Skip to main content
AVOID.NET

Nemo Yield Trading

avoid.net/nemo-yield-trading→61/100·82% conf.
[✓ FACT-CHECKED]· reviewed once · last review 3 Nov 2026[src:defillama]

Last changed 2026-11-03 · Fact-check review — Fact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the trust score was recalculated from the page's findings, 60 → 61. Version history →

Why this score
Every page starts at65
Concerns that are not fraud-6.4
Incidents it suffered (e.g. hacks)-3.2
Problems around it, caused by others-0.8
Long-running+6
Sum61
  • 1 section set aside: the claims did not hold up in a fact-check, pending correction.

Score: 61/100 (kept between 0 and 100)

How scoring works →

Page reliability: Fact-checked 2026-11-03 · 6 of 8 claims confirmed · 2 need better sources

anchored·cPkfxj…VgaN

Summary

Nemo Protocol is a Sui-based DeFi yield trading platform that suffered a $2.6 million exploit on September 7, 2025, caused by an unnamed developer who deployed unaudited code to mainnet while bypassing internal review processes. A security auditor had flagged a related vulnerability 27 days before the attack, which the team acknowledged it failed to address in time. The protocol's TVL has since collapsed to zero and it has been flagged as high-risk by trust intelligence sources.

Connected Entities

4 entities · 60 linked investigations
Organizations
Relationships
  • Nemo Yield Trading→mentioned with→Ethereum(70%)
  • Nemo Yield Trading→mentioned with→Wormhole(65%)
  • Nemo Yield Trading→mentioned with→Sui(70%)
  • Wormhole→mentioned with→Ethereum(70%)
  • Sui→mentioned with→Ethereum(70%)
  • Sui→mentioned with→Wormhole(60%)
Have evidence about Nemo Yield Trading?

Timeline(8 events)

June 2022

Nemo Protocol's official X account established; project founded.

January 2025

Developer submits code to MoveBit auditors without disclosing new unaudited features mixed into the submission. Protocol completes Sui Hydropower Accelerator first cohort.

11 August 2025

Security firm Asymptotic issues a C-2 severity warning flagging a vulnerability in Nemo's contract code that allows unauthorized state modification. The developer allegedly dismisses the severity and no fix is deployed.

7 September 2025

Exploit occurs at approximately 16:00 UTC. Attacker uses exposed flash loan function combined with flawed query function to drain approximately $2.4-2.6 million from the SY/PT liquidity pool. Stolen assets bridged to Ethereum via Wormhole CCTP. TVL collapses from $6.3M to $1.57M.

8 September 2025

PeckShield publicly flags the breach. Nemo Protocol confirms the attack and announces protocol pause. Nemo offers a 10% white-hat bounty to the attacker.

11 September 2025

Nemo Protocol releases post-mortem report, attributing the exploit to unaudited code deployed by an internal developer via single-signature address, and admitting the Asymptotic warning was not adequately addressed.

14 September 2025

Nemo Protocol announces the NEOM debt token compensation program, issuing one NEOM per dollar lost. Team acknowledges it lacks capital for direct USD reimbursement.

May 2026

Social media reports indicate the vault migration was completed and NEOM tokens are claimable. NEOM reportedly trades below its $1.00 peg. Protocol TVL remains at zero.

Provenance & Audit Trail

Decision Log

  • #5rescore+1Recorded on Solana ✓11/3/2026, 11:36:17 PM
    slot 465085695 · hash CoUgMXWUoTjG4HXCXf3fLWFPLofjXpWpQ4vbwT3jnwg1
  • #4review reviseRecorded on Solana ✓11/3/2026, 11:36:16 PM
    slot 465085690 · hash 6TEvEbDjXo22vuqUfV4RfTn6BXLVi6jboBHPec5AGHsK
  • #3reviewRecorded on Solana ✓11/3/2026, 11:36:16 PM
    slot 465085685 · hash 4N49w4HzpW5GyxHFEvAeUUVFuVcAZf5LfLRmSKuzNREy
  • #2rescore+32Recorded on Solana ✓10/10/2026, 6:44:39 PM
    slot 455364429 · hash 5U3coXnKYtxM2VBDZGHjPiHwYdwbBWGKfQid4PL3jFqc
  • #1publishRecorded on Solana ✓5/26/2026, 6:30:21 PM
    slot 422338837 · hash Cj6WvPh1cpFE3TmHC9RmQqUbg52hUmXHqqC2Ntx7Eo9m

This investigation is cryptographically anchored to the Solana blockchain (5 decisions). 18 of 19 cited source URLs have an Internet Archive snapshot.

Fact-checked 2026-11-038 claims checked0 corrections pending0 applied⛓ anchoredSee findings →

model: claude-sonnet-4-6

generated: 5/4/2026, 2:54:16 AM

last updated: 11/3/2026, 11:36:17 PM

5 views

avoid.net — verified advice for a post-truth world