mySwap Starknet CL Protocol
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·2R2QC2…nzETSummary
mySwap is the first automated market maker deployed on Starknet, operating a concentrated liquidity (CL) protocol that reached a peak TVL of approximately $9.7 million in April 2024 before declining sharply to near-zero by early 2025. On June 19, 2026, an attacker exploited a shared-vault accounting vulnerability in the dormant CL protocol by deploying a fake token named EVIL, draining approximately $305,000 in residual LP assets. The stolen funds were bridged cross-chain and routed through Railgun; no recovery has been confirmed and the attacker remains unidentified.
Connected Entities
4 entities · 36 linked investigations- Starknet→mentioned with→Railgun(65%)
- mySwap CL Protocol (Starknet)→mentioned with→Railgun(70%)
- mySwap Starknet CL Protocol→mentioned with→Starknet(80%)
- mySwap Starknet CL Protocol→mentioned with→Railgun(70%)
- mySwap CL Protocol (Starknet)→mentioned with→Starknet(80%)
- mySwap Starknet CL Protocol→mentioned with→mySwap CL Protocol (Starknet)(80%)
- Railgun→mentioned with→Starknet(60%)
Connected Through
3 shared actors · 36 investigationsDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- □Railgunorganizationalso inInferno Drainer·0DPRK·0ETHTrustFund·2MangoFarmSOL·2RiskOnBlast·2zkLend (Starknet)·4Harmony Horizon Bridge·4Stream Finance·4Allbridge Core Second Flash-Loan Exploit (July 2026)·6Harmony ONE (Protocol Entity)·8Harmony Bridge·10Dough Finance·12zkLend·20mySwap CL Protocol (Starknet)·22Pike V1·22INK Finance·22DeFiTuna·28Pike Finance·28SIR.trading·30Thunder Terminal·38SIR (Synthetics Implemented Right)·38Moby Trade·38Midnight·39Railgun·40Maestro·47Bittensor·52Yearn Ether·58Starknet·62Base·68
- □Starknetorganization
- ⌂mySwap CL Protocol (Starknet)protocol
Timeline(6 events)
January 2022
mySwap launches on Starknet as the first AMM on the network.
mySwap on X (formerly Twitter) account creation and Starknet ecosystem recordsApril 2024
mySwap CL reaches peak TVL of approximately $9.7 million according to DefiLlama.
DefiLlama - mySwap CLJuly 2024
TVL begins sustained decline from $9.7M peak, falling to low single-digit millions and continuing downward through 2024.
DefiLlama - mySwap CLJanuary 2025
mySwap CL TVL reaches approximately $5,000, a decline of over 99.9% from peak. Protocol is effectively dormant, with no new deposits accepted.
DefiLlama - mySwap CL19 June 2026
At approximately 7:15 AM UTC, an attacker deploys a fake EVIL token and exploits a shared-vault accounting vulnerability in mySwap CL, draining 137.96 ETH, 45,000 USDC, 19,900 USDT, and 230,000 STRK — totaling approximately $305,000. Stolen assets are subsequently bridged cross-chain and routed through Railgun.
CryptoAdventure - mySwap Loses $305K On Starknet20 June 2026
mySwap confirms the incident and states it is assessing the full impact. No post-mortem or recovery plan published as of this date.
Phemex News - Starknet's mySwap Protocol ExploitedDecision Log
- hash: B7yQZ3jHQ65HQjuGyeHacBBq993XdG6J9hbiiCysAQYG
This investigation is cryptographically anchored to the Solana blockchain (1 event). 6 of 6 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 6/24/2026, 11:06:08 PM
last updated: 7/27/2026, 10:56:28 AM
3 viewsavoid.net — verified advice for a post-truth world