Transit Finance
Last changed 2026-10-10 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 2 → 62. Problems weighed by who is responsible: incidents the subject suffered −9.6, concerns that are not fraud −3.2, problems around the subject, caused by others −2.4; legitimacy credit long-running +8, regulated +5; accepted community evidence −1.4; fact-check adjustments (−18.6) now shown as page reliability, not in the score. Version history →
Why this score
| Every page starts at | 65 |
| Concerns that are not fraud | -3.2 |
| Incidents it suffered (e.g. hacks) | -9.6 |
| Problems around it, caused by others | -2.4 |
| Long-running | +8 |
| Regulated | +5 |
| Accepted community evidence | -1.4 |
| Sum | 61 |
Score: 62/100 (kept between 0 and 100)
How scoring works →Summary
Transit Finance (also known as Transit Swap) is a cross-chain DEX aggregator supporting over 122 decentralized exchanges across Ethereum, BNB Chain, TRON, Solana, Polygon, and other networks. The protocol has suffered two confirmed security exploits: a $28.9 million hack in October 2022 due to an arbitrary external call vulnerability in its routing contract, with approximately $18.9 million recovered; and a second $1.88 million exploit in May 2026 via a deprecated TRON smart contract that remained on-chain and exploitable years after official deprecation. ZachXBT flagged the protocol amid broader DeFi monitoring, and the 2022 attacker routed funds through OFAC-sanctioned Tornado Cash.
Connected Entities
11 entities · 60 linked investigations- Optimism→mentioned with→Arbitrum(65%)
- ZachXBT→mentioned with→Ethereum(70%)
- Optimism→mentioned with→Ethereum(80%)
- ZachXBT→mentioned with→Binance(60%)
- Fantom (Sonic Labs)→mentioned with→Binance(60%)
- Binance→mentioned with→Ethereum(65%)
- Transit Swap→mentioned with→Binance(60%)
- Transit Swap→mentioned with→Solana(65%)
- Transit Swap→mentioned with→Polygon(75%)
- Transit Swap→mentioned with→Ethereum(70%)
- + 18 more
Timeline(11 events)
June 2021
Transit Finance launches Transit Swap as a cross-chain DEX aggregator supporting Ethereum, BNB Chain, TRON, Polygon, and other networks.
8 August 2022
OFAC adds Tornado Cash to the Specially Designated Nationals list. The attacker in the upcoming Transit Finance exploit will use this sanctioned mixer two months later.
2 October 2022
Transit Finance (Transit Swap) suffers first major exploit. An attacker exploits an arbitrary external call vulnerability in the _claimTokens function, draining approximately $21–28.9 million in user-approved tokens across BNB Chain and Ethereum.
3 October 2022
PeckShield, SlowMist, Bitrace, TokenPocket, and CertiK collaborate to track the attacker via IP address, email, and on-chain identifiers. Attacker returns approximately $18.9 million (~70%) and sends 10,000 BNB (~$2M) to Tornado Cash as alleged bug bounty.
6 October 2022
Additional $246,000 recovered from the 2022 attacker per QuillAudits analysis.
10 October 2022
Attacker transfers 10,000 BNB ($2.74M) to victims and separately routes 2,500 BNB ($686K) to OFAC-sanctioned Tornado Cash.
21 October 2022
Transit Swap officially relaunches after a SlowMist security audit. Transit Finance establishes Transit Security Fund (10% of monthly revenue) and announces bug bounty program up to $1 million.
December 2024
U.S. Fifth Circuit Court of Appeals limits OFAC's sanctions authority over Tornado Cash's immutable smart contracts, beginning the process that leads to Tornado Cash delisting.
April 2025
U.S. Treasury delists Tornado Cash from OFAC sanctions following Fifth Circuit ruling.
12 May 2026
Attacker exploits a deprecated TRON-deployed legacy smart contract, draining approximately $1.875 million DAI plus ~1.37 ETH. Funds moved to a newly created Ethereum wallet. PeckShield detects and flags the breach.
13 May 2026
Transit Finance sends on-chain message to attacker offering bug bounty with 48-hour window. Project publicly commits to fully compensating affected users and states current contract version is unaffected. ZachXBT flags the incident.
Decision Log
- #6rescore+60Recording pending10/10/2026, 6:48:54 PMhash 9MpwYdYRNe4UkQnTyAD9Tb5XsmLxrcTXgNKA9Q4FG5Rn
- slot 423217189 · hash GhShrbPopbMag7ZjfpJP5Sgo93Jroqtd8r3xKiXA52hW
- slot 423217187 · hash AdNecy7XvewfBdYTCz9Ptr1rEwB3uihCxsDpVQoeTUPf
- slot 423152755 · hash 38b3uNVg1CZvCKHuUhMpD7tRdc5jRRRgyXZcAUygR8tf
- slot 423152752 · hash AfedKT9hS8pU5qjXTeQwUzYdZXp2riZUFyLHvtWdufAF
- slot 422639876 · hash 7y5rxXzb4kFrHtrJjdGrgNPW4idx1BFJHfUs6ZyFXEpZ
This investigation is cryptographically anchored to the Solana blockchain (5 decisions). 19 of 24 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/28/2026, 3:37:52 AM
last updated: 10/10/2026, 6:48:54 PM
6 viewsavoid.net — verified advice for a post-truth world