama.
DefiLlama - mySwap CL2025-06-01
mySwap CL TVL falls to approximately $5,000, a decline of over 99.9% from its April 2024 peak. Protocol is effectively dormant, with no new deposits accepted.
DefiLlama - mySwap CL2026-06-19
At approximately 7:15 AM UTC, an attacker deploys a malicious token named EVIL on Starknet and uses it to abuse mySwap CL pool accounting and shared vault logic, draining 137.96 ETH, 45,000 USDC, 19,900 USDT, and 230,000 STRK — approximately $305,000 in total — from over 100,000 LP positions.
CryptoAdventure2026-06-19
Attacker bridges stolen assets off Starknet and routes funds through the Railgun privacy protocol to obscure transaction flows. Protocol liquidity is nearly entirely depleted.
CryptoAdventure2026-06-20
mySwap confirms the incident publicly, stating it is assessing the full impact. No post-mortem, recovery plan, or reimbursement announcement is issued as of this date.
Phemex NewsDecision Log
- hash: 7tWXYxECPPgi6jNB1KcJo5nmV34gSvMADsPgR6Djydyq
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-6
generated: 6/25/2026, 11:27:19 PM
last updated: 6/25/2026, 11:27:27 PM
avoid.net — verified advice for a post-truth world