Summary
Superfluid is an asset streaming and programmable cash flow protocol founded in 2020, deployed across Ethereum, Polygon, and multiple other EVM chains. On February 8, 2022, an attacker exploited a context serialization vulnerability in the protocol's host contract, draining approximately $8.7 million in assets from multiple projects including QiDAO, Stake DAO, Stacker Ventures, and Museum of Crypto Art. The protocol patched the vulnerability within hours, partially compensated affected parties, and has continued operating with additional audits and a native SUP token launch in 2025.
Connected Entities
1 entitiesTimeline(11 events)
2020-01-01
Superfluid protocol founded by Francesco Renzi, Miao, and Michele D'Aliessi
2021-07-13
Superfluid raises $9 million seed round led by Multicoin Capital
2022-02-08
Attacker exploits context serialization vulnerability in Superfluid host contract, draining approximately $8.7 million from vesting contracts across QiDAO, Stake DAO, Stacker Ventures, and Museum of Crypto Art
2022-02-08
Emergency protocol upgrade deployed within ~4 hours of exploit; $1 million bounty offered to attacker for fund return
2022-02-09
Superfluid recapitalizes 80% of affected addresses with direct USDC transfer within 18 hours; longer-term compensation plan negotiated for remaining losses
2022-06-01
Halborn and yAcademy (Electisec) complete post-exploit security audits; no new critical vulnerabilities found
2024-02-22
Superfluid raises $5.1 million strategic round led by Fabric Ventures
2025-02-19
Superfluid introduces SUP governance token with 1 billion total supply; 60% allocated to community
2025-06-04
Sherlock competitive audit of Superfluid Locker System identifies multiple medium-severity vulnerabilities in SUP staking and vesting contracts
2025-08-05
SUP token lists on Binance Alpha; price declines 25-30% within 24 hours on airdrop sell pressure
2025-11-22
Superfluid Token Generation Event (TGE) concludes
Decision Log
- hash: 9CWJa8nkEdFiv6HbigCNePyDatQGAbbZKf7Tsr1CbT49
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:51 AM
last updated: 5/28/2026, 5:37:56 PM
avoid.net — verified advice for a post-truth world