Skip to main content
AVOID.NET

Namada Protocol — MASP IBC Transfer Logic Exploit (June 19 2026)

avoid.net/namada-protocol-masp-ibc-transfer-logic-exploit-june-19-2026→6/100·72% conf.
[AI-DRAFTED · AWAITING FACT-CHECK]

Last changed 2026-11-02 · Fact-check review — Fact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the judge moved the trust score from 21 to 6. Version history →

Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →

anchored·B6xbQh…QADw

Summary

On June 19, 2026, Namada Protocol's Multi-Asset Shielded Pool (MASP) was drained of approximately $600,000 in IBC-bridged assets including ATOM, USDC, OSMO, TIA, and NYM via an IBC Transfer Logic Exploit. The attack went undetected for a material period because a stale chain indexer continued displaying the drained balances as available, while live RPC queries showed zero; the discrepancy was first identified by independent security researchers at F12. Namada confirmed the exploit and issued an appeal to the responsible party to contact them, but as of the investigation date had not disclosed the specific vulnerability, recovery status, or a comprehensive postmortem.

Connected Entities

2 entities · 48 linked investigations
Organizations
Protocols
⌂Namada Protocol — MASP IBC Transfer Logic Exploit (June 19 2026)
Relationships
  • Namada Protocol — MASP IBC Transfer Logic Exploit (June 19 2026)→mentioned with→Cosmos (ATOM)(80%)

Connected Through

1 shared actor · 48 investigations

Distinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.

Have evidence about Namada Protocol — MASP IBC Transfer Logic Exploit (June 19 2026)?
1
Accepted
2
Under review
0
Rejected / revoked

Community submissions

2 submissions awaiting moderator review.

Timeline(5 events)

3 December 2024

Namada Protocol mainnet launched via a community-coordinated genesis event involving over 180 independent validators.

CoinTelegraph / Namada Official

18 June 2026

Alleged beginning of exploit window. The attacker began draining IBC-bridged assets from Namada's MASP via IBC Transfer Logic Exploit, according to CryptoTimes reporting citing F12.

CryptoTimes

19 June 2026

Approximately $600,000 in assets (ATOM, USDC, OSMO, TIA, NYM and others) confirmed drained from Namada's MASP. Stale indexer continued showing balances intact; live RPC queries showed zero. Independent security researchers at F12 detected the discrepancy by cross-referencing data sources. Attacker IBC-transferred approximately 228,517 ATOM to address cosmos1zw9weagzm2w4ud6w3ql7m7rvzpxhvkpt8kk4ff, which rapidly emptied further via IBC sends.

CryptoTimes / SlowMist Hacked

20 June 2026

CryptoTimes published detailed reporting on the MASP drain, including the stale indexer masking mechanism and F12's on-chain findings. DefiLlama recorded the event in its hacks database as a $600,000 Protocol Logic exploit.

CryptoTimes

21 June 2026

Namada team confirmed the exploit publicly, stating: 'There's been an exploit in the Namada protocol. We are investigating the issue and are involving the relevant parties.' Team appealed to 'white hat hacker' to make contact. CoinTrust reported investigation ongoing; no recovery timeline or specific vulnerability disclosure made.

CoinTrust
Provenance & Audit Trail

Decision Log

  • #4review revise-15Recorded on Solana ✓11/2/2026, 9:22:50 AM
    slot 464443514 · hash 9w1kiWavSYHNubDzbTPYrGkpvZP3JjHuhAuxRG1xcteD
  • #3reviewRecorded on Solana ✓11/2/2026, 9:22:50 AM
    slot 464443509 · hash 9y25Z8Yjs49NCGRBZDeg6cJjxBvxSQhk9rctSWPS1Sci
  • #2accept-1Recorded on Solana ✓10/16/2026, 2:58:52 PM
    slot 457679468 · hash 9jiAG4tvAtk4ZvDnxLfc5igsb7ngaEr4yUgvvdwz8WRB
  • #1publishRecorded on Solana ✓6/21/2026, 12:19:15 PM
    slot 427939754 · hash GxHey7HYPbH9286KcqbZWdx4GWMoUXqxWH5km3o6RE1q

This investigation is cryptographically anchored to the Solana blockchain (4 decisions). 12 of 12 cited source URLs have an Internet Archive snapshot.

Fact-checked 2026-11-027 claims checked1 correction pending0 applied⛓ anchoredSee findings →

model: claude-sonnet-4-6

generated: 6/21/2026, 12:19:07 PM

last updated: 11/2/2026, 9:22:50 AM

5 views

avoid.net — verified advice for a post-truth world