← Nirvana V1reviewed 2026-11-02 · 11 claims checked
Fact-check findings
What an automated fact-checker found when it re-read Nirvana V1 against the sources the page cites. Only the most recent review is shown.
Read this first
These findings are produced by an automated reviewer, and its results vary between runs: the same page, checked three times on the same day, came back with 15%, 20% and 34% of its claims disputed, mostly because each run extracted a different number of claims. Treat what follows as leads, not rulings.
“Disputed” means the reviewer could not reconcile the claim with the evidence it cited. It does not mean the claim is false. “Unverifiable” means no reachable source settled it either way.
Nothing here changes the page on its own. A proposed correction is applied only after a human moderator approves it; until then the page reads as it did when reviewed.
unverifiable
2 claimsNo source the reviewer could reach confirms or contradicts the claim.
- #4[unverifiable][awaiting moderator]in section: Token Collapse and Protocol Shutdown
“Nirvana subsequently offered the attacker a white-hat bug bounty of up to $600,000 in exchange for return of funds and cessation of any investigation, but the attacker rejected this offer and instead demanded $1.4 million.”
reviewerAttacker was offered a $600,000 bounty, rejected it and demanded $1.4M, and the bounty was conditioned on ending any investigationThe bounty is not in the CoinDesk article. I did not fetch the other cited sources for it. The 'cessation of any investigation' condition and the $1.4M counter-demand are unconfirmed. - #10[unverifiable][awaiting moderator]in section: Victim Compensation and V2 Relaunch
“Nirvana V2 opened to the public on December 17–18, 2024, and the protocol pledged 10% of all V2 fees to be distributed proportionally to V1 hack victims in perpetuity as additional restitution.”
reviewerNirvana V2 opened publicly December 17-18, 2024 with a pledge of 10% of fees to V1 victimsThe relaunch is real. The specific dates and the 10% pledge are sourced to the project's own press material, which I did not read.
partially supported
4 claimsThe cited evidence supports part of the claim but not all of it.
- #2[partially supported][awaiting moderator]in section: Token Collapse and Protocol Shutdown
“Total value locked on the protocol plummeted to approximately 62 cents.”
reviewerTVL fell to approximately 62 centsFigure comes from a caption that conflicts with the article body. A TVL of 62 cents is implausible as a value and the page repeats it without caveat. - #8[partially supported][awaiting moderator]in the timeline
“2024-06-04”
reviewerApproximately $2.6M was returned to Nirvana in June 2024 (timeline 2024-06-04)The amount is confirmed. The exact day of return varies by source (Jun 4 is the article date), so the timeline date is approximate. The page says 'June 2024', which is safe. - #9[partially supported][awaiting moderator]in section: Criminal Prosecution — Shakeeb Ahmed
“In July 2023, the U.S. Department of Justice (Southern District of New York) arrested and charged Shakeeb Ahmed, 34, of New York, NY”
reviewerArrest and charges in July 2023, with the timeline date 2023-07-11July 2023 is supported. Reporting suggests the original July 2023 charges concerned Crema and that Nirvana was tied to him publicly at the plea, so 'in connection with the Nirvana V1 exploit' at arrest may overstate. The exact day 07-11 was not verified. - #11[partially supported][awaiting moderator]in the summary
“forcing a permanent shutdown”
reviewerWording on 'permanent' shutdown versus V2 relaunchV1 did shut down, but the summary does not mention the V2 relaunch that the body covers. Not a factual error, but a reader of the summary alone could miss it.
confirmed
5 claimsThe cited evidence supports the claim as written.
- #1[confirmed][no action needed]in section: Flash Loan Exploit — July 28, 2022
“The stolen funds were subsequently bridged from Solana to Ethereum via the Wormhole cross-chain bridge and converted into DAI stablecoin.”
reviewerNirvana was exploited via flash loan of roughly 10M USDC from Solend, funds bridged via Wormhole to Ethereum and converted to DAI, attacker address held over $3.5M DAICoinDesk matches the loan, bridge, DAI and address details. - #3[confirmed][no action needed]in section: Token Collapse and Protocol Shutdown
“The ANA token fell over 80–85% within hours of the attack”
reviewerANA fell over 80-85% within hoursRange is consistent with the reports, not independently re-fetched for Cointelegraph. - #5[confirmed][no action needed]in section: Token Collapse and Protocol Shutdown
“The stolen $3.6 million represented approximately all funds possessed by Nirvana at the time”
reviewerThe $3.6M stolen represented approximately all funds possessed by Nirvana, which shut down shortly afterThe DOJ wording matches via search snippet. The DOJ URL itself returned an empty fetch. - #6[confirmed][no action needed]in section: Criminal Prosecution — Shakeeb Ahmed
“On December 14, 2023, Ahmed pleaded guilty to one count of computer fraud before U.S. Magistrate Judge Ona T. Wang in the Southern District of New York.”
reviewerAhmed pleaded guilty on December 14, 2023 and agreed to forfeit about $12.3MDate and forfeiture confirmed. I did not verify the judge's name or the single-count detail from a fetched page. - #7[confirmed][no action needed]in section: Criminal Prosecution — Shakeeb Ahmed
“On April 12, 2024, Ahmed was sentenced to three years in federal prison plus three years of supervised release”
reviewerAhmed was sentenced to 3 years in prison plus 3 years supervised release on April 12, 2024Sentence and date are consistent across several sources.
How this fits together. The reviewer reads the published page and its cited sources and records one finding per claim. A human moderator decides whether each proposed correction is applied; those decisions, and the score changes they cause, appear in the audit log. Earlier review runs are not shown here; only the latest reflects the page as it stands.