Pando Rings
Summary
Pando Rings is an algorithmic lending and borrowing protocol built on the Mixin Network by Fox One, modeled on Compound Finance. On November 5, 2022, an attacker exploited a price oracle vulnerability tied to the sBTC-WBTC LP token on 4swap to drain approximately $21.9 million in ETH, BTC, and EOS from the protocol; an additional ~$50 million remained frozen in the attacker's wallets. The protocol subsequently suffered further losses in the September 2023 Mixin Network infrastructure breach, and as of late 2023 remained in a limited operational state with interest accrual and liquidations suspended.
Connected Entities
1 entitiesTimeline(9 events)
2021-08-04
Pando Seed (PS) launched with backing from BigONE, Exin, FOX, Poolin, and the Mixin team, formalizing the multi-stakeholder MTG governance structure.
2021-10-20
Least Authority completes security audit of Pando Rings (then called Compound on Mixin) and Pando Leaf on behalf of Fox One.
2022-11-05
Attacker exploits the Pando Rings price oracle by manipulating the sBTC-WBTC LP token price on 4swap. Approximately $70 million in theft attempted; $21,877,098.03 in ETH, BTC, and EOS successfully transferred out before intervention. TVL drops ~44%.
2022-11-06
Pando publicly discloses the hack, halts all protocol services, engages SlowMist for tracing, contacts law enforcement, and pledges full reimbursement to affected users. Approximately $50 million in funds frozen in attacker wallets with Mixin Network assistance. ~$2.36 million in EOS frozen.
2022-11-06
Pando posts public ETH refund address (0xfB42824eda8b29873839e6d89FEc2857c1a4E2dF) seeking negotiated return of stolen funds.
2023-09-23
Mixin Network suffers a separate $200 million infrastructure breach via its Google Cloud database. Pando users suffer additional losses: USDT (ERC20) down ~90%, ETH down ~70%, BTC down ~10%, BOX down ~7.3%.
2023-10-17
Pando Swap (4swap) resumes liquidity management functions.
2023-10-24
Pando Rings and Pando Leaf resume limited collateral redemption and debt repayment. Interest accrual and liquidations remain paused.
2023-12-18
Pando announces further service restoration for Pando Leaf on the legacy Mixin Network. Full restoration contingent on new Mixin Mainnet launch.
Decision Log
- hash: FPvpt8Ms73Woqbomovn4vavGLa9otvFsimD9MHthAMxS
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:46 AM
last updated: 5/19/2026, 8:59:33 PM
avoid.net — verified advice for a post-truth world