Verify a decision

{"actor":"system:backfill","investigation_id":"bac1a051-a905-472d-8f30-1c63ac9db652","kind":"publish","page_slug":"jimbos-protocol","published_at":"2026-05-28T15:33:58.214Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Jimbos Protocol","sections":[{"content":"","heading":"Overview","severity":"medium","sources":[{"credibility":2,"name":"Arbitrum Based Jimbos Protocol Scurries for Revival After $7M Exploit — CoinDesk","type":"news_article","url":"https://www.coindesk.com/tech/2023/05/29/arbitrum-based-jimbos-protocol-scurries-for-revival-after-7m-exploit"},{"credibility":2,"name":"Jimbos Protocol exploited for $7.5 million three days after V2 launch — CoinMarketCap","type":"news_article","url":"https://coinmarketcap.com/headlines/news/jimbos-protocol-exploited-for-7-5-million-three-days-after-v2-launch/"}]},{"content":"","heading":"Flash Loan Exploit — May 2023","severity":"critical","sources":[{"credibility":1,"name":"Jimbos Protocol hit in $7.5m DeFi flash loan attack — The Register","type":"news_article","url":"https://www.theregister.com/2023/05/30/jimbos_protocol_defi_attack/"},{"credibility":2,"name":"Explained: The Jimbos Protocol Hack (May 2023) — Halborn","type":"research","url":"https://www.halborn.com/blog/post/explained-the-jimbos-protocol-hack-may-2023"},{"credibility":2,"name":"Decoding Jimbo's Protocol $7.5M Exploit — QuillAudits","type":"research","url":"https://quillaudits.medium.com/decoding-jimbos-protocol-7-5m-exploit-quillaudits-772ad1db6c07"},{"credibility":2,"name":"A Detailed Analysis of Arbitrum-based Jimbos Protocol's $7.5M Hack — Numen Cyber Labs","type":"research","url":"https://medium.com/numen-cyber-labs/a-detailed-analysis-of-arbitrum-based-jimbos-protocol-7-5-million-hack-36af84faee2"},{"credibility":2,"name":"Jimbos Protocol hacked for over $7.5 million using flash loan exploit — CryptoNews","type":"news_article","url":"https://cryptonews.com/news/jimbos-protocol-hacked-for-over-75-million-using-flash-loan-exploit/"}]},{"content":"","heading":"Funds Laundering via Tornado Cash","severity":"critical","sources":[{"credibility":2,"name":"Jimbos Protocol's attacker washed loot with Tornado Cash — CoinPaper","type":"news_article","url":"https://coinpaper.com/2274/jimbos-protocol-s-attacker-launders-7-5-million-with-tornado-cash"},{"credibility":2,"name":"Jimbos Protocol attacker launders $7.5 million with Tornado Cash — CoinMarketCap Community","type":"news_article","url":"https://coinmarketcap.com/community/articles/64fef90cc67b5c6867be4b78/"}]},{"content":"","heading":"Bounty Offer and Law Enforcement Engagement","severity":"high","sources":[{"credibility":1,"name":"Jimbos Protocol to Work With U.S. Homeland Security to Help Recover $7.5M — CoinDesk","type":"news_article","url":"https://www.coindesk.com/tech/2023/05/31/jimbos-protocol-to-work-with-us-homeland-security-to-help-recover-75m-from-flash-loan-exploit"},{"credibility":2,"name":"Jimbos Protocol Announces $800K Reward to Catch Exploiter — BeInCrypto","type":"news_article","url":"https://beincrypto.com/jimbos-protocol-announced-800k-reward/"},{"credibility":2,"name":"Jimbos Protocol Offers Deadline to Exploiters Before Onboarding Law Enforcement — CryptoPotato","type":"news_article","url":"https://cryptopotato.com/hacked-liquidity-protocol-jimbos-offers-deadline-to-exploiters-before-onboarding-law-enforcement/"},{"credibility":2,"name":"Jimbos Protocol offers $800K bounty to the public after hacker ignores deal — CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/jimbos-protocol-offers-open-bounty-after-hacker-ignores-deal"}]},{"content":"","heading":"Smart Contract Security and Design Risks","severity":"high","sources":[{"credibility":2,"name":"Explained: The Jimbos Protocol Hack (May 2023) — Halborn Security","type":"research","url":"https://www.halborn.com/blog/post/explained-the-jimbos-protocol-hack-may-2023"},{"credibility":2,"name":"Jimbo's Protocol Hack Analysis — BlockApex","type":"research","url":"https://blockapex.io/jimbos-protocol/"},{"credibility":2,"name":"The $7.5 Million Flash Loan Unveiled: Analyzing Jimbo's Protocol Attack — AuditOne","type":"research","url":"https://www.auditone.io/blog-posts/the-7-5-million-flash-loan-unveiled-analyzing-jimbos-protocol-attack"},{"credibility":2,"name":"Jimbos' $7.5M Exploit Analyzed — Olympix","type":"research","url":"https://olympix.security/blog/jimbos-7-5m-exploit-analyzed"}]},{"content":"","heading":"Token Impact and Protocol Status","severity":"high","sources":[{"credibility":2,"name":"Arbitrum-based Jimbos Protocol hacked for $7.5M, JIMBO price drops 40% — Bitcoin Insider","type":"news_article","url":"https://www.bitcoininsider.org/article/215830/arbitrum-based-jimbos-protocol-hacked-75m-jimbo-price-drops-40"},{"credibility":1,"name":"JIMBO Token Tracker — Arbiscan","type":"on_chain","url":"https://arbiscan.io/token/0xccb97ae0c1bc4ce196b6460395af7df5ee1212bc"},{"credibility":2,"name":"Jimbos Protocol exploited — Web3 Is Going Great","type":"community_report","url":"https://www.web3isgoinggreat.com/?id=jimbos-protocol-exploited"}]}],"sources_used":[],"summary":"Jimbos Protocol was an Arbitrum-based DeFi liquidity protocol designed to provide a semi-stable floor price for its native JIMBO token. On May 28, 2023, just three days after launching its V2, the protocol was exploited via a flash loan attack that drained approximately 4,090 ETH (~$7.5 million) by exploiting a lack of slippage control in the JimboController contract. The attacker rejected a $800,000 bounty offer, laundered the full amount through Tornado Cash, and remains unidentified; no funds have been recovered.","timeline":[{"date":"2023-05-01","event":"Jimbos Protocol launches initial version on Arbitrum","source":"CoinDesk","source_url":"https://www.coindesk.com/tech/2023/05/29/arbitrum-based-jimbos-protocol-scurries-for-revival-after-7m-exploit"},{"date":"2023-05-25","event":"Jimbos Protocol V2 launches on Arbitrum","source":"The Block","source_url":"https://www.theblock.co/post/232419/jimbos-protocol-exploited-for-7-5-million-three-days-after-v2-launch"},{"date":"2023-05-28","event":"Attacker exploits lack of slippage control in JimboController shift() function via flash loan, draining 4,090 ETH (~$7.5M). JIMBO token drops ~40%.","source":"The Register","source_url":"https://www.theregister.com/2023/05/30/jimbos_protocol_defi_attack/"},{"date":"2023-05-28","event":"Stolen ETH bridged from Arbitrum to Ethereum mainnet via Stargate and Celer Network","source":"Halborn Security","source_url":"https://www.halborn.com/blog/post/explained-the-jimbos-protocol-hack-may-2023"},{"date":"2023-05-28","event":"Jimbos Protocol team sends on-chain message to attacker offering to let them keep 10% if 90% is returned","source":"CryptoPotato","source_url":"https://cryptopotato.com/hacked-liquidity-protocol-jimbos-offers-deadline-to-exploiters-before-onboarding-law-enforcement/"},{"date":"2023-05-31","event":"Jimbos Protocol opens case with U.S. Department of Homeland Security (New York branch) and additional jurisdictions","source":"CoinDesk","source_url":"https://www.coindesk.com/tech/2023/05/31/jimbos-protocol-to-work-with-us-homeland-security-to-help-recover-75m-from-flash-loan-exploit"},{"date":"2023-06-01","event":"Jimbos Protocol announces $800,000 public bounty for information identifying the exploiter after hacker ignores private deal","source":"CoinTelegraph","source_url":"https://cointelegraph.com/news/jimbos-protocol-offers-open-bounty-after-hacker-ignores-deal"},{"date":"2023-09-01","event":"PeckShield reports that all $7.5M in stolen funds has been laundered through Tornado Cash; attacker remains unidentified","source":"CoinPaper","source_url":"https://coinpaper.com/2274/jimbos-protocol-s-attacker-launders-7-5-million-with-tornado-cash"}]},"v":1}