mySwap CL Protocol (Starknet)
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·ynQqYQ…dyuqSummary
mySwap launched in 2022 as the first automated market maker on Starknet and later introduced a Concentrated Liquidity (CL) product that reached a peak TVL of approximately $9.7 million in April 2024 before declining sharply to near-zero. On June 19, 2026, an attacker deployed a malicious token named EVIL to abuse the protocol's CL pool accounting and shared vault logic, draining approximately $305,000 in residual LP assets from over 100,000 positions. The stolen funds were bridged cross-chain and routed through Railgun; no recovery or formal post-mortem has been confirmed.
Connected Entities
5 entities · 60 linked investigations- Starknet→mentioned with→Ethereum(80%)
- Starknet→mentioned with→Railgun(65%)
- Uniswap→mentioned with→Ethereum(80%)
- mySwap CL Protocol (Starknet)→mentioned with→Railgun(70%)
- mySwap CL Protocol (Starknet)→mentioned with→Uniswap(60%)
- mySwap CL Protocol (Starknet)→mentioned with→Ethereum(60%)
- mySwap CL Protocol (Starknet)→mentioned with→Starknet(80%)
- Railgun→mentioned with→Uniswap(60%)
- Railgun→mentioned with→Starknet(60%)
- Railgun→mentioned with→Ethereum(80%)
Timeline(7 events)
March 2022
mySwap launches as the first AMM on Starknet mainnet, initially supporting ETH, USDC, DAI, and WBTC pools.
Braavos Blog28 November 2023
mySwap announces migration from the legacy constant-product AMM to mySwap Concentrated Liquidity (CL), offering a 14-day migration window with an incentive reward for users who migrate.
mySwap on X (@mySwapxyz)April 2024
mySwap CL reaches peak total value locked of approximately $9.7 million according to DefiLlama.
DefiLlama - mySwap CLJune 2025
mySwap CL TVL falls to approximately $5,000, a decline of over 99.9% from its April 2024 peak. Protocol is effectively dormant, with no new deposits accepted.
DefiLlama - mySwap CL19 June 2026
At approximately 7:15 AM UTC, an attacker deploys a malicious token named EVIL on Starknet and uses it to abuse mySwap CL pool accounting and shared vault logic, draining 137.96 ETH, 45,000 USDC, 19,900 USDT, and 230,000 STRK — approximately $305,000 in total — from over 100,000 LP positions.
CryptoAdventure19 June 2026
Attacker bridges stolen assets off Starknet and routes funds through the Railgun privacy protocol to obscure transaction flows. Protocol liquidity is nearly entirely depleted.
CryptoAdventure20 June 2026
mySwap confirms the incident publicly, stating it is assessing the full impact. No post-mortem, recovery plan, or reimbursement announcement is issued as of this date.
Phemex NewsDecision Log
- hash: 7tWXYxECPPgi6jNB1KcJo5nmV34gSvMADsPgR6Djydyq
This investigation is cryptographically anchored to the Solana blockchain (1 event). 7 of 8 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 6/25/2026, 11:27:19 PM
last updated: 7/27/2026, 10:56:29 AM
4 viewsavoid.net — verified advice for a post-truth world