Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·4yn582…iVsTSummary
numa. (stylized with a period) is a non-custodial DeFi protocol on Arbitrum and Sonic that issues LST-backed synthetic assets (nuUSD, nuBTC, nuETH, nuGOLD) through a burn-and-mint tokenomics model. The protocol suffered two separate exploits in 2025 — a $506K price manipulation attack in April and a $313K collateral valuation exploit in August — resulting in cumulative losses exceeding $800K and a token price decline of approximately 99% from its peak. ZachXBT has flagged the entity in the context of trust intelligence monitoring.
Connected Entities
5 entities · 60 linked investigations- Ethereum→mentioned with→Coinbase(60%)
- Chainlink→mentioned with→Ethereum(65%)
- Chainlink→mentioned with→Coinbase(65%)
- numa.→mentioned with→Ethereum(70%)
- numa.→mentioned with→Chainlink(60%)
- numa.→mentioned with→Coinbase(60%)
- numa.→mentioned with→Arbitrum(70%)
- Arbitrum→mentioned with→Ethereum(80%)
- Arbitrum→mentioned with→Coinbase(65%)
Timeline(8 events)
December 2024
numa. protocol launches on Arbitrum with LST-backed synthetics (nuUSD, nuBTC, nuETH, nuGOLD) and burn-and-mint tokenomics.
18 April 2025
First exploit: attacker uses flash loan to manipulate $NUMA internal price via sell-burn-lock mechanism, stealing approximately 292.96 rETH (~$506K). Hypernative detected the attack 7+ minutes prior to execution. Stolen funds bridged to Ethereum and laundered through Tornado Cash.
18 April 2025
Numa team discovers exploit approximately one hour after execution. Protocol pauses lending and liquidation functionality.
21 April 2025
$NUMA token hits all-time low of approximately $0.13, down roughly 60% from pre-exploit price.
21 April 2025
Team publishes compensation plan: ~35 rETH in vault rewards, $100K external contribution, and direct team/protocol funds to make 1.49M $NUMA owed to external users whole.
May 2025
Team announces Sonic blockchain launch planned for end of May 2025, with Sherlock audit review required before deployment. Arbitrum lending to reopen after Sonic launch.
10 August 2025
Second exploit: attacker flash-mints nuBTC to inflate synthValueInEth, collapsing cNuma collateral prices and triggering forced liquidations of five victim accounts on Sonic. Approximately $313K (74.3 ETH) stolen. Funds bridged to Ethereum and deposited into Tornado Cash.
August 2025
Olympix publishes analysis of the August exploit, categorizing it as a locked-in price manipulation vulnerability. CertiK and Verichains publish independent post-mortems.
Decision Log
- hash: DeNS5fHnn138AbfaV7ouDGBccRAa9GLCxovDQmv4WvC
This investigation is cryptographically anchored to the Solana blockchain (1 event). 10 of 14 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:21 AM
last updated: 8/30/2026, 12:05:00 PM
7 viewsavoid.net — verified advice for a post-truth world