Velocore DEX
Last changed 2026-10-10 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 12 → 41. Problems weighed by who is responsible: incidents the subject suffered −20, concerns that are not fraud −13.2, problems around the subject, caused by others −3; legitimacy credit long-running +2; the penalty for incidents it suffered is capped at 20. Version history →
Why this score
| Every page starts at | 65 |
| Concerns that are not fraud | -13.2 |
| Incidents it suffered (e.g. hacks) | -20 |
| Problems around it, caused by others | -3 |
| Long-running | +2 |
| Sum | 31 |
- The penalty for incidents it suffered is capped at 20 points.
Score: 41/100 (kept between 0 and 100)
How scoring works →Summary
Velocore was a ve(3,3) decentralized exchange deployed on zkSync Era and Linea that suffered a critical smart contract exploit on June 2, 2024, resulting in the theft of approximately $6.8 million in ETH. A vulnerability in the protocol's Balancer-style CPMM pool fee calculation logic allowed an attacker to manipulate the feeMultiplier parameter beyond 100%, enabling draining of all volatile liquidity pools. Stolen funds were laundered through Tornado Cash with no recovery, and the hack triggered a controversial unilateral block production halt by Linea's sequencer operator Consensys.
Connected Entities
5 entities · 60 linked investigations- Across Protocol→mentioned with→Ethereum(70%)
- Velocore DEX→mentioned with→Ethereum(80%)
- Velocore DEX→mentioned with→Balancer(70%)
- Velocore DEX→mentioned with→Helius(70%)
- Balancer→mentioned with→Ethereum(70%)
- Velocore DEX→mentioned with→Across Protocol(80%)
Timeline(8 events)
28 May 2023
Velocore announces V2 expansion to Linea, describing it as independent from the zkSync Era deployment.
Velocore Medium2 June 2024
Exploit occurs: attacker manipulates CPMM fee calculation via velocore__execute(), drains all volatile pools on zkSync Era and Linea. Approximately 1,807 ETH (~$6.8–6.9M) stolen.
Rekt News2 June 2024
Linea (Consensys) halts block production and censors attacker addresses to prevent further bridging of stolen funds.
CryptoSlate2 June 2024
Attacker bridges stolen funds from zkSync Era and Linea to Ethereum mainnet via Across Protocol, converting to ~1,807 ETH total before depositing into Tornado Cash.
Merkle Science3 June 2024
Velocore publishes incident post-mortem, offers 10% white-hat bounty (~$680K) to attacker for return of funds. Attacker does not respond.
The Block5 June 2024
Linea reaffirms decentralization roadmap following widespread criticism over its unilateral sequencer halt.
The BlockDecision Log
- slot 455361062 · hash 7pnvPYMB9qntFUJvKAvb7hLJLhdoy3zs6PF43KmBqiTR
- slot 423324683 · hash FysnoEPUHJN1aZSjHi7GCvmpb1CrshFFXt5mR9tdN2TV
This investigation is cryptographically anchored to the Solana blockchain (2 decisions). 15 of 17 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/31/2026, 7:00:20 AM
last updated: 10/10/2026, 6:41:50 PM
6 viewsavoid.net — verified advice for a post-truth world