Verify a decision

{"actor":"system:backfill","investigation_id":"46071ba8-e931-4806-addc-c35517a188ae","kind":"publish","page_slug":"sonne-finance","published_at":"2026-05-20T15:26:56.508Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Sonne Finance","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://docs.sonne.finance/"},{"credibility":3,"name":"","type":"other","url":"https://blog.mexc.com/what-is-sonne-finance-sonne-creator-wilbur/"},{"credibility":3,"name":"","type":"other","url":"https://defillama.com/protocol/sonne-finance"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://medium.com/@SonneFinance/post-mortem-sonne-finance-exploit-12f3daa82b06"},{"credibility":3,"name":"","type":"other","url":"https://www.certik.com/resources/blog/sonne-finance-incident-analysis"},{"credibility":3,"name":"","type":"other","url":"https://www.halborn.com/blog/post/explained-the-sonne-finance-hack-may-2024"},{"credibility":3,"name":"","type":"other","url":"https://www.theblock.co/post/294508/lending-protocol-sonne-finance-faces-20-million-exploit-pauses-markets-on-optimism"},{"credibility":3,"name":"","type":"other","url":"https://www.coindesk.com/tech/2024/05/15/sonne-finance-token-drops-60-after-20m-exploit-on-optimism"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://www.certik.com/resources/blog/sonne-finance-incident-analysis"},{"credibility":3,"name":"","type":"other","url":"https://medium.com/coinmonks/sonne-finance-exploit-tracing-the-20-million-lost-to-the-hack-79140bbc3e7d"},{"credibility":3,"name":"","type":"other","url":"https://www.quillaudits.com/blog/hack-analysis/sonne-finance-hack"},{"credibility":3,"name":"","type":"other","url":"https://www.web3isgoinggreat.com/?id=sonne-finance-hack"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://therecord.media/sonne-finance-cryptocurrency-heist-bounty-offered"},{"credibility":3,"name":"","type":"other","url":"https://medium.com/coinmonks/sonne-finance-exploit-tracing-the-20-million-lost-to-the-hack-79140bbc3e7d"},{"credibility":3,"name":"","type":"other","url":"https://medium.com/@SonneFinance/post-mortem-sonne-finance-exploit-12f3daa82b06"},{"credibility":3,"name":"","type":"other","url":"https://x.com/beefyfinance/status/1790699510496215474"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://www.halborn.com/blog/post/explained-the-sonne-finance-hack-may-2024"},{"credibility":3,"name":"","type":"other","url":"https://www.certik.com/resources/blog/sonne-finance-incident-analysis"},{"credibility":3,"name":"","type":"other","url":"https://unchainedcrypto.com/20-million-exploited-from-sonne-finance-on-optimism/"},{"credibility":3,"name":"","type":"other","url":"https://cryptonews.com/news/sonne-finance-suffers-20m-exploit/"}]}],"sources_used":[],"summary":"Sonne Finance is a Compound V2 fork deployed on Optimism that was exploited for approximately $20 million on May 14, 2024, in what became the largest exploit in Optimism's history. The attack exploited a well-known precision-loss donation vulnerability in Compound V2 forks, triggered during the rollout of a new VELO token market; the attacker leveraged a multi-transaction deployment architecture and a two-day timelock window to manipulate exchange rates and drain user funds.","timeline":[{"date":"2022-09-01","event":"Sonne Finance launches on Optimism as a Compound V2 fork.","source":""},{"date":"2023-04-15","event":"Hundred Finance exploited via precision-loss donation attack on Compound V2 fork — the same vulnerability class later used against Sonne Finance.","source":""},{"date":"2024-05-04","event":"Sonne Improvement Proposal 15 introduced to add VELO token market to the Optimism deployment.","source":""},{"date":"2024-05-07","event":"SIP-15 passes unanimously with 2.3 million SONNE votes. Team queues multi-transaction market deployment on multisig with two-day timelock.","source":""},{"date":"2024-05-12","event":"Attacker executes preparatory transaction positioning for exploit once timelock expires.","source":""},{"date":"2024-05-14","event":"Timelock expires. Attacker executes donation attack against soVELO market, draining approximately $20 million across VELO, WETH, USDC.e, WBTC, wstETH, USDT, and USDC. SEAL contributor intervenes and preserves approximately $6.5 million in remaining funds.","source":""},{"date":"2024-05-15","event":"Sonne Finance pauses all Optimism markets. Team announces exploit publicly, offers 10% bounty to attacker for fund return. SONNE token drops over 60%.","source":""},{"date":"2024-05-26","event":"Attacker transfers 1,600 ETH (approximately $6.2 million) to Tornado Cash.","source":""}]},"v":1}