Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·553pkA…y3pSSummary
StableMagnet was a stablecoin yield and DEX protocol launched on Binance Smart Chain (BSC) that executed a deliberate rug pull on June 23-24, 2021, stealing approximately $27 million in USDT, USDC, and BUSD from over 1,000 users. The team concealed a malicious backdoor by substituting an unverified SwapUtils library for the one shown in publicly audited source code — a novel attack vector that exposed a critical gap in how block explorers verify linked library code. Following an anonymous white-hat investigation and Manchester police arrests, most of the stolen funds were eventually returned by late 2022.
Connected Entities
7 entities · 60 linked investigations- StableMagnet→mentioned with→ZachXBT(70%)
- StableMagnet→mentioned with→Ethereum(70%)
- StableMagnet→mentioned with→Polygon(60%)
- StableMagnet→mentioned with→Multichain(75%)
- StableMagnet→mentioned with→Binance(70%)
- ZachXBT→mentioned with→Ethereum(70%)
- ZachXBT→mentioned with→Binance(60%)
- Binance→mentioned with→Ethereum(65%)
- Cointelegraph→mentioned with→ZachXBT(70%)
- Cointelegraph→mentioned with→Ethereum(60%)
- + 6 more
Connected Through
6 shared actors · 611 investigationsDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- □Ethereumorganization
- □ZachXBTorganization
- □Binanceorganization
- □Polygonorganization
Timeline(7 events)
June 2021
StableMagnet launches on Binance Smart Chain, offering a USDT/USDC/BUSD 3Pool stablecoin DEX with a TechRate audit in place.
23 June 2021
StableMagnet team activates malicious backdoor in the unverified SwapUtils library (0xE25d05777BB4bD0FD0Ca1297C434e612803eaA9a), draining approximately $22.2 million in USDT, USDC, and BUSD from the 3Pool and sweeping tokens from wallets with open approvals. Total losses reach approximately $27 million.
24 June 2021
PeckShield alerts the crypto community on Twitter that StableMagnet's SwapUtils library is unverified and different from the main swap contract source code, urging users to revoke approvals immediately. Rekt News publishes a detailed post-mortem.
24 June 2021
Stolen funds are bridged from BSC to Ethereum via AnySwap/Multichain and converted from USDT to DAI in an apparent laundering attempt. All StableMagnet websites and social media accounts go offline.
July 2021
Halborn publishes detailed technical analysis of the library substitution attack vector, noting the structural verification gap in Etherscan and BscScan.
30 January 2022
An anonymous white-hat hacker goes public (via CoinTelegraph and Bankless Times coverage) with details of their investigation: they identified alleged perpetrators as Hong Kong-based individuals, tracked their travel to Manchester, UK, and cooperated with Manchester police, who arrested suspects and recovered approximately $9 million from a USB device.
December 2022
Approximately $24 million of the originally stolen $27 million is reported returned to victims, following arrests and cooperation from alleged co-conspirators, per Quadriga Initiative records.
Decision Log
- slot 422206362 · hash 3PVBfqYyCfFXp1Th3CXautPJ8tJDL44mQksNVz4N3ort
This investigation is cryptographically anchored to the Solana blockchain (1 decision). 9 of 11 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:56 AM
last updated: 8/29/2026, 1:36:10 AM
8 viewsavoid.net — verified advice for a post-truth world