Skip to main content
AVOID.NET

Swan Treasury (STY Token)

avoid.net/swan-treasury-sty-token→10/100·72% conf.
[AI-DRAFTED · AWAITING FACT-CHECK]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·2xfsKH…L6nA
last updated 2026-08-25

Summary

Swan Treasury is a BNB Chain privacy-finance protocol offering anonymous identity, private transactions, dark pool liquidity, on-chain vaults, and a node network, with the STY token serving as its central ecosystem passkey. On July 30, 2026, the protocol suffered an estimated $625,000 loss after an attacker exploited a compromised off-chain signer private key that was hardcoded as the _signer address in the ZhaiquanBuy smart contract. As of August 20, 2026, Swan Treasury has not published a post-mortem or explained how the signer key was exposed, leaving users without clarity on the protocol's current security posture.

Connected Entities

3 entities · 60 linked investigations
Organizations
Tokens
♦KuCoin28♦Swan Treasury (STY Token)
Relationships
  • Swan Treasury (STY Token)→mentioned with→Binance(70%)
  • Swan Treasury (STY Token)→mentioned with→KuCoin(65%)

Connected Through

2 shared actors · 543 investigations

Distinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.

Have evidence about Swan Treasury (STY Token)?

Timeline(4 events)

21 June 2026

Swan Treasury publishes a launch announcement for its privacy-finance infrastructure on BNB Chain, with the STY token described as the central ecosystem passkey. No team members are identified.

KuCoin (MetaEra attribution)

30 July 2026

Attacker exploits a compromised off-chain signer private key hardcoded in the ZhaiquanBuy contract. Using a PancakeSwap flash loan of approximately 19,700 USDT, the attacker forges discount signatures and purchases approximately 687,000 STY tokens at roughly 1/100th of intended price, then sells them into the STY/USDT pool for approximately $625,000 USDT profit.

crypto.news, cryptonews.net (citing Defimon Alerts)

31 July 2026

Blockchain security firm Defimon Alerts publicly reports the exploit. crypto.news and cryptonews.net cover the incident. Swan Treasury has made no public statement.

crypto.news

20 August 2026

As of this date, Swan Treasury has not published a post-mortem, explanation of how the signer key was exposed, or any remediation disclosure. The protocol's security posture remains unverified.

Absence of public disclosure — verified via web search
Provenance & Audit Trail

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (4 events). 3 of 4 cited source URLs have an Internet Archive snapshot.

Fact-checked 2026-09-0725 claims checked1 correction pending0 applied⛓ anchoredSee findings →

model: claude-sonnet-4-6

generated: 8/20/2026, 5:02:56 PM

last updated: 8/25/2026, 7:20:29 AM

7 views

avoid.net — verified advice for a post-truth world