SIR.trading
Last changed 2026-10-10 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 30 → 61. Problems weighed by who is responsible: incidents the subject suffered −13.2, concerns that are not fraud −6, problems around the subject, caused by others −2.6; legitimacy credit long-running +8; fact-check adjustments (−8) now shown as page reliability, not in the score. Version history →
Why this score
| Every page starts at | 65 |
| Concerns that are not fraud | -6 |
| Incidents it suffered (e.g. hacks) | -13.2 |
| Problems around it, caused by others | -2.6 |
| Long-running | +8 |
| Sum | 51 |
Score: 61/100 (kept between 0 and 100)
How scoring works →Summary
SIR.trading (Synthetics Implemented Right) is an Ethereum-based DeFi protocol launched on February 20, 2025, offering leveraged trading without liquidation risk or volatility decay. On March 30, 2025, an attacker exploited a transient storage vulnerability in the protocol's Vault contract to drain the entire $355,000 TVL — one of the first documented real-world exploits targeting Ethereum's EIP-1153 transient storage feature introduced in the Dencun upgrade. The protocol subsequently relaunched after completing additional security audits, but no stolen funds were recovered.
Connected Entities
5 entities · 60 linked investigations- SIR.trading→mentioned with→Ethereum(80%)
- SIR.trading→mentioned with→Railgun(70%)
- SIR.trading→mentioned with→Uniswap(70%)
- Uniswap→mentioned with→Ethereum(80%)
- SIR.trading→mentioned with→SIR (Synthetics Implemented Right)(70%)
- Railgun→mentioned with→Uniswap(60%)
- Railgun→mentioned with→Ethereum(80%)
Timeline(8 events)
2021
Pseudonymous founder Xatarrer begins developing SIR.trading over approximately four years without venture capital funding, supported by approximately $70,000 from community contributors.
Rekt News2025
Egis Security completes security audit of SIR.trading, finding 3 high-severity, 2 medium-severity, and 2 low-severity issues. The transient storage slot collision vulnerability is not identified.
Rekt News / GitHub Egis-Security30 January 2025
Attacker deploys malicious ERC-20 tokens and creates a controlled Uniswap V3 liquidity pool, beginning preparation for the exploit at 6:18 UTC.
Blockscope Research20 February 2025
SIR.trading launches on Ethereum mainnet, growing to approximately $355,000–$400,000 TVL through organic growth without advertising.
Rekt News30 March 2025
Attacker exploits transient storage slot collision in the Vault contract's uniswapV3SwapCallback function, draining the entire $355,000 TVL in USDC, wBTC, and wETH. Stolen assets are immediately routed through Railgun. The exploit is detected by TenArmorAlert and Decurity.
CoinTelegraph31 March 2025
Founder Xatarrer issues on-chain plea to the attacker, offering $100,000 bounty to keep as compensation for the bug discovery and requesting the return of the remaining ~$255,000, pledging no legal action. Describes the event as 'the worst news a protocol can receive.'
Crypto.newsApril 2025
Attacker does not respond to bounty offer. Stolen funds remain in Railgun. SIR team announces intent to relaunch and begins seeking auditors willing to accept token equity in lieu of payment.
Rekt News2025
Protocol relaunches at app.sir.trading following completion of four independent security audits. No stolen funds recovered. Relaunch expands to HyperEVM and MegaETH networks in addition to Ethereum.
SIR Official DocumentationDecision Log
- slot 455368051 · hash jtyomuL8yzdnH4nHVWsVXYChcHE6f1cyKAhVUJYr4qQ
- slot 424157098 · hash 6KQPD755JmpA3pqvaazrNgQ8dbiko285Gse7hT6mafc9
- slot 424157093 · hash 78NDnCeBSg3ZsvrmJh4Gk3aFZQkVMdEQkuaD8XmqCT88
- slot 423640472 · hash nBZ8aRNPEanGzmTKfCGfRxGEHaadug2Nj6YAY7MWaan
This investigation is cryptographically anchored to the Solana blockchain (4 decisions). 16 of 17 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 6/1/2026, 5:49:20 PM
last updated: 10/10/2026, 6:48:05 PM
3 viewsavoid.net — verified advice for a post-truth world