Verify a decision

{"actor":"system:backfill","investigation_id":"39126e66-9131-4746-9523-66acc488e1d3","kind":"publish","page_slug":"elasticswap","published_at":"2026-05-30T12:11:33.629Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"ElasticSwap","sections":[{"content":"","heading":"","severity":"low","sources":[{"credibility":2,"name":"ElasticSwap GitHub Repository","type":"official","url":"https://github.com/ElasticSwap/elasticswap"},{"credibility":2,"name":"ElasticSwap Documentation","type":"official","url":"https://docs.elasticswap.org/"},{"credibility":3,"name":"ElasticSwap Medium — TIC is Launched, Now What","type":"news_article","url":"https://medium.com/elasticswap-the-future-is-elastic/elasticswap-tic-is-launched-now-what-4f64167e2c0d"}]},{"content":"","heading":"","severity":"critical","sources":[{"credibility":2,"name":"Code4rena — ElasticSwap Audit Report (January 2022)","type":"research","url":"https://code4rena.com/reports/2022-01-elasticswap"},{"credibility":2,"name":"Code4rena — ElasticSwap Audit Contest Page","type":"research","url":"https://code4rena.com/audits/2022-01-elasticswap-contest"},{"credibility":2,"name":"CertiK — ElasticSwap Incident Analysis","type":"research","url":"https://www.certik.com/resources/blog/4fuQmtFvhDB685gtcWr3I3-elasticswap-incident-analysis"}]},{"content":"","heading":"","severity":"critical","sources":[{"credibility":2,"name":"QuillAudits — Decoding Elastic Swap's $854K Exploit","type":"research","url":"https://quillaudits.medium.com/decoding-elastic-swaps-850k-exploit-quillaudits-9ceb7fcd8d1a"},{"credibility":2,"name":"CertiK — ElasticSwap Incident Analysis","type":"research","url":"https://www.certik.com/resources/blog/4fuQmtFvhDB685gtcWr3I3-elasticswap-incident-analysis"},{"credibility":2,"name":"SolidityScan — ElasticSwap Hack Analysis: Erroneous Calculations Bug","type":"research","url":"https://blog.solidityscan.com/elasticswap-hack-analysis-erroneous-calculations-bug-8dac10fb1b98"},{"credibility":3,"name":"Crypto-Rekts — ElasticSwap Entry","type":"community_report","url":"https://github.com/liqtags/crypto-rekts/blob/main/rekts/ElasticSwap.md"}]},{"content":"","heading":"","severity":"high","sources":[{"credibility":2,"name":"CertiK — ElasticSwap Incident Analysis","type":"research","url":"https://www.certik.com/resources/blog/4fuQmtFvhDB685gtcWr3I3-elasticswap-incident-analysis"},{"credibility":2,"name":"QuillAudits — Decoding Elastic Swap's $854K Exploit","type":"research","url":"https://quillaudits.medium.com/decoding-elastic-swaps-850k-exploit-quillaudits-9ceb7fcd8d1a"},{"credibility":3,"name":"CoinCu — ElasticSwap Attacked, Loss Approximately $854,000","type":"news_article","url":"https://coincu.com/151529-elasticswap-attacked-loss-854000/"}]},{"content":"","heading":"","severity":"high","sources":[{"credibility":3,"name":"ElasticSwap — What's Next (Medium)","type":"news_article","url":"https://medium.com/elasticswap-the-future-is-elastic/elasticswap-whats-next-1fab0b356069"},{"credibility":2,"name":"ElasticSwap — DefiLlama Protocol Page","type":"on_chain","url":"https://defillama.com/protocol/elasticswap"},{"credibility":2,"name":"ElasticSwap GitHub","type":"official","url":"https://github.com/ElasticSwap"}]},{"content":"","heading":"","severity":"high","sources":[{"credibility":2,"name":"ZachXBT Investigations Telegram Channel","type":"social_media","url":"https://t.me/investigations"},{"credibility":2,"name":"ZachXBT on X","type":"social_media","url":"https://x.com/zachxbt"},{"credibility":2,"name":"QuillAudits — Decoding Elastic Swap's $854K Exploit (attacker addresses documented)","type":"research","url":"https://quillaudits.medium.com/decoding-elastic-swaps-850k-exploit-quillaudits-9ceb7fcd8d1a"},{"credibility":2,"name":"Snowtrace — ElasticSwap TIC Token Tracker (Avalanche)","type":"on_chain","url":"https://snowtrace.io/token/0x75739a693459f33B1FBcC02099eea3eBCF150cBe"}]}],"sources_used":[{"credibility":2,"name":"QuillAudits — Decoding Elastic Swap's $854K Exploit","type":"research","url":"https://quillaudits.medium.com/decoding-elastic-swaps-850k-exploit-quillaudits-9ceb7fcd8d1a"},{"credibility":2,"name":"CertiK — ElasticSwap Incident Analysis","type":"research","url":"https://www.certik.com/resources/blog/4fuQmtFvhDB685gtcWr3I3-elasticswap-incident-analysis"},{"credibility":2,"name":"SolidityScan — ElasticSwap Hack Analysis: Erroneous Calculations Bug","type":"research","url":"https://blog.solidityscan.com/elasticswap-hack-analysis-erroneous-calculations-bug-8dac10fb1b98"},{"credibility":2,"name":"Code4rena — ElasticSwap Audit Report","type":"research","url":"https://code4rena.com/reports/2022-01-elasticswap"},{"credibility":2,"name":"Code4rena — ElasticSwap Audit Contest","type":"research","url":"https://code4rena.com/audits/2022-01-elasticswap-contest"},{"credibility":2,"name":"ElasticSwap GitHub Repository","type":"official","url":"https://github.com/ElasticSwap/elasticswap"},{"credibility":2,"name":"ElasticSwap Documentation","type":"official","url":"https://docs.elasticswap.org/"},{"credibility":3,"name":"ElasticSwap Medium — TIC is Launched, Now What","type":"news_article","url":"https://medium.com/elasticswap-the-future-is-elastic/elasticswap-tic-is-launched-now-what-4f64167e2c0d"},{"credibility":3,"name":"ElasticSwap Medium — What's Next","type":"news_article","url":"https://medium.com/elasticswap-the-future-is-elastic/elasticswap-whats-next-1fab0b356069"},{"credibility":3,"name":"Crypto-Rekts — ElasticSwap Entry","type":"community_report","url":"https://github.com/liqtags/crypto-rekts/blob/main/rekts/ElasticSwap.md"},{"credibility":2,"name":"ZachXBT Investigations Telegram Channel","type":"social_media","url":"https://t.me/investigations"},{"credibility":2,"name":"ZachXBT on X","type":"social_media","url":"https://x.com/zachxbt"},{"credibility":2,"name":"Snowtrace — ElasticSwap TIC Token Tracker (Avalanche)","type":"on_chain","url":"https://snowtrace.io/token/0x75739a693459f33B1FBcC02099eea3eBCF150cBe"},{"credibility":2,"name":"ElasticSwap — DefiLlama Protocol Page","type":"on_chain","url":"https://defillama.com/protocol/elasticswap"},{"credibility":3,"name":"CoinCu — ElasticSwap Attacked, Loss Approximately $854,000","type":"news_article","url":"https://coincu.com/151529-elasticswap-attacked-loss-854000/"}],"summary":"ElasticSwap was an Avalanche-first AMM protocol specializing in elastic supply tokens, which launched in May 2022 and was exploited in December 2022 for approximately $854,000 via flash loan attacks that exploited an accounting inconsistency between its addLiquidity and removeLiquidity functions. The vulnerability class that enabled the exploit had been identified in a Code4rena security audit conducted ten months earlier but was not adequately remediated before deployment. The protocol recovered approximately 55% of user funds through a bounty program and community vote, but the TIC governance token lost over 70% of its value and the protocol appears to have ceased meaningful activity.","timeline":[{"date":"2021-01-01","event":"ElasticSwap founders launch ElasticDAO, the predecessor project, on Ethereum.","source":"ElasticSwap Medium","source_url":"https://medium.com/elasticswap-the-future-is-elastic/elasticswap-tic-is-launched-now-what-4f64167e2c0d"},{"date":"2022-01-20","event":"Code4rena competitive audit begins for ElasticSwap smart contracts. Auditors identify high-severity vulnerability H-02: direct token transfers to pool contracts can inflate balances and enable value extraction via removeLiquidity.","source":"Code4rena Audit Report","source_url":"https://code4rena.com/reports/2022-01-elasticswap"},{"date":"2022-01-26","event":"Code4rena audit contest closes. Nine unique vulnerabilities identified including two high-severity findings.","source":"Code4rena Audit Report","source_url":"https://code4rena.com/reports/2022-01-elasticswap"},{"date":"2022-05-11","event":"ElasticSwap protocol and AMM interface launch on Avalanche with an AMPL liquidity pool. TIC governance token goes live.","source":"ElasticSwap Medium","source_url":"https://medium.com/elasticswap-the-future-is-elastic/elasticswap-tic-is-launched-now-what-4f64167e2c0d"},{"date":"2022-05-01","event":"ElasticSwap announces strategic partnerships with Big Brain Holdings, ShapeShift, Ampleforth, Connext, and Nomad, and plans multi-chain expansion to Polygon, Arbitrum, and Fantom.","source":"ElasticSwap Medium — What's Next","source_url":"https://medium.com/elasticswap-the-future-is-elastic/elasticswap-whats-next-1fab0b356069"},{"date":"2022-12-12","event":"Three separate flash loan attacks exploit ElasticSwap on Avalanche and Ethereum chains. Attackers exploit accounting inconsistency between addLiquidity (constant K) and removeLiquidity (live balance) to drain liquidity pools. Total stolen: approximately $854,000.","source":"CertiK — ElasticSwap Incident Analysis","source_url":"https://www.certik.com/resources/blog/4fuQmtFvhDB685gtcWr3I3-elasticswap-incident-analysis"},{"date":"2022-12-13","event":"ElasticSwap announces the exploit publicly on Twitter at approximately 07:33 AM UTC and urges all users to remove liquidity immediately. TIC token price falls more than 70%.","source":"CertiK — ElasticSwap Incident Analysis","source_url":"https://www.certik.com/resources/blog/4fuQmtFvhDB685gtcWr3I3-elasticswap-incident-analysis"},{"date":"2022-12-14","event":"MEV bot operator who front-ran the Ethereum attacker agrees to return 400.5 ETH to ElasticSwap treasury under the bounty program, retaining approximately 44.5 ETH as a bounty fee.","source":"QuillAudits — Decoding Elastic Swap's $854K Exploit","source_url":"https://quillaudits.medium.com/decoding-elastic-swaps-850k-exploit-quillaudits-9ceb7fcd8d1a"},{"date":"2022-12-15","event":"ElasticSwap team initiates community governance vote on how to manage recovered assets while developing refund proposals for affected users.","source":"CertiK — ElasticSwap Incident Analysis","source_url":"https://www.certik.com/resources/blog/4fuQmtFvhDB685gtcWr3I3-elasticswap-incident-analysis"},{"date":"2023-01-22","event":"ElasticSwap team publishes JSON files documenting aggregate losses by address across all chains. Treasury multisig holds approximately 487 ETH ($625,000). Approximately 55% of user funds recovered total; 50.89% of users vote to convert recovered assets proportionally for reimbursement.","source":"CertiK — ElasticSwap Incident Analysis","source_url":"https://www.certik.com/resources/blog/4fuQmtFvhDB685gtcWr3I3-elasticswap-incident-analysis"}]},"v":1}