Orion Protocol
Last changed 2026-10-10 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 42 → 59. Problems weighed by who is responsible: incidents the subject suffered −16, concerns that are not fraud −9.2, problems around the subject, caused by others −0.6; legitimacy credit long-running +10. Version history →
Why this score
| Every page starts at | 65 |
| Concerns that are not fraud | -9.2 |
| Incidents it suffered (e.g. hacks) | -16 |
| Problems around it, caused by others | -0.6 |
| Long-running | +10 |
| Sum | 49 |
Score: 59/100 (kept between 0 and 100)
How scoring works →Summary
Orion Protocol is a decentralized liquidity aggregator that connects centralized and decentralized exchanges into a single non-custodial trading interface, launched in 2020 with its native ORN token. On February 2, 2023, the protocol suffered a reentrancy exploit that drained approximately $3 million across its Ethereum and Binance Smart Chain deployments through a malicious fake-token attack against an unaudited exchange contract. The protocol subsequently rebranded to Lumia in late 2024, migrating all ORN tokens to LUMIA at a 1:1 ratio.
Connected Entities
4 entities · 60 linked investigations- Orion Protocol→mentioned with→Ethereum(70%)
- Orion Protocol→mentioned with→Binance(70%)
- Orion Protocol→mentioned with→Uniswap(60%)
- Binance→mentioned with→Ethereum(65%)
- Uniswap→mentioned with→Ethereum(80%)
Timeline(9 events)
24 May 2021
CertiK completes audit of Orion Protocol's token and sale contracts. The ExchangeWithOrionPool contract is not included in the audit scope.
CertiK Blog2 February 2023
Reentrancy exploit drains approximately $2,836,206 from Orion Protocol's Ethereum deployment and $191,030 from BSC, totaling roughly $3 million. Attacker uses a custom malicious token (ATK) and flash-loaned stablecoins.
CoinDesk2 February 2023
PeckShield and CertiK first identify and publicize the attack. CEO Alexey Koloskov states 'all funds are safe and secure' and attributes the vulnerability to third-party library mixing.
CryptoSlate2 February 2023
Approximately 1,100 ETH of stolen funds are deposited into Tornado Cash by the attacker.
CoinLore / U.Today4 February 2023
Orion Protocol publishes a development update with bug fixes and UI changes. CEO clarifies exploit was contained to an internal broker account; user funds reported unaffected.
BeInCrypto9 February 2023
PeckShield reports an on-chain message from the exploiter's wallet stating willingness to return stolen funds and requesting a refund address from Orion Protocol. No confirmed return is documented in available sources.
Crypto.news15 October 2024
Orion Protocol begins token migration to Lumia (LUMIA) at a 1:1 ratio. Binance, MEXC, Crypto.com, and other major exchanges support the swap. Binance reopens LUMIA/USDT trading on October 18, 2024.
Crypto.newsDecision Log
- slot 455366161 · hash 4ruqS2QuLjDQ6Eo8GzVfJJdEcBFT3z5bWyYtQRCgdkQm
- slot 443508380 · hash 8ma8gQnji64Hq7DKzh3sXfaj8Q7WhFkd9S6Exggd4d26
- slot 424310051 · hash B1fVapucAVzauZByQt7Dw9xsNrcspgBw6nApQLRN4Njm
- slot 424310047 · hash 9SMAoTLaxeznWLVzjMaDmCS4X8umWinkGsGivwctQXXs
- slot 423640347 · hash Eake8xXPE7XDkHgjLGM2GRHXKSnGK9PZvC6K89rnMzMw
This investigation is cryptographically anchored to the Solana blockchain (5 decisions). 15 of 18 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 6/1/2026, 5:48:29 PM
last updated: 10/10/2026, 6:46:21 PM
3 viewsavoid.net — verified advice for a post-truth world