Verify a decision

{"actor":"system:backfill","investigation_id":"8049f558-3513-4e58-93fa-d919721e71da","kind":"publish","page_slug":"sharedstake","published_at":"2026-05-30T11:47:51.559Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"SharedStake","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/@chimera_defi/sgt-rugpull-post-mortem-634a527940e0","type":"other","url":""},{"credibility":3,"name":"https://docs.sharedstake.org/","type":"other","url":""},{"credibility":3,"name":"https://cryptobriefing.com/sharedstake-developer-goes-rogue-sgt-price-plummets-95/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/@chimera_defi/sgt-rugpull-post-mortem-634a527940e0","type":"other","url":""},{"credibility":3,"name":"https://sharedstake.medium.com/post-mortem-of-the-sharedstake-incident-4625eeacc61f","type":"other","url":""},{"credibility":3,"name":"https://medium.com/immunefi/sharedstake-insider-exploit-postmortem-17fa93d5c90e","type":"other","url":""},{"credibility":3,"name":"https://cryptoslate.com/developer-rug-pulls-ethereum-defi-project-sharedstake-sgt-token-falls-95/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/immunefi/sharedstake-insider-exploit-postmortem-17fa93d5c90e","type":"other","url":""},{"credibility":3,"name":"https://sharedstake.medium.com/post-mortem-of-the-sharedstake-incident-4625eeacc61f","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://cryptobriefing.com/sharedstake-developer-goes-rogue-sgt-price-plummets-95/","type":"other","url":""},{"credibility":3,"name":"https://cryptoslate.com/developer-rug-pulls-ethereum-defi-project-sharedstake-sgt-token-falls-95/","type":"other","url":""},{"credibility":3,"name":"https://micky.com.au/sharedstakes-governance-token-exploited-by-one-of-its-developers/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/@chimera_defi/sgt-rugpull-post-mortem-634a527940e0","type":"other","url":""},{"credibility":3,"name":"https://cryptobriefing.com/sharedstake-developer-goes-rogue-sgt-price-plummets-95/","type":"other","url":""},{"credibility":3,"name":"https://sharedstake.medium.com/post-mortem-of-the-sharedstake-incident-4625eeacc61f","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://sharedstake.medium.com/sharedstake-updates-a73780ebd53a","type":"other","url":""},{"credibility":3,"name":"https://medium.com/@chimera_defi/the-future-of-sharedstake-fee7cb9e96d7","type":"other","url":""},{"credibility":3,"name":"https://docs.sharedstake.finance/sharedstake-v2","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/immunefi/sharedstake-insider-exploit-postmortem-17fa93d5c90e","type":"other","url":""},{"credibility":3,"name":"https://cryptoslate.com/developer-rug-pulls-ethereum-defi-project-sharedstake-sgt-token-falls-95/","type":"other","url":""},{"credibility":3,"name":"https://micky.com.au/sharedstakes-governance-token-exploited-by-one-of-its-developers/","type":"other","url":""}]}],"sources_used":[],"summary":"SharedStake is an Ethereum liquid staking protocol launched in January 2021 that allowed users to deposit ETH in exchange for the vETH2 liquid staking token. In June 2021, a co-founder using the pseudonym 'Kairos' exploited a critical timelock bypass vulnerability in the protocol's vesting contracts — a bug that had been disclosed to the team two months prior — draining approximately $128,000 from liquidity providers and sending 100 ETH through Tornado Cash. The protocol subsequently relaunched as SharedDeposit v2 under remaining team members, though the SGT governance token never recovered.","timeline":[{"date":"2021-01-01","event":"SharedStake founded by pseudonymous co-founders Kairos, Chimera, and Ice Bear as an Ethereum 2.0 staking protocol.","source":""},{"date":"2021-04-26","event":"Whitehat researcher Lucash-dev reports critical timelock bypass vulnerability in SmartTimelock.sol to Immunefi.","source":""},{"date":"2021-04-29","event":"SharedStake team confirms the bug and pays Lucash-dev a $5,000 bug bounty.","source":""},{"date":"2021-05-20","event":"SharedStake requests a fix from Immunefi for the disclosed vulnerability.","source":""},{"date":"2021-06-16","event":"Fix delivered privately to SharedStake. Team grants a new team member (alleged to be the exploiter) access to the full bug report.","source":""},{"date":"2021-06-19","event":"Kairos tests the timelock exploit on mainnet — first on-chain exploitation of the vesting contract vulnerability.","source":""},{"date":"2021-06-21","event":"Kairos sells over $35,000 worth of SGT from the deployer address without team approval, initiating what Chimera later described as a 'slow rug pull.'","source":""},{"date":"2021-06-23","event":"Chimera discovers unauthorized sales. Kairos becomes hostile when confronted. Chimera defensively drains vulnerable contracts (81 WETH + $54,000 USDC). Kairos front-runs Chimera's transactions to steal an additional $93,000. SGT price collapses ~95%. Team urges all users to exit liquidity positions.","source":""},{"date":"2021-06-24","event":"Kairos sends 100 ETH to Tornado Cash to obscure stolen funds. Recovery negotiations begin. Chimera agrees to return defensively drained funds; Kairos refuses.","source":""},{"date":"2021-06-28","event":"New developers hired to secure the protocol. Community-controlled 4-of-5 multisig established.","source":""},{"date":"2021-07-24","event":"Reimbursement airdrop completed: 101 vETH2 distributed to SGT-vETH2 LPs (~90% recovery) and 30 ETH to SGT-ETH LPs (~35% recovery).","source":""},{"date":"2022-01-01","event":"Protocol relaunches as SharedDeposit v2 with redesigned zero-trust architecture and phased rollout. V1 ETH deposits and yield returned to users.","source":""}]},"v":1}