Velocore DEX

avoid.net/velocore→12/100·82% conf.

[AI-DRAFTED · AWAITING VERIFICATION]

12/100

[CRITICAL]82% conf.[Provisional]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

Summary

Velocore was a ve(3,3) decentralized exchange deployed on zkSync Era and Linea that suffered a critical smart contract exploit on June 2, 2024, resulting in the theft of approximately $6.8 million in ETH. A vulnerability in the protocol's Balancer-style CPMM pool fee calculation logic allowed an attacker to manipulate the feeMultiplier parameter beyond 100%, enabling draining of all volatile liquidity pools. Stolen funds were laundered through Tornado Cash with no recovery, and the hack triggered a controversial unilateral block production halt by Linea's sequencer operator Consensys.

Connected Entities

1 entities · 10 linked investigations

Exchanges

△Velocore DEX

Relationships

Also appears in

edgeX Exchange·28 Saga EVM Blockchain·32 Mach-O Man Malware Campaign (Lazarus / Chollima)·0 Q2 2026 DeFi Record Hack Wave·0 Gamma Strategies·28 Alephium Bridge·18 Bunni Protocol·28 BitGrail·2 Interpol Operation First Light 2026 — $123M Romance Scam Crypto Network·0 BonkDAO Treasury Governance Attack (July 2026)·0

Have evidence about Velocore DEX?

Timeline(8 events)

April 2023

Velocore launches as the first ve(3,3) DEX on zkSync Era mainnet.

Velocore Medium

August 2023

Velocore V2 completes three security audits by Zokyo, Hacken, and Scalebit.

Velocore Docs

28 May 2023

Velocore announces V2 expansion to Linea, describing it as independent from the zkSync Era deployment.

Velocore Medium

2 June 2024

Exploit occurs: attacker manipulates CPMM fee calculation via velocore__execute(), drains all volatile pools on zkSync Era and Linea. Approximately 1,807 ETH (~$6.8–6.9M) stolen.

Rekt News

2 June 2024

Linea (Consensys) halts block production and censors attacker addresses to prevent further bridging of stolen funds.

CryptoSlate

2 June 2024

Attacker bridges stolen funds from zkSync Era and Linea to Ethereum mainnet via Across Protocol, converting to ~1,807 ETH total before depositing into Tornado Cash.

Merkle Science

3 June 2024

Velocore publishes incident post-mortem, offers 10% white-hat bounty (~$680K) to attacker for return of funds. Attacker does not respond.

The Block

5 June 2024

Linea reaffirms decentralization roadmap following widespread criticism over its unilateral sequencer halt.

The Block

Provenance & Audit Trail

Anchored on Solana Verify on-chain15 Wayback Archives