Swan Treasury (STY Token)
Last changed 2026-10-10 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 10 → 41. Problems weighed by who is responsible: concerns that are not fraud −19.2, incidents the subject suffered −10, problems around the subject, caused by others −0.8; fact-check adjustments (−8) now shown as page reliability, not in the score. Version history →
Why this score
| Every page starts at | 65 |
| Concerns that are not fraud | -19.2 |
| Incidents it suffered (e.g. hacks) | -10 |
| Problems around it, caused by others | -0.8 |
| Sum | 35 |
Score: 41/100 (kept between 0 and 100)
How scoring works →Summary
Swan Treasury is a BNB Chain privacy-finance protocol offering anonymous identity, private transactions, dark pool liquidity, on-chain vaults, and a node network, with the STY token serving as its central ecosystem passkey. On July 30, 2026, the protocol suffered an estimated $625,000 loss after an attacker exploited a compromised off-chain signer private key that was hardcoded as the _signer address in the ZhaiquanBuy smart contract. As of August 20, 2026, Swan Treasury has not published a post-mortem or explained how the signer key was exposed, leaving users without clarity on the protocol's current security posture.
Connected Entities
3 entities · 60 linked investigations- Swan Treasury (STY Token)→mentioned with→KuCoin(65%)
- Swan Treasury (STY Token)→mentioned with→Binance(70%)
Connected Through
2 shared actors · 543 investigationsDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- □Binanceorganization
- ♦KuCointoken
Timeline(4 events)
21 June 2026
Swan Treasury publishes a launch announcement for its privacy-finance infrastructure on BNB Chain, with the STY token described as the central ecosystem passkey. No team members are identified.
KuCoin (MetaEra attribution)30 July 2026
Attacker exploits a compromised off-chain signer private key hardcoded in the ZhaiquanBuy contract. Using a PancakeSwap flash loan of approximately 19,700 USDT, the attacker forges discount signatures and purchases approximately 687,000 STY tokens at roughly 1/100th of intended price, then sells them into the STY/USDT pool for approximately $625,000 USDT profit.
crypto.news, cryptonews.net (citing Defimon Alerts)31 July 2026
Blockchain security firm Defimon Alerts publicly reports the exploit. crypto.news and cryptonews.net cover the incident. Swan Treasury has made no public statement.
crypto.news20 August 2026
As of this date, Swan Treasury has not published a post-mortem, explanation of how the signer key was exposed, or any remediation disclosure. The protocol's security posture remains unverified.
Absence of public disclosure — verified via web searchDecision Log
- slot 455362353 · hash 4qhwrN7f1r1hADYMqH6M3Ea12Hp2cbeKCJUj7AL2MKko
- slot 445507214 · hash 69zqvaNeM7sUMsmEWVkgyxUUjzz45vASvNNQTyQqR2Si
- slot 443512219 · hash BRpLvgbhrSt2w3xitnTh9cDWosei6r5DvGG7qxhKNmLX
- slot 443512216 · hash 7WRzPjPsxCGtHtJYHPAvtzsfLBocXZTiXiLJJwMxw5ZK
- slot 443509659 · hash J9moGqUh6v98cHAJuMABGmpuuaKsgnTzGJ79iiqEa9Ca
This investigation is cryptographically anchored to the Solana blockchain (5 decisions). 3 of 4 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 8/20/2026, 5:02:56 PM
last updated: 10/10/2026, 6:42:35 PM
7 viewsavoid.net — verified advice for a post-truth world