Verify a decision

{"actor":"system:backfill","investigation_id":"6c390b17-a6a4-412c-bbbc-5c3bb1f0210d","kind":"publish","page_slug":"vestra-dao","published_at":"2026-05-30T04:56:37.810Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Vestra DAO","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coingecko.com/en/coins/vestra-dao","type":"other","url":""},{"credibility":3,"name":"https://etherscan.io/token/0x92d5942f468447f1f21c2092580f15544923b434","type":"other","url":""},{"credibility":3,"name":"https://skynet.certik.com/projects/vestradao","type":"other","url":""},{"credibility":3,"name":"https://docs.vestradao.com/cmle-nft-community/brolyz","type":"other","url":""},{"credibility":3,"name":"https://app.uniswap.org/explore/tokens/ethereum/0x92d5942f468447f1f21c2092580f15544923b434","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/coinmonks/overview-c1a710e0ea9f","type":"other","url":""},{"credibility":3,"name":"https://news.shib.io/2024/12/06/vestra-dao-suffers-500k-exploit-token-plunges-50/","type":"other","url":""},{"credibility":3,"name":"https://www.binance.com/en/square/post/12-06-2024-vestra-dao-faces-cyber-attack-exploiting-staking-contract-flaw-17201499210818","type":"other","url":""},{"credibility":3,"name":"https://coinsbench.com/vestra-dao-500k-exploit-a-simple-breakdown-4d9436856c17","type":"other","url":""},{"credibility":3,"name":"https://cryptopanic.com/news/20366782/Vestra-DAO-Smart-Contract-Exploited-480K-Lost-What-Happened-Vestra-DAOs-VSTR-token-fell-victim-to-a-smart-contract-exploit-draining-480000-Aftermath-Stolen-tokens-converted-to-ETH-and-laundered-via-Tornado-Cash-Impact-VSTR-price-dropped-50-users-urged","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://skynet.certik.com/projects/vestradao","type":"other","url":""},{"credibility":3,"name":"https://medium.com/coinmonks/overview-c1a710e0ea9f","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://news.shib.io/2024/12/06/vestra-dao-suffers-500k-exploit-token-plunges-50/","type":"other","url":""},{"credibility":3,"name":"https://www.coingecko.com/en/coins/vestra-dao","type":"other","url":""},{"credibility":3,"name":"https://coincodex.com/crypto/vestra-dao/","type":"other","url":""},{"credibility":3,"name":"https://www.geckoterminal.com/eth/pools/0x2349a69875aad7beb787f6f230ea2d71a52d6283","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://news.shib.io/2024/12/06/vestra-dao-suffers-500k-exploit-token-plunges-50/","type":"other","url":""},{"credibility":3,"name":"https://www.binance.com/en/square/post/12-04-2024-vestra-dao-faces-ongoing-hack-with-significant-losses-17117929990841","type":"other","url":""},{"credibility":3,"name":"https://www.mitrade.com/insights/news/live-news/article-3-504835-20241205","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/coinmonks/overview-c1a710e0ea9f","type":"other","url":""},{"credibility":3,"name":"https://coinsbench.com/vestra-dao-500k-exploit-a-simple-breakdown-4d9436856c17","type":"other","url":""},{"credibility":3,"name":"https://news.shib.io/2024/12/06/vestra-dao-suffers-500k-exploit-token-plunges-50/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://skynet.certik.com/projects/vestradao","type":"other","url":""},{"credibility":3,"name":"https://vestradao.com/team","type":"other","url":""},{"credibility":3,"name":"https://www.rootdata.com/Projects/detail/Vestra%20DAO?k=MTUxMTM%3D","type":"other","url":""}]}],"sources_used":[],"summary":"Vestra DAO is an Ethereum-based DeFi and SocialFi protocol operating the VSTR token, launched in late 2024. On December 4, 2024, the protocol suffered a critical smart contract exploit in its staking contract that drained approximately $480,000–$500,000 worth of VSTR tokens — an attack that occurred less than one month after the token began trading. Stolen funds were laundered through Tornado Cash, the token price collapsed by roughly 50%, and the project's ability to fully compensate affected users remains unresolved.","timeline":[{"date":"2023-03-01","event":"Vestra DAO project inception date per CertiK records.","source":""},{"date":"2024-08-05","event":"CertiK delivered second security audit; 14 findings identified including 3 major issues; no critical issues flagged.","source":""},{"date":"2024-10-29","event":"CertiK granted Vestra DAO a Gold team verification badge with 4 verified core team members.","source":""},{"date":"2024-11-01","event":"VSTR token begins trading on Uniswap V3 (approximate date, approximately one month before the exploit).","source":""},{"date":"2024-11-04","event":"Attacker stakes 500,000 VSTR in the locked staking contract, beginning a one-month preparation phase for the exploit.","source":""},{"date":"2024-12-04","event":"Exploit executed: attacker repeatedly called unStake() on an inactive staking position, draining approximately 73,720,000 VSTR (~$480,000–$500,000). VSTR price collapsed from ~$0.013 to ~$0.005.","source":""},{"date":"2024-12-05","event":"Vestra DAO team publicly acknowledged the exploit on X, blacklisted the compromised staking contract, and offered attacker a 20% white-hat bounty. Stolen ETH (~125 ETH) began moving through Tornado Cash.","source":""},{"date":"2024-12-06","event":"Multiple crypto news outlets report on the incident. Team announces removal of 755,631,188 VSTR from circulation to protect tokenomics. Bounty negotiations with attacker fail.","source":""},{"date":"2025-04-01","event":"Brolyz SocialFi platform open beta launch was scheduled per roadmap; independent verification of delivery is not available in public sources.","source":""}]},"v":1}