Skip to main content
AVOID.NET

Sirio Finance

avoid.net/sirio-finance→28/100·72% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·32iKGu…9GLp

Summary

Sirio Finance is a DeFAI lending and borrowing protocol built on the Hedera blockchain that launched on January 27, 2025 and suffered a flashloan exploit on February 1, 2025, resulting in an estimated $2–3 million in stolen funds. The exploit occurred within five days of mainnet launch, with post-incident analysis indicating the vulnerability was introduced when the team followed an audit directive from QuillAudits to remove a reentrancy guard from the protocol's smart contracts. The protocol's TVL collapsed to near zero following the hack, and no confirmed recovery of stolen funds or full user compensation has been publicly documented.

Connected Entities

7 entities · 60 linked investigations
Relationships
  • Filecoin→mentioned with→Binance(70%)
  • Sirio Finance→mentioned with→Binance(70%)
  • Sirio Finance→mentioned with→Filecoin(60%)
  • Sirio Finance→mentioned with→Hedera(80%)
  • ChangeNOW→mentioned with→Binance(65%)
  • Sirio Finance→mentioned with→ChangeNOW(60%)
  • Sirio Finance→mentioned with→SIR (Synthetics Implemented Right)(70%)
  • Sirio Finance→mentioned with→Bonzo Finance(80%)
  • Bonzo Finance→mentioned with→Hedera(80%)

Connected Through

6 shared actors · 529 investigations

Distinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.

Have evidence about Sirio Finance?

Timeline(6 events)

27 January 2025

Sirio Finance launches its mainnet DeFAI lending and borrowing protocol on the Hedera blockchain, becoming the first lending protocol on the network.

29 January 2025

Sirio Finance reports reaching a $1.5 million TVL milestone, citing strong early user adoption.

February 2025

Sirio Finance is exploited via three flashloan attacks executed through Bonzo Finance. The HSUITE pool is specifically compromised. Estimated $2–3 million is stolen. Smart contracts are immediately frozen.

3 February 2025

Sirio Finance team states it is collaborating with the Hedera Foundation, using Elliptic and TRM Labs to track stolen funds, and has attempted to contact the attacker via multiple addresses with a whitehat recovery offer.

4 February 2025

Sirio Finance team provides community update on three key areas: Stolen Funds Tracking, Withdrawal of Left Funds, and the Recovery Program. Reports submission of complaint to CSIRT and contact established with Binance via Seal911 ticket.

4 February 2025

Post-incident analysis indicates the critical vulnerability was introduced when the protocol followed a QuillAudits audit directive to remove a reentrancy guard. Sirio Finance team publicly disassociates from QuillAudits.

Provenance & Audit Trail

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event). 7 of 11 cited source URLs have an Internet Archive snapshot.

model: claude-sonnet-4-6

generated: 5/4/2026, 2:54:25 AM

last updated: 8/29/2026, 12:34:20 PM

3 views

avoid.net — verified advice for a post-truth world