Verify a decision

{"actor":"system:backfill","investigation_id":"e92fd795-e2ee-4446-aae1-5a25cc8aaeca","kind":"publish","page_slug":"cod3x","published_at":"2026-05-28T18:59:25.928Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Cod3x","sections":[{"content":"Cod3x is the product of a multi-stage consolidation of protocols built by the Byte Masons, a development collective founded in June 2021 on the Fantom blockchain by Justin Bebis. The original flagship product was Reaper Farm, a yield aggregator. Over time the team launched Granary Finance (a multi-chain lending market), Ethos Reserve (a CDP-backed stablecoin on Optimism), and the OATH governance token. In May 2024 the team announced the Cod3x rebrand, consolidating Granary V2 into 'Cod3x Lend' and Ethos Reserve into 'Cod3x CDP', while pivoting strategy toward AI-powered autonomous financial agents under the 'DeFAI' label. The official CDX token generation event (TGE) was held on February 17, 2025, coinciding with a 'DeFAI Summit' hosted by the team. Legacy OATH and GRAIN token holders who migrated before the October 29, 2024 deadline received CDX allocations.","heading":"Background and Rebranding History","severity":"low","sources":[{"credibility":2,"name":"Introducing Cod3x: A New Era in AI-Driven DeFi","type":"official","url":"https://www.cod3x.org/introducing-cod3x-a-new-era-in-ai-driven-defi/"},{"credibility":3,"name":"Exploring the Future of DeFi: Byte Masons and the OATH Ecosystem","type":"research","url":"https://claplace.substack.com/p/exploring-the-future-of-defi-byte"},{"credibility":2,"name":"CDX: What to Expect","type":"official","url":"https://www.cod3x.org/cdx-what-to-expect/"}]},{"content":"The team operates under the 'Byte Masons' brand and is led by Justin Bebis, who operates under his real name and has a publicly available LinkedIn profile. Bebis is described as a self-taught programmer and has given multiple on-record interviews and public talks. As of early 2022 the team comprised approximately 28 contributors, including 16 software engineers. The team has explicitly marketed itself as bootstrapped, having launched the OATH token after eight months of operation without VC or external raises. No external venture capital or institutional investor backing has been publicly disclosed for Cod3x as of this writing. The 'Conclave Strategic Reserve' — which holds 35% of the CDX total supply across four tranches with cliffs at 6, 12, 30, and 48 months — is described as a team and operational reserve, though the specific beneficiary breakdown has not been fully disclosed in public documentation. The team's pre-announcement statement that 'nothing is set in stone' regarding token economics introduced some uncertainty ahead of TGE.","heading":"Team and Founder Transparency","severity":"medium","sources":[{"credibility":2,"name":"Justin Bebis — Founder of Ethos Reserve and Byte Masons: Interview","type":"other","url":"https://www.youtube.com/watch?v=WxeAIFlrr2Q"},{"credibility":2,"name":"Guest Post: Deconstructing a Fantom Engineering Team","type":"news_article","url":"https://blog.fantom.foundation/guest-post-deconstructing-a-fantom-engineering-team/"},{"credibility":2,"name":"CDX: The Cod3x Token — Tokenomics","type":"official","url":"https://www.cod3x.org/cdx-the-cod3x-token/"}]},{"content":"On August 1, 2022, Reaper Farm, the Byte Masons' flagship yield aggregator on the Fantom network, suffered a $1.7 million exploit. Attackers discovered an access-control vulnerability in the multi-strategy vault contracts that allowed withdrawal of any user's funds to an arbitrary recipient address due to missing recipient verification. The attacker bridged stolen funds to Ethereum and laundered them through Tornado Cash. The Reaper Farm team responded by using the same vulnerability to proactively drain remaining at-risk vaults before the attacker could, and publicly committed to full user compensation. The recovery plan announced in August 2022 included a sale of vested OATH tokens from the treasury combined with other existing assets to repay affected users. A full external audit of the affected contracts was also pledged. Reaper Farm maintained an active Immunefi bug bounty program and had previously engaged CertiK for audits of new strategies prior to the exploit. No public record of a confirmed hack by ZachXBT or other major on-chain investigators has been found for this incident beyond standard event reporting.","heading":"Reaper Farm Exploit (August 2022)","severity":"high","sources":[{"credibility":2,"name":"Reaper Farm exploited for around $1.7 million — Web3 Is Going Great","type":"news_article","url":"https://www.web3isgoinggreat.com/single/reaper-farm-exploited-for-around-1-7-million"},{"credibility":2,"name":"Reaper Farm's Hack Recovery Plan Includes OATH Token Sale — The Layer","type":"news_article","url":"https://thelayer.xyz/reaper-farms-hack-recovery-plan-includes-oath-token-sale/"},{"credibility":2,"name":"Reaper Farm Bug Bounties — Immunefi","type":"other","url":"https://immunefi.com/bug-bounty/reaperfarm/scope/"},{"credibility":2,"name":"CertiK — Byte Masons DeFi, Reaper Farm, Ethos Reserve","type":"research","url":"https://www.certik.com/resources/blog/video/TUBNOQQnHxO3RFqbiVFF7-byte-masons-or-defi-reaper-farm-yield-ethos-reserve-security-and-more-or"}]},{"content":"In February 2025, Ionic Money — a lending protocol in the Mode network ecosystem — suffered an exploit via social engineering, in which an attacker minted a fraudulent LBTC token and used it as collateral to drain liquidity. Losses were reported at approximately 1,204 ETH ($3.2 million) across the Mode network plus additional losses on the Base network. Ironclad Finance, a lending market connected to the broader Byte Masons and Cod3x ecosystem deployed on Mode, was affected by contagion from this incident, as the attacker's downstream actions left Ironclad and other protocols holding devalued or worthless collateral. Cod3x acknowledged in its March 2025 community newsletter that Ironclad had 'gone through some turbulent times' due to the Ionic exploit contagion and was working toward resolution. The exploit was not a direct attack on Cod3x smart contracts, but it demonstrated residual ecosystem risk from interconnected protocol dependencies.","heading":"Ionic Money Exploit Contagion (February 2025)","severity":"high","sources":[{"credibility":2,"name":"Ionic Money — Rekt News","type":"news_article","url":"https://rekt.news/ionic-money-rekt"},{"credibility":2,"name":"Explained: The Ionic Money Hack (February 2025) — Halborn","type":"research","url":"https://www.halborn.com/blog/post/explained-the-ionic-money-hack-february-2025"},{"credibility":2,"name":"Cod3x Monthly Community Newsletter: March 2025","type":"official","url":"https://www.cod3x.org/cod3x-monthly-community-newsletter-march-2025/"}]},{"content":"The CDX token launched on February 17, 2025 on Base and Solana (via Hyperlane), with additional liquidity on the Sophon network. The token reached an all-time high of approximately $0.25 on February 18–19, 2025, at a fully diluted valuation of roughly $25 million based on a maximum supply of 100 million CDX. By May 9, 2025, CDX had fallen to an all-time low of approximately $0.017, a decline of over 93% from peak. As of May 2026 the token trades at approximately $0.035–0.04, with a market capitalization of roughly $1.75–2.1 million and a circulating supply of approximately 49 million CDX. Twenty-four-hour trading volume is low (below $500), concentrated on Uniswap V4 on Base, indicating limited secondary market liquidity. The FDV-to-market-cap ratio is approximately 1.0, suggesting the circulating supply is near the maximum supply. No major centralized exchange listings have been confirmed. The post-TGE price decline from ATH exceeds 80%, which is consistent with the broader DeFAI narrative token cycle of early 2025 rather than a project-specific anomaly, though the low absolute liquidity is a risk factor.","heading":"CDX Token Performance and Market Data","severity":"medium","sources":[{"credibility":2,"name":"Cod3x Price — CoinGecko","type":"other","url":"https://www.coingecko.com/en/coins/cod3x"},{"credibility":2,"name":"Cod3x Price — CryptoRank","type":"other","url":"https://cryptorank.io/price/cod-3-x"},{"credibility":2,"name":"CDX on DEX Screener (Base/Uniswap)","type":"on_chain","url":"https://dexscreener.com/base/0xb392363e7ab01cd50a68b895323f254a82d9107f1097515eba04436ca71ad77f"}]},{"content":"According to official Cod3x documentation, the CDX maximum supply is 100 million tokens distributed as follows: approximately 46.52% was liquid at TGE, of which 28.26% went to legacy token migrators (OATH/GRAIN holders), 10% to protocol-owned liquidity, 4.3% to partner communities, 2.26% to core contributors, and 1.7% to external contributors (partially vested). A further 35% of total supply is held in the 'Conclave Strategic Reserve' with four unlock tranches at 6-, 12-, 30-, and 48-month cliffs from TGE. The remaining approximately 18.48% is allocated to community incentives under a 'Proof of Productivity' framework and ecosystem grants. The team adopted a high-float, low-FDV model explicitly intended to avoid the low-float unlock dynamic common in 2024-era token launches. All migrated tokens were 100% unlocked at TGE with no individual vesting. The 35% Conclave Reserve held by the team with long-dated unlock tranches is the primary concentration risk, representing a meaningful potential future supply overhang. No external VC allocation has been publicly disclosed, and no VC investors have been identified through public databases including RootData.","heading":"Token Distribution and Allocation Transparency","severity":"medium","sources":[{"credibility":2,"name":"CDX: The Cod3x Token — Official Tokenomics","type":"official","url":"https://www.cod3x.org/cdx-the-cod3x-token/"},{"credibility":2,"name":"Cod3x Project — RootData","type":"other","url":"https://www.rootdata.com/Projects/detail/Cod3x?k=MTU1MzI%3D"}]},{"content":"Reaper Farm's multi-strategy vaults were audited by CertiK prior to the August 2022 exploit; the CertiK audit did not identify the access-control vulnerability that was subsequently exploited. Following the exploit, the affected vault contracts were removed from the protocol pending a full external re-audit. Ethos Reserve (now Cod3x CDP) completed a full audit before its 2023 launch. Cod3x Lend (formerly Granary V2) completed an audit by Trail of Bits, announced as part of the May 2024 Cod3x rebranding announcement. Reaper Farm maintained an active Immunefi bug bounty program with listed smart contract scope for the ReaperVaultERC4626. The 2022 exploit demonstrated that prior CertiK audits did not catch a critical access-control flaw, which is a notable historical data point for assessing audit reliability on these contracts. No active Cod3x-specific bug bounty program details have been found in publicly accessible sources at the time of this investigation.","heading":"Security Audits and Bug Bounty","severity":"medium","sources":[{"credibility":2,"name":"Reaper Farm Audits","type":"official","url":"https://docs.reaper.farm/security/audits"},{"credibility":2,"name":"Reaper Farm Bug Bounties — Immunefi","type":"official","url":"https://immunefi.com/bug-bounty/reaperfarm/scope/"},{"credibility":2,"name":"CertiK — Byte Masons","type":"research","url":"https://www.certik.com/resources/blog/video/TUBNOQQnHxO3RFqbiVFF7-byte-masons-or-defi-reaper-farm-yield-ethos-reserve-security-and-more-or"}]},{"content":"Following the Cod3x rebrand, the team announced the sunset of Granary Finance deployments across all chains including Fantom, Optimism, Arbitrum, BNB Chain, Metis, Avalanche, Linea, Base, and Ethereum. Ethos Reserve was also redesigned and merged into Cod3x CDP. This consolidation represents a material reduction in the number of live deployments and TVL surface area the team must maintain. Ironclad Finance — a remaining lending protocol in the Byte Masons ecosystem deployed on Mode network — suffered indirect losses from the February 2025 Ionic exploit contagion and was, as of March 2025, still working toward a resolution. The team has acknowledged the need to reduce exposure to underperforming deployments. These successive wind-downs and consolidations indicate the legacy DeFi product line has not achieved self-sustaining scale.","heading":"Protocol Wind-Downs and Ecosystem Risk","severity":"medium","sources":[{"credibility":3,"name":"How are the Byte Masons Rebranding Their DeFi Ecosystem?","type":"research","url":"https://alearesearch.substack.com/p/how-are-the-byte-masons-rebranding"},{"credibility":2,"name":"Cod3x Monthly Community Newsletter: March 2025","type":"official","url":"https://www.cod3x.org/cod3x-monthly-community-newsletter-march-2025/"},{"credibility":2,"name":"Granary Finance — DefiLlama","type":"on_chain","url":"https://defillama.com/protocol/granary-finance"}]},{"content":"No published investigation, warning, or fraud allegation by ZachXBT or other major on-chain investigators has been identified for Cod3x, Byte Masons, OATH Foundation, or Reaper Farm as of May 2026. The 2022 Reaper Farm exploit was covered by Web3 Is Going Great and CoinDesk-adjacent outlets as a standard DeFi security incident, not as a fraud or exit scam. Community sentiment on social media was described as approximately 50% bullish and 37.5% bearish in early 2025, with no coordinated fraud allegations found in public forums. No rug pull accusations with supporting evidence have been identified in this investigation. The primary community concerns identified appear to be around the sharp post-TGE price decline, the pivot away from legacy DeFi verticals, and the Ironclad contagion exposure.","heading":"On-Chain Investigator and Community Flags","severity":"low","sources":[{"credibility":2,"name":"Reaper Farm exploited for around $1.7 million — Web3 Is Going Great","type":"news_article","url":"https://www.web3isgoinggreat.com/single/reaper-farm-exploited-for-around-1-7-million"},{"credibility":2,"name":"Cod3x Project — RootData","type":"other","url":"https://www.rootdata.com/Projects/detail/Cod3x?k=MTU1MzI%3D"}]}],"sources_used":[{"credibility":2,"name":"Introducing Cod3x: A New Era in AI-Driven DeFi","type":"official","url":"https://www.cod3x.org/introducing-cod3x-a-new-era-in-ai-driven-defi/"},{"credibility":2,"name":"CDX: The Cod3x Token","type":"official","url":"https://www.cod3x.org/cdx-the-cod3x-token/"},{"credibility":2,"name":"CDX: What to Expect","type":"official","url":"https://www.cod3x.org/cdx-what-to-expect/"},{"credibility":2,"name":"Reaper Farm exploited for around $1.7 million — Web3 Is Going Great","type":"news_article","url":"https://www.web3isgoinggreat.com/single/reaper-farm-exploited-for-around-1-7-million"},{"credibility":2,"name":"Reaper Farm's Hack Recovery Plan Includes OATH Token Sale — The Layer","type":"news_article","url":"https://thelayer.xyz/reaper-farms-hack-recovery-plan-includes-oath-token-sale/"},{"credibility":2,"name":"Explained: The Ionic Money Hack (February 2025) — Halborn","type":"research","url":"https://www.halborn.com/blog/post/explained-the-ionic-money-hack-february-2025"},{"credibility":2,"name":"Ionic Money — Rekt News","type":"news_article","url":"https://rekt.news/ionic-money-rekt"},{"credibility":2,"name":"Cod3x Monthly Community Newsletter: March 2025","type":"official","url":"https://www.cod3x.org/cod3x-monthly-community-newsletter-march-2025/"},{"credibility":2,"name":"Cod3x Price — CoinGecko","type":"other","url":"https://www.coingecko.com/en/coins/cod3x"},{"credibility":2,"name":"Cod3x Price — CryptoRank","type":"other","url":"https://cryptorank.io/price/cod-3-x"},{"credibility":2,"name":"CDX on DEX Screener (Base/Uniswap)","type":"on_chain","url":"https://dexscreener.com/base/0xb392363e7ab01cd50a68b895323f254a82d9107f1097515eba04436ca71ad77f"},{"credibility":2,"name":"Reaper Farm Audits","type":"official","url":"https://docs.reaper.farm/security/audits"},{"credibility":2,"name":"Reaper Farm Bug Bounties — Immunefi","type":"official","url":"https://immunefi.com/bug-bounty/reaperfarm/scope/"},{"credibility":2,"name":"CertiK — Byte Masons DeFi","type":"research","url":"https://www.certik.com/resources/blog/video/TUBNOQQnHxO3RFqbiVFF7-byte-masons-or-defi-reaper-farm-yield-ethos-reserve-security-and-more-or"},{"credibility":2,"name":"Introducing Ethos Reserve — Justin Bebis / Byte Masons Medium","type":"official","url":"https://medium.com/byte-masons/introducing-ethos-reserve-5f08fa6af52a"},{"credibility":1,"name":"Ethos Reserve Pledges Up To $4.4 Million to Accelerate L2 DeFi Adoption — BusinessWire","type":"news_article","url":"https://www.businesswire.com/news/home/20230427005298/en/Ethos-Reserve-Pledges-Up-To-$4.4-Million-To-Accelerate-Layer-2-DeFi-Adoption-On-Optimism"},{"credibility":2,"name":"Guest Post: Deconstructing a Fantom Engineering Team — Fantom Foundation","type":"news_article","url":"https://blog.fantom.foundation/guest-post-deconstructing-a-fantom-engineering-team/"},{"credibility":2,"name":"Granary Finance — DefiLlama","type":"on_chain","url":"https://defillama.com/protocol/granary-finance"},{"credibility":2,"name":"Cod3x Migration Portal","type":"official","url":"https://migrate.cod3x.org/"},{"credibility":2,"name":"Cod3x Project — RootData","type":"other","url":"https://www.rootdata.com/Projects/detail/Cod3x?k=MTU1MzI%3D"},{"credibility":3,"name":"How are the Byte Masons Rebranding Their DeFi Ecosystem?","type":"research","url":"https://alearesearch.substack.com/p/how-are-the-byte-masons-rebranding"}],"summary":"Cod3x (CDX) is a rebranded DeFi and AI-agent platform launched in February 2025, consolidating several prior protocols built by the Byte Masons development collective — including Reaper Farm, Granary Finance, and the OATH Foundation — under a unified 'DeFAI' vision. The team has operated continuously since 2021, is publicly identified under founder Justin Bebis, and previously managed billions in TVL across Fantom and Optimism. The project carries material historical risk: Reaper Farm suffered a $1.7 million access-control exploit in August 2022, and the Ironclad protocol — a remaining Byte Masons-adjacent lending market — was affected by the February 2025 Ionic Money exploit contagion. CDX launched at an all-time high of approximately $0.25 in February 2025 and had fallen over 80% to an all-time low near $0.017 by May 2025, as of the time of this investigation.","timeline":[{"date":"2021-06-01","event":"Byte Masons development collective founded on Fantom blockchain by Justin Bebis.","source":"Fantom Foundation blog / ICOholder","source_url":"https://blog.fantom.foundation/guest-post-deconstructing-a-fantom-engineering-team/"},{"date":"2022-01-01","event":"Byte Masons launches OATH governance token after eight months of bootstrapped operation, without VC funding.","source":"Byte Masons Medium / ICOholder","source_url":"https://icoholder.com/en/byte-masons-1016162"},{"date":"2022-08-01","event":"Reaper Farm exploited for approximately $1.7 million via access-control vulnerability in multi-strategy vault contracts on Fantom. Funds bridged to Ethereum and laundered through Tornado Cash.","source":"Web3 Is Going Great","source_url":"https://www.web3isgoinggreat.com/single/reaper-farm-exploited-for-around-1-7-million"},{"date":"2022-08-02","event":"Reaper Farm announces recovery plan: full user compensation via OATH token treasury sale and existing assets. Affected vaults removed from protocol.","source":"The Layer","source_url":"https://thelayer.xyz/reaper-farms-hack-recovery-plan-includes-oath-token-sale/"},{"date":"2023-01-01","event":"Ethos Reserve launches on Optimism as a CDP-backed stablecoin protocol issuing ERN (Ethos Reserve Notes), marking Byte Masons' expansion to Layer 2.","source":"Justin Bebis / Byte Masons Medium","source_url":"https://medium.com/byte-masons/introducing-ethos-reserve-5f08fa6af52a"},{"date":"2023-04-27","event":"Ethos Reserve pledges up to $4.4 million in Optimism incentives to accelerate DeFi adoption on Layer 2.","source":"BusinessWire","source_url":"https://www.businesswire.com/news/home/20230427005298/en/Ethos-Reserve-Pledges-Up-To-$4.4-Million-To-Accelerate-Layer-2-DeFi-Adoption-On-Optimism"},{"date":"2024-05-27","event":"Byte Masons officially announces the Cod3x rebrand, consolidating Granary V2 (renamed Cod3x Lend, audited by Trail of Bits) and Ethos Reserve (renamed Cod3x CDP) under a DeFAI AI-agent strategy.","source":"Cod3x official blog","source_url":"https://www.cod3x.org/introducing-cod3x-a-new-era-in-ai-driven-defi/"},{"date":"2024-10-29","event":"Migration window for legacy OATH and GRAIN tokens to CDX closes. Unmigrated tokens are no longer supported.","source":"Cod3x monthly newsletter / official migration site","source_url":"https://migrate.cod3x.org/"},{"date":"2025-02-17","event":"CDX token generation event (TGE) at the DeFAI Summit. Token goes live simultaneously on Base, Solana (via Hyperlane), and Sophon.","source":"Cod3x official blog","source_url":"https://www.cod3x.org/cdx-the-cod3x-token/"},{"date":"2025-02-18","event":"CDX reaches all-time high of approximately $0.25, representing a peak fully diluted valuation of roughly $25 million.","source":"CoinGecko","source_url":"https://www.coingecko.com/en/coins/cod3x"},{"date":"2025-02-04","event":"Ionic Money exploit via social engineering on Mode network drains approximately $3.2 million. Contagion spreads to Ironclad Finance, a Byte Masons-adjacent protocol on Mode.","source":"Halborn / Rekt News","source_url":"https://www.halborn.com/blog/post/explained-the-ionic-money-hack-february-2025"},{"date":"2025-05-09","event":"CDX reaches all-time low of approximately $0.0175, representing a decline of over 93% from its February 2025 all-time high.","source":"CoinGecko","source_url":"https://www.coingecko.com/en/coins/cod3x"}]},"v":1}