Verify a decision

{"actor":"system:backfill","investigation_id":"61bd9389-c198-41d1-9503-211371ac21d4","kind":"publish","page_slug":"pando-rings","published_at":"2026-05-19T20:59:33.896Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Pando Rings","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://pando.im/rings/"},{"credibility":3,"name":"","type":"other","url":"https://github.com/fox-one/pando"},{"credibility":3,"name":"","type":"other","url":"https://leastauthority.com/blog/audits/audit-of-compound-pando-for-fox-one/"},{"credibility":3,"name":"","type":"other","url":"https://docs.pando.im/docs/security/mtg/"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://pando.im/news/2022/2022-11-06-alert-to-pando-community-hack-of-pando-rings/"},{"credibility":3,"name":"","type":"other","url":"https://immunebytes.com/blog/pando-rings-hack-nov-5-2022-detailed-analysis/"},{"credibility":3,"name":"","type":"other","url":"https://www.web3isgoinggreat.com/?id=pando-exploited-for-20-million"},{"credibility":3,"name":"","type":"other","url":"https://x.com/pando_im/status/1589113232899575809"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://pando.im/news/2022/2022-11-06-alert-to-pando-community-hack-of-pando-rings/"},{"credibility":3,"name":"","type":"other","url":"https://immunebytes.com/blog/pando-rings-hack-nov-5-2022-detailed-analysis/"},{"credibility":3,"name":"","type":"other","url":"https://x.com/pando_im/status/1589113232899575809"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://github.com/fox-one/pando"},{"credibility":3,"name":"","type":"other","url":"https://leastauthority.com/blog/audits/audit-of-compound-pando-for-fox-one/"},{"credibility":3,"name":"","type":"other","url":"https://docs.pando.im/docs/security/mtg/"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://pando.im/news/2022/2022-11-06-alert-to-pando-community-hack-of-pando-rings/"},{"credibility":3,"name":"","type":"other","url":"https://pando.im/news/2023/2023-10-24-rings-and-leaf-resumes-collateral-redemption-and-withdrawal/"},{"credibility":3,"name":"","type":"other","url":"https://pando.im/news/2023/2023-12-18-further-service-restoration-of-pando-leaf/"},{"credibility":3,"name":"","type":"other","url":"https://www.halborn.com/blog/post/explained-the-mixin-network-hack-september-2023"},{"credibility":3,"name":"","type":"other","url":"https://defillama.com/protocol/pando-rings"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://pando.im/news/2022/2022-11-06-alert-to-pando-community-hack-of-pando-rings/"},{"credibility":3,"name":"","type":"other","url":"https://www.halborn.com/blog/post/explained-the-mixin-network-hack-september-2023"},{"credibility":3,"name":"","type":"other","url":"https://defillama.com/protocol/pando-rings"},{"credibility":3,"name":"","type":"other","url":"https://immunebytes.com/blog/pando-rings-hack-nov-5-2022-detailed-analysis/"}]}],"sources_used":[],"summary":"Pando Rings is an algorithmic lending and borrowing protocol built on the Mixin Network by Fox One, modeled on Compound Finance. On November 5, 2022, an attacker exploited a price oracle vulnerability tied to the sBTC-WBTC LP token on 4swap to drain approximately $21.9 million in ETH, BTC, and EOS from the protocol; an additional ~$50 million remained frozen in the attacker's wallets. The protocol subsequently suffered further losses in the September 2023 Mixin Network infrastructure breach, and as of late 2023 remained in a limited operational state with interest accrual and liquidations suspended.","timeline":[{"date":"2021-08-04","event":"Pando Seed (PS) launched with backing from BigONE, Exin, FOX, Poolin, and the Mixin team, formalizing the multi-stakeholder MTG governance structure.","source":""},{"date":"2021-10-20","event":"Least Authority completes security audit of Pando Rings (then called Compound on Mixin) and Pando Leaf on behalf of Fox One.","source":""},{"date":"2022-11-05","event":"Attacker exploits the Pando Rings price oracle by manipulating the sBTC-WBTC LP token price on 4swap. Approximately $70 million in theft attempted; $21,877,098.03 in ETH, BTC, and EOS successfully transferred out before intervention. TVL drops ~44%.","source":""},{"date":"2022-11-06","event":"Pando publicly discloses the hack, halts all protocol services, engages SlowMist for tracing, contacts law enforcement, and pledges full reimbursement to affected users. Approximately $50 million in funds frozen in attacker wallets with Mixin Network assistance. ~$2.36 million in EOS frozen.","source":""},{"date":"2022-11-06","event":"Pando posts public ETH refund address (0xfB42824eda8b29873839e6d89FEc2857c1a4E2dF) seeking negotiated return of stolen funds.","source":""},{"date":"2023-09-23","event":"Mixin Network suffers a separate $200 million infrastructure breach via its Google Cloud database. Pando users suffer additional losses: USDT (ERC20) down ~90%, ETH down ~70%, BTC down ~10%, BOX down ~7.3%.","source":""},{"date":"2023-10-17","event":"Pando Swap (4swap) resumes liquidity management functions.","source":""},{"date":"2023-10-24","event":"Pando Rings and Pando Leaf resume limited collateral redemption and debt repayment. Interest accrual and liquidations remain paused.","source":""},{"date":"2023-12-18","event":"Pando announces further service restoration for Pando Leaf on the legacy Mixin Network. Full restoration contingent on new Mixin Mainnet launch.","source":""}]},"v":1}