Verify a decision

{"actor":"system:backfill","investigation_id":"a922f0f3-2563-41e5-a465-a63ac7499e6a","kind":"publish","page_slug":"infini-protocol","published_at":"2026-05-30T19:10:25.827Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Infini Protocol","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.infini.money/","type":"other","url":""},{"credibility":3,"name":"https://www.aicoin.com/en/article/465480","type":"other","url":""},{"credibility":3,"name":"https://www.globenewswire.com/news-release/2026/05/01/3286168/0/en/Infini-Secures-MSB-Registration-in-Canada-Advancing-Its-Global-AI-Financial-Operating-System-for-Next-Generation-Enterprises.html","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://rekt.news/infini-rekt","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-infini-hack-february-2025","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/307513/crypto-neo-bank-infini-50-million-exploit","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/markets/2025/02/24/payments-card-issuer-infini-offers-reward-for-return-of-funds-after-usd49-million-exploit","type":"other","url":""},{"credibility":3,"name":"https://coinjournal.net/news/what-we-know-about-the-49-5-million-infini-exploit-so-far/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://rekt.news/infini-rekt","type":"other","url":""},{"credibility":3,"name":"https://www.livebitcoinnews.com/suspected-infini-hacker-routes-32-7m-in-eth-through-tornado-cash/","type":"other","url":""},{"credibility":3,"name":"https://cryptorank.io/news/feed/d350b-infini-hacker-eth-laundering-tornado","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/infini-exploiter-resurfaces-to-buy-eth-dip/","type":"other","url":""},{"credibility":3,"name":"https://crypto-economy.com/infini-hacker-launders-millions-using-tornado-cash-amid-regulatory-heat/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/markets/2025/02/24/payments-card-issuer-infini-offers-reward-for-return-of-funds-after-usd49-million-exploit","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/infini-founder-reaffirms-20-bounty-and-legal-immunity-to-infini-hacker-for-return-of-stolen-funds/","type":"other","url":""},{"credibility":3,"name":"https://bitcoinethereumnews.com/finance/infini-offers-hacker-9-9m-to-return-stolen-funds/","type":"other","url":""},{"credibility":3,"name":"https://defi-planet.com/2025/03/infini-founder-appeals-to-hacker-with-bounty-offer-following-49-5m-heist/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-infini-hack-february-2025","type":"other","url":""},{"credibility":3,"name":"https://www.quillaudits.com/blog/hack-analysis/how-infini-lost-49-million-in-a-defi-hack","type":"other","url":""},{"credibility":3,"name":"https://rekt.news/infini-rekt","type":"other","url":""},{"credibility":3,"name":"https://coinjournal.net/news/what-we-know-about-the-49-5-million-infini-exploit-so-far/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.globenewswire.com/news-release/2026/05/01/3286168/0/en/Infini-Secures-MSB-Registration-in-Canada-Advancing-Its-Global-AI-Financial-Operating-System-for-Next-Generation-Enterprises.html","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/307513/crypto-neo-bank-infini-50-million-exploit","type":"other","url":""},{"credibility":3,"name":"https://www.bankinfosecurity.com/cryptohack-roundup-49m-infini-exploit-a-27613","type":"other","url":""}]}],"sources_used":[],"summary":"Infini is a Hong Kong-based stablecoin neobank offering yield, payments, and enterprise treasury tools built on DeFi infrastructure. In February 2025, the platform suffered a $49.5 million exploit when a former contract developer who had secretly retained administrative privileges drained the Morpho MEVCapital USDC Vault across two transactions. Founder Christian Li pledged personal coverage of losses and offered a 20% bounty to the attacker; as of mid-2026 the stolen funds have not been recovered, with the exploiter laundering proceeds through Tornado Cash.","timeline":[{"date":"2024-11-01","event":"Malicious exploiter contract deployed by the former developer, embedding a privileged admin role (0x8e0b) approximately 114 days before the attack.","source":""},{"date":"2025-02-23","event":"Exploit initiated late Sunday evening. Attacker funded wallet with 1 ETH from Tornado Cash and drained $11.45 million in USDC from Morpho MEVCapital vault (first transaction).","source":""},{"date":"2025-02-24","event":"Second drain of $38.06 million USDC executed; total stolen reaches approximately $49.5 million. Stolen USDC converted to DAI, then swapped to roughly 17,696 ETH. Cyvers, PeckShield, and CertiK detect and report the exploit. Infini acknowledges the breach approximately 8 hours after initial detection.","source":""},{"date":"2025-02-24","event":"Founder Christian Li publicly accepts personal responsibility and pledges to cover all losses. Infini offers the attacker a 20% bounty (~$9.9M) and legal immunity for return of funds within 48 hours.","source":""},{"date":"2025-03-01","event":"Christian Li reaffirms 20% bounty offer and legal immunity. No funds have been returned.","source":""},{"date":"2025-07-17","event":"Alleged Infini hacker moves 3,000 ETH through Tornado Cash in the first identified laundering tranche post-exploit.","source":""},{"date":"2025-08-11","event":"Infini issues a final ultimatum to the hacker, demanding return of the full $49.5 million by August 13, 2025 at 20:00 GMT+8. The deadline passes without compliance.","source":""},{"date":"2026-02-01","event":"Alleged exploiter purchases approximately 6,316 ETH and immediately routes proceeds into Tornado Cash, per PeckShield and CertiK monitoring.","source":""},{"date":"2026-05-01","event":"Infini secures MSB registration with Canada's FINTRAC, covering foreign exchange, money transfer, remittance, and virtual currency services, signaling continued business operations.","source":""}]},"v":1}