Skip to main content
Sign in

mySwap CL Protocol (Starknet)

avoid.net/myswap-cl-protocol-starknet→22/100·74% conf.
[AI-DRAFTED · AWAITING VERIFICATION]
anchored·ynQqYQ…dyuq

Summary

mySwap launched in 2022 as the first automated market maker on Starknet and later introduced a Concentrated Liquidity (CL) product that reached a peak TVL of approximately $9.7 million in April 2024 before declining sharply to near-zero. On June 19, 2026, an attacker deployed a malicious token named EVIL to abuse the protocol's CL pool accounting and shared vault logic, draining approximately $305,000 in residual LP assets from over 100,000 positions. The stolen funds were bridged cross-chain and routed through Railgun; no recovery or formal post-mortem has been confirmed.

Connected Entities

1 entities · 10 linked investigations
Protocols
⌂mySwap CL Protocol (Starknet)
Relationships
    Also appears in
    Saga EVM Blockchain·32Gamma Strategies·28Alephium Bridge·18BonkDAO Treasury Governance Attack (July 2026)·3Lulo·55Access Protocol·47Orca·80Zircon Gamma·32Blazar Token / John A. DeSalvo·2Volo Protocol·47
    Have evidence about mySwap CL Protocol (Starknet)?

    Timeline(7 events)

    2022-03-01

    mySwap launches as the first AMM on Starknet mainnet, initially supporting ETH, USDC, DAI, and WBTC pools.

    Braavos Blog

    2023-11-28

    mySwap announces migration from the legacy constant-product AMM to mySwap Concentrated Liquidity (CL), offering a 14-day migration window with an incentive reward for users who migrate.

    mySwap on X (@mySwapxyz)

    2024-04-01

    mySwap CL reaches peak total value locked of approximately $9.7 million according to DefiLlama.

    DefiLlama - mySwap CL

    2025-06-01

    mySwap CL TVL falls to approximately $5,000, a decline of over 99.9% from its April 2024 peak. Protocol is effectively dormant, with no new deposits accepted.

    DefiLlama - mySwap CL

    2026-06-19

    At approximately 7:15 AM UTC, an attacker deploys a malicious token named EVIL on Starknet and uses it to abuse mySwap CL pool accounting and shared vault logic, draining 137.96 ETH, 45,000 USDC, 19,900 USDT, and 230,000 STRK — approximately $305,000 in total — from over 100,000 LP positions.

    CryptoAdventure

    2026-06-19

    Attacker bridges stolen assets off Starknet and routes funds through the Railgun privacy protocol to obscure transaction flows. Protocol liquidity is nearly entirely depleted.

    CryptoAdventure

    2026-06-20

    mySwap confirms the incident publicly, stating it is assessing the full impact. No post-mortem, recovery plan, or reimbursement announcement is issued as of this date.

    Phemex News
    Provenance & Audit Trail
    Anchored on SolanaVerify on-chain7 Wayback Archives

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain (1 event). 7 of 8 cited source URLs have an Internet Archive snapshot.

    full audit log →version history →

    model: claude-sonnet-4-6

    generated: 6/25/2026, 11:27:19 PM

    last updated: 7/27/2026, 10:56:29 AM

    avoid.net — verified advice for a post-truth world