Orion Protocol
Summary
Orion Protocol is a decentralized liquidity aggregator that connects centralized and decentralized exchanges into a single non-custodial trading interface, launched in 2020 with its native ORN token. On February 2, 2023, the protocol suffered a reentrancy exploit that drained approximately $3 million across its Ethereum and Binance Smart Chain deployments through a malicious fake-token attack against an unaudited exchange contract. The protocol subsequently rebranded to Lumia in late 2024, migrating all ORN tokens to LUMIA at a 1:1 ratio.
Connected Entities
1 entities · 10 linked investigationsTimeline(9 events)
2018-01-01
Alexey Koloskov and Kal Ali meet and begin building Orion Protocol concept.
IQ.wiki / Crunchbase2021-05-24
CertiK completes audit of Orion Protocol's token and sale contracts. The ExchangeWithOrionPool contract is not included in the audit scope.
CertiK Blog2023-02-02
Reentrancy exploit drains approximately $2,836,206 from Orion Protocol's Ethereum deployment and $191,030 from BSC, totaling roughly $3 million. Attacker uses a custom malicious token (ATK) and flash-loaned stablecoins.
CoinDesk2023-02-02
PeckShield and CertiK first identify and publicize the attack. CEO Alexey Koloskov states 'all funds are safe and secure' and attributes the vulnerability to third-party library mixing.
CryptoSlate2023-02-02
Approximately 1,100 ETH of stolen funds are deposited into Tornado Cash by the attacker.
CoinLore / U.Today2023-02-04
Orion Protocol publishes a development update with bug fixes and UI changes. CEO clarifies exploit was contained to an internal broker account; user funds reported unaffected.
BeInCrypto2023-02-09
PeckShield reports an on-chain message from the exploiter's wallet stating willingness to return stolen funds and requesting a refund address from Orion Protocol. No confirmed return is documented in available sources.
Crypto.news2024-10-15
Orion Protocol begins token migration to Lumia (LUMIA) at a 1:1 ratio. Binance, MEXC, Crypto.com, and other major exchanges support the swap. Binance reopens LUMIA/USDT trading on October 18, 2024.
Crypto.newsDecision Log
- hash: B1fVapucAVzauZByQt7Dw9xsNrcspgBw6nApQLRN4Njm
- hash: 9SMAoTLaxeznWLVzjMaDmCS4X8umWinkGsGivwctQXXs
- hash: Eake8xXPE7XDkHgjLGM2GRHXKSnGK9PZvC6K89rnMzMw
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-6
generated: 6/1/2026, 5:48:29 PM
last updated: 6/4/2026, 7:49:41 PM
avoid.net — verified advice for a post-truth world