Verify a decision

{"actor":"system:backfill","investigation_id":"c5ebecba-a25f-435c-afcf-b26ea3e8969d","kind":"publish","page_slug":"fortress-loans","published_at":"2026-05-28T17:25:09.253Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Fortress Loans","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://bsc.news/post/fortress-credit-and-lending-project-insight","type":"other","url":""},{"credibility":3,"name":"https://jetfuelfinance.medium.com/how-to-use-the-fortress-protocol-lending-borrowing-and-collecting-fts-rewards-aa6812389b9b","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/fortress-loans","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.certik.com/resources/blog/k6eZOpnK5Kdde7RfHBZgw-fortress-loans-exploit","type":"other","url":""},{"credibility":3,"name":"https://rekt.news/fortress-rekt","type":"other","url":""},{"credibility":3,"name":"https://slowmist.medium.com/slowmist-fortress-protocol-hack-analysis-19af24af723c","type":"other","url":""},{"credibility":3,"name":"https://therecord.media/defi-protocol-fortress-announces-3-million-hack","type":"other","url":""},{"credibility":3,"name":"https://medium.com/coinmonks/examination-of-the-fortress-protocol-hack-e261c96ea450","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/umbrella-network/update-on-umbrella-oracle-exploit-67ac0fe4414b","type":"other","url":""},{"credibility":3,"name":"https://therecord.media/defi-protocol-fortress-announces-3-million-hack","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.certik.com/resources/blog/k6eZOpnK5Kdde7RfHBZgw-fortress-loans-exploit","type":"other","url":""},{"credibility":3,"name":"https://sayfer.io/blog/3-hacks-an-audit-could-not-find/","type":"other","url":""},{"credibility":3,"name":"https://fortress.loans/audit_hash0x.pdf","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://jetfuelfinance.medium.com/fortress-attack-update-and-compensation-e7a66621cfe6","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/fortress-loans","type":"other","url":""},{"credibility":3,"name":"https://cryptopotato.com/fortress-protocol-hacked-for-3-million-drained-of-all-funds/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://coinmarketcap.com/currencies/fortress-lending/","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/fortress-loans","type":"other","url":""},{"credibility":3,"name":"https://coingecko.com/en/coins/fortress","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.certik.com/resources/blog/k6eZOpnK5Kdde7RfHBZgw-fortress-loans-exploit","type":"other","url":""},{"credibility":3,"name":"https://rekt.news/fortress-rekt","type":"other","url":""},{"credibility":3,"name":"https://slowmist.medium.com/slowmist-fortress-protocol-hack-analysis-19af24af723c","type":"other","url":""}]}],"sources_used":[],"summary":"Fortress Loans (fortress.loans) was an algorithmic money market and lending protocol on BNB Chain (Binance Smart Chain), launched in April 2021 by the JetFuel Finance team. On May 8, 2022, the protocol was drained of all funds — approximately $2.98 million — through a combined governance manipulation and oracle price manipulation attack. The protocol has been effectively inactive since, with DefiLlama recording a TVL of approximately $1,168 as of 2024, and the FTS governance token has lost effectively all of its value.","timeline":[{"date":"2021-04-01","event":"Fortress Loans launches on Binance Smart Chain as an algorithmic lending protocol developed by JetFuel Finance.","source":""},{"date":"2021-08-01","event":"Umbrella Network introduces buggy oracle smart contract code that would later be exploited; the code goes unaudited.","source":""},{"date":"2022-04-19","event":"The attacker first interacts with Fortress Loans, deploying an unverified custom contract in preparation for the later exploit.","source":""},{"date":"2022-04-29","event":"Attacker obtains 20 ETH via Tornado Cash on Ethereum mainnet and bridges 12.4 ETH to BNB Chain via cBridge.","source":""},{"date":"2022-05-08","event":"Exploit occurs: attacker purchases ~400,000 FTS tokens (~$8,000–$11 ETH), passes malicious Proposal FIP-11 raising FTS collateral factor to 70%, manipulates Umbrella oracle to inflate FTS price to near $1 trillion, and drains approximately $2.98 million in assets from all fToken markets.","source":""},{"date":"2022-05-08","event":"Fortress Protocol team pauses platform UI and announces hack on social media. FTS token price falls more than 45%. Umbrella Network deploys oracle hotfix.","source":""},{"date":"2022-05-08","event":"Stolen funds (1,048.1 ETH and 400,000 DAI) are bridged to Ethereum via Anyswap/Multichain and deposited into Tornado Cash.","source":""},{"date":"2022-05-14","event":"JetFuel Finance publishes compensation plan via Medium: over $1 million in compensation announced including $300,000 USDC immediate disbursement, $200,000 USDC reserve, and 10,000,000 UMB tokens from Umbrella Network on one-year vesting.","source":""},{"date":"2022-05-14","event":"Protocol restart scheduled; on-chain governance removal planned for May 16–17.","source":""},{"date":"2024-01-01","event":"DefiLlama records Fortress Loans TVL at approximately $1,168 with zero active loans; FTS token market cap approximately $13,900; protocol effectively dormant.","source":""}]},"v":1}