mySwap CL Protocol (Starknet)
Last changed 2026-11-02 · Fact-check review — Fact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the trust score was recalculated from the page's findings, 46 → 47. Version history →
Why this score
| Every page starts at | 65 |
| Concerns that are not fraud | -12 |
| Incidents it suffered (e.g. hacks) | -20 |
| Problems around it, caused by others | -0.3 |
| Long-running | +8 |
| Recent unresolved incident | -3.8 |
| Sum | 37 |
- The penalty for incidents it suffered is capped at 20 points.
- 1 section set aside: the claims did not hold up in a fact-check, pending correction.
Score: 47/100 (kept between 0 and 100)
How scoring works →Page reliability: Fact-checked 2026-11-02 · 5 of 10 claims confirmed · 4 need better sources · 1 disputed
anchored·ynQqYQ…dyuqSummary
mySwap launched in 2022 as the first automated market maker on Starknet and later introduced a Concentrated Liquidity (CL) product that reached a peak TVL of approximately $9.7 million in April 2024 before declining by over 99.9% to near-zero. On June 19, 2026, an attacker deployed a malicious token named EVIL to abuse the dormant protocol's CL pool accounting and shared-vault logic, draining approximately $305,000 in residual LP assets from more than 100,000 positions. The stolen funds were bridged cross-chain and routed through Railgun; the attacker remains unidentified, and no recovery, compensation plan or formal post-mortem has been reported.
Connected Entities
6 entities · 60 linked investigations- Starknet→mentioned with→Ethereum(80%)
- Starknet→mentioned with→Railgun(65%)
- Uniswap→mentioned with→Ethereum(80%)
- mySwap CL Protocol (Starknet)→mentioned with→Railgun(70%)
- mySwap CL Protocol (Starknet)→mentioned with→Uniswap(60%)
- mySwap Starknet CL Protocol→mentioned with→Starknet(80%)
- mySwap Starknet CL Protocol→mentioned with→Railgun(70%)
- mySwap CL Protocol (Starknet)→mentioned with→Ethereum(60%)
- mySwap CL Protocol (Starknet)→mentioned with→Starknet(80%)
- mySwap Starknet CL Protocol→mentioned with→mySwap CL Protocol (Starknet)(80%)
- + 3 more
Timeline(10 events)
January 2022
mySwap launches on Starknet as the first AMM on the network (launch month per the mySwap X account and Starknet ecosystem records; the Braavos blog gives March 2022).
mySwap on X (@mySwapxyz)March 2022
mySwap launches as the first AMM on Starknet mainnet, initially supporting ETH, USDC, DAI and WBTC pools (launch month per Braavos; another record gives January 2022).
Braavos BlogNovember 2023
mySwap announces migration from the legacy constant-product AMM to mySwap Concentrated Liquidity (CL), offering a 14-day migration window with an incentive reward for users who migrate.
mySwap on X (@mySwapxyz)April 2024
mySwap CL reaches peak total value locked of approximately $9.7 million according to DefiLlama.
DefiLlama - mySwap CLJuly 2024
TVL begins sustained decline from the $9.7M peak, falling to low single-digit millions and continuing downward through 2024.
DefiLlama - mySwap CLJanuary 2025
mySwap CL TVL reaches approximately $5,000, a decline of over 99.9% from peak; protocol effectively dormant with no new deposits accepted (date per one page; another gives June 2025).
DefiLlama - mySwap CLJune 2025
mySwap CL TVL falls to approximately $5,000, a decline of over 99.9% from its April 2024 peak; protocol effectively dormant with no new deposits accepted (date per one page; another gives January 2025).
DefiLlama - mySwap CLJune 2026
On June 19 at approximately 7:15 AM UTC, an attacker deploys a malicious token named EVIL on Starknet and uses it to abuse mySwap CL pool accounting and shared-vault logic, draining 137.96 ETH, 45,000 USDC, 19,900 USDT and 230,000 STRK (approximately $305,000) from more than 100,000 LP positions.
CryptoAdventureJune 2026
The attacker bridges the stolen assets off Starknet and routes them through the Railgun privacy protocol to obscure transaction flows; protocol liquidity is nearly entirely depleted.
CryptoAdventureJune 2026
On June 20, mySwap confirms the incident publicly, stating it is assessing the full impact. No post-mortem, recovery plan or reimbursement announcement is issued as of this date.
Phemex NewsDecision Log
- slot 464294572 · hash F7eb24CGWCxheFzxJq8EEi1SGNUwkYVn4cbdYXqb7jj6
- slot 464294568 · hash EDV756upjDP2ZShMK7nn35u1ZYonaG4GsQcgeN6JtbB8
- slot 464294561 · hash 43643kLtc5AaXagiqcbuQD7gGKNmbT2QpANaWUgnRLfR
- slot 464294104 · hash 43GiynVxiX2Y7rzWfDvxpBKAPFHNAnziA73op6FJ7SnY
- slot 455361789 · hash AF3L4CM49vxMg4iX5QRpbR3b73RGo15Jgxxwd8h3ZBoL
- slot 428904594 · hash 7tWXYxECPPgi6jNB1KcJo5nmV34gSvMADsPgR6Djydyq
This investigation is cryptographically anchored to the Solana blockchain (6 decisions). 8 of 9 cited source URLs have an Internet Archive snapshot.
model: claude-code-merge-writer
generated: 6/25/2026, 11:27:19 PM
last updated: 11/2/2026, 12:31:26 AM
4 viewsavoid.net — verified advice for a post-truth world