Verify a decision
Every moderation decision on AVOID.NET is anchored to the Solana blockchain. You don't have to trust us — you can verify cryptographically that we committed to a verdict at a specific moment and have not rewritten it.
How verification works
- We commit. When a moderator accepts/rejects a submission, we serialize the decision into deterministic UTF-8 bytes (
payload_canonical_string), hash it with SHA-256, encode the digest as base58, and write it to Solana inside an SPL Memo v2 transaction. - We store the bytes. The exact bytes we hashed are stored alongside the decision in our database. Anyone can read them and recompute the hash in any language.
- You compare three values. Database hash, your independently-recomputed hash, and the hash inside the on-chain memo. If all three match, the decision is authentic and timestamped.
The on-chain memo format is
AVOID.NET|v1|h:<b58-sha256>|d:<id>|t:<iso>Find a signature on any investigation page's decision log, or run python -m src.verify_decision --signature <sig> for a CLI check.
Decision
publish · Magic Internet Money
- Sequence
- #1
- Score
- →
- Cluster
- mainnet-beta
- Slot
- 419620532
- Off-chain at
- 2026-05-14T05:07:43.617Z
- Anchored at
- —
- Block time
- —
Independent verification
- 1. Database (off-chain)
- EnWC9DQmVfzCdKpCrX5S5MEBdFGMUgkwphUkTRiKfsd6
- 2. Recomputed (your browser)
- computing…
- 3. On-chain (Solana memo)
- fetching…
Canonical bytes hashed (38750 chars)
{"actor":"system:backfill","investigation_id":"4a626866-e0fa-4bc6-85d7-0a15096f7b57","kind":"publish","page_slug":"magic-internet-money","published_at":"2026-05-14T05:07:43.515Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Magic Internet Money","sections":[{"content":"Abracadabra Money (abracadabra.money) is a multi-chain DeFi lending protocol launched in 2021 that allows users to deposit interest-bearing tokens (ibTKNs) as collateral and mint Magic Internet Money (MIM), a USD-denominated stablecoin. The protocol operates through isolated lending markets called Cauldrons, each with distinct risk parameters and collateral types. SPELL is the protocol's native governance token; holders may stake SPELL to receive sSPELL and earn a share of protocol fees. The platform operates across Ethereum, Arbitrum, Avalanche, and Fantom. Abracadabra was co-founded by Daniele Sestagalli (known online as Daniele Sesta) and a pseudonymous co-founder known as Squirrel in 2021.","heading":"Protocol Overview","severity":"low","sources":[{"credibility":2,"name":"Abracadabra.money: SPELL Token & Crypto Lending | Gemini","type":"research","url":"https://www.gemini.com/cryptopedia/abracadabra-money-spell-token-abracadabra-crypto-lending"},{"credibility":2,"name":"Magic Internet Money (MIM): A Yield-Bearing Stablecoin | Gemini","type":"research","url":"https://www.gemini.com/cryptopedia/magic-internet-money-mim-crypto-abracadabra-money"},{"credibility":2,"name":"Abracadabra TVL, Fees & Revenue | DeFiLlama","type":"on_chain","url":"https://defillama.com/protocol/abracadabra"}]},{"content":"Daniele Sestagalli, an Italian-born engineer, moved to Switzerland in 2011 and became an early Bitcoin investor. He claimed to have purchased Bitcoin at under $1. He subsequently became involved with Bitfinex and Tether before founding Zulu Republic in 2018. In 2021, Sestagalli launched a suite of DeFi products under the banner 'Frog Nation,' including Abracadabra Money (SPELL/MIM), Wonderland (TIME), and Popsicle Finance (ICE). The projects were presented as a community-driven, decentralized finance movement. Sestagalli's governance decisions and personal conduct during the Wonderland/Sifu scandal in early 2022 drew broad criticism, including allegations of knowingly employing a convicted felon as a treasury manager and subsequently overriding a community vote on the project's future.","heading":"Founder Background: Daniele Sestagalli","severity":"high","sources":[{"credibility":2,"name":"Who Is Daniele Sestagalli? | Crypto Briefing","type":"news_article","url":"https://cryptobriefing.com/who-is-daniele-sestagalli/"},{"credibility":2,"name":"Abracadabra.Money Founder Remains a Mystery — All the Details on Co-Founders | Market Realist","type":"news_article","url":"https://marketrealist.com/p/abracadabra-money-founder-net-worth/"},{"credibility":2,"name":"The downfall of Daniele Sesta and $TIME | CryptoNews","type":"news_article","url":"https://cryptonews.net/news/other/3125697/"}]},{"content":"On January 27, 2022, on-chain investigator ZachXBT publicly identified Wonderland's anonymous treasury manager, known as '0xSifu,' as Michael Patryn, co-founder of the collapsed Canadian crypto exchange QuadrigaCX. Patryn's legal identity before multiple name changes was Omar Dhanani. According to court records and investigative journalism, Dhanani was sentenced to 18 months in U.S. federal prison for involvement in an identity theft ring via Shadowcrew.com and separately admitted guilt in cases involving burglary, grand larceny, and computer fraud. Wonderland was a DeFi protocol within the same 'Frog Nation' ecosystem as Abracadabra Money and shared deep financial and governance ties. Sestagalli publicly confirmed he had been aware of Sifu's identity before the revelation became public, stating 'I want everyone to know that I was aware of this and decided that the past of an individual doesn't determine their future.' The revelation caused the TIME token to collapse over 40% within 24 hours, and SPELL and ICE also declined sharply in sympathy. An $8.4 million withdrawal from Wonderland's multi-sig treasury shortly before the revelation — allegedly to avoid liquidation — generated additional controversy and accusations of self-dealing. The Wonderland community voted 88% in favor of removing Sifu. A subsequent vote on dissolving Wonderland narrowly favored continuation, but Sestagalli announced the project's closure anyway, drawing widespread criticism for overriding the community mandate. Critics characterized the episode as 'arguably the biggest rugpull in recent months' in DeFi, citing the founder's lack of transparency and unilateral decision-making in defiance of DAO governance principles.","heading":"Wonderland / 0xSifu Scandal (January 2022)","severity":"critical","sources":[{"credibility":1,"name":"Wonderland Rattled After Co-Founder Tied to Failed QuadrigaCX Exchange | CoinDesk","type":"news_article","url":"https://www.coindesk.com/markets/2022/01/27/wonderland-rattled-after-cofounder-tied-to-alleged-quadrigacx-190m-exit-scam"},{"credibility":1,"name":"How Did a Former Quadriga Exec End Up Running a DeFi Protocol? | CoinDesk","type":"news_article","url":"https://www.coindesk.com/tech/2022/01/27/how-did-a-former-quadriga-exec-end-up-running-a-defi-protocol-wonderland-founder-explains"},{"credibility":2,"name":"Wonderland (TIME) Scandal: Daniele Sestagalli Ignores Community Vote | BeInCrypto","type":"news_article","url":"https://beincrypto.com/wonderland-time-ceo-ignores-community-vote-announces-projects-closure/"},{"credibility":2,"name":"How DeFi Protocol Wonderland Avoided Shutdown After Scandal | Decrypt","type":"news_article","url":"https://decrypt.co/91968/how-wonderland-daniele-sestagalli-defi-avoided-shutting-down-after-michael-patryn-scandal"},{"credibility":3,"name":"Jan 2022 — Wonderland Money Sifu Scandal — $8.4m | QuadrigaInitiative","type":"community_report","url":"http://www.quadrigainitiative.com/casestudy/wonderlandmoneysifuscandal.php"},{"credibility":2,"name":"Crypto Co-Founder Revealed to Be Infamous Fraudster | Vice","type":"news_article","url":"https://www.vice.com/en/article/crypto-co-founder-revealed-to-be-infamous-fraudster-investors-shaken/"}]},{"content":"Michael Patryn, born Omar Dhanani, legally changed his name twice — from Dhanani to his middle name, then to Patryn — in 2003 and 2008, according to Canadian records obtained by Bloomberg. As early as 2002, Dhanani participated in Shadowcrew.com, described by U.S. prosecutors as a hub of online identity theft activity that trafficked over 1.5 million stolen credit card and bank card numbers. He received an 18-month U.S. federal prison sentence for his role in that identity theft ring. In a separate California case, he admitted guilt to charges of burglary, grand larceny, and computer fraud in 2007. After deportation to Canada, Patryn re-emerged as a Bitcoin entrepreneur and co-founded QuadrigaCX with Gerald Cotten in 2013. Patryn reportedly left QuadrigaCX in 2016, prior to Cotten's alleged mismanagement of the $190 million in customer funds that became inaccessible after Cotten's death in December 2018. Investigations did not directly implicate Patryn in the QuadrigaCX losses, though his involvement in founding the exchange remains a significant reputational concern given its ultimate fate.","heading":"Michael Patryn / Omar Dhanani Criminal Background","severity":"critical","sources":[{"credibility":1,"name":"QuadrigaCX Co-Founder Michael Patryn Is Actually Convicted Criminal Omar Dhanani | CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/quadrigacx-co-founder-michael-patryn-is-actually-convicted-criminal-omar-dhanani-report"},{"credibility":2,"name":"Michael Patryn | Wikipedia","type":"other","url":"https://en.wikipedia.org/wiki/Michael_Patryn"},{"credibility":1,"name":"Quadriga co-founder served time in U.S. prison for role in identity-theft ring | Globe and Mail","type":"news_article","url":"https://www.theglobeandmail.com/business/article-quadriga-co-founder-served-time-in-us-for-role-in-identity-theft/"}]},{"content":"Abracadabra Money has suffered three confirmed smart contract exploits between January 2024 and October 2025, with cumulative losses exceeding $21 million. The first exploit occurred on January 30, 2024, when an attacker exploited a rounding precision vulnerability in Cauldron V3 and V4 contracts on Ethereum Mainnet. By manipulating the totalBorrow.elastic and totalBorrow.base counters to create arithmetic inconsistencies, the attacker drained approximately 2,740 ETH worth $6.5 million and caused MIM to temporarily depeg to $0.76. The second and largest exploit occurred on March 25, 2025, targeting Abracadabra's GMX V2 GM pool cauldrons on Arbitrum. The attacker executed a self-liquidation via flash loan: they deposited funds into GMX in a way designed to fail, borrowed against the position, triggered their own liquidation to zero out the debt, then took out a new uncollateralized loan because the underlying order and collateral remained in the contract. Approximately 6,260 ETH ($12.98 million) was stolen across 56 exploit transactions over roughly 100 minutes. GMX stated its own contracts were unaffected. The third exploit occurred on October 4, 2025, targeting deprecated Cauldron V4 contracts. An attacker called the cook() function with an action sequence that set the solvency check flag to true via ACTION_BORROW and then reset it to false by triggering the empty _additionalCookAction() function, effectively bypassing all collateral requirements. Approximately 1,793,766 MIM and 395 ETH ($1.8 million) were drained and subsequently laundered via Tornado Cash. In all three incidents, the protocol halted affected cauldrons and used treasury funds to purchase and burn MIM to stabilize the peg. No single audit regime or third-party security engagement prevented the recurrence of vulnerabilities across multiple contract generations.","heading":"Smart Contract Exploits (2024–2025)","severity":"critical","sources":[{"credibility":2,"name":"Breaking Down the $6.5M Abracadabra Money Hack | Extropy.IO / Medium","type":"research","url":"https://extropy-io.medium.com/breaking-down-the-6-5m-abracadabra-money-hack-a-detailed-analysis-of-the-cauldron-v4-exploit-44100da10896"},{"credibility":1,"name":"Abracadabra Drained of $13M in Attack Targeting Cauldrons Tied to GMX Liquidity Tokens | CoinDesk","type":"news_article","url":"https://www.coindesk.com/business/2025/03/25/abracadabra-drained-of-usd13m-in-exploit-targeting-cauldrons-tied-to-gmx-liquidity-tokens"},{"credibility":2,"name":"Explained: The Abracadabra Hack (October 2025) | Halborn","type":"research","url":"https://www.halborn.com/blog/post/explained-the-abracadabra-hack-october-2025"},{"credibility":2,"name":"Explained: The Abracadabra Money Hack (March 2025) | Halborn","type":"research","url":"https://www.halborn.com/blog/post/explained-the-abracadabra-money-hack-march-2025"},{"credibility":1,"name":"Abracadabra loses $1.8 million in protocol's third major DeFi hack since 2024 | The Block","type":"news_article","url":"https://www.theblock.co/post/373453/abracadabra-loses-1-8-million-in-protocols-third-major-defi-hack-since-2024"},{"credibility":1,"name":"MIM Stablecoin Suffers Flash Crash Amid $6.5M Exploit | CoinDesk","type":"news_article","url":"https://www.coindesk.com/business/2024/01/30/mim-stablecoin-suffers-flash-crash-amid-65m-exploit"},{"credibility":2,"name":"Draining the Cauldron: Inside the $13M Abracadabra GMX V2 Exploit | Three Sigma","type":"research","url":"https://threesigma.xyz/blog/exploit/abracadabra-gmx-defi-exploit-explained"}]},{"content":"The MIM stablecoin has experienced multiple documented depegging events since its launch. In January 2022, MIM fell in sympathy with the Wonderland/Sifu scandal as confidence in the Frog Nation ecosystem collapsed. In June 2022, following the Terra/LUNA collapse, MIM dropped to approximately $0.914, its lowest point during that cycle. Autism Capital alleged the protocol had accrued $12 million in bad debt because liquidations could not execute fast enough to cover MIM liabilities created by UST-collateralized cauldrons; Sestagalli disputed the insolvency characterization by disclosing on-chain treasury balances. In November 2022, MIM depegged again — falling briefly to $0.95 — after it emerged that FTT (FTX's native token) represented approximately 33–35% of total collateral locked in Abracadabra cauldrons at the time FTX collapsed. In January 2024, MIM crashed to $0.76 immediately following the $6.5 million Cauldron exploit, the sharpest depeg in the token's history. Each depegging event has been attributed to a combination of collateral quality risk, smart contract failures, and loss of market confidence rather than a formal algorithmic peg mechanism.","heading":"MIM Stablecoin Depegging Events","severity":"critical","sources":[{"credibility":2,"name":"Magic Internet Money (MIM) Stablecoin Depegs Amid Insolvency FUD | CoinGape","type":"news_article","url":"https://coingape.com/magic-internet-money-mim-stablecoin-depegs-amid-insolvency-fud/"},{"credibility":1,"name":"Magic Internet Money token depegs as LUNA domino effect persists | CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/magic-internet-money-token-depegs-as-terra-luna-domino-effect-persists"},{"credibility":1,"name":"Abracadabra's MIM Stablecoin Briefly Lost Dollar Peg as FTX's FTT Token Tanked | CoinDesk","type":"news_article","url":"https://www.coindesk.com/markets/2022/11/08/abracadabras-mim-stablecoin-briefly-lost-dollar-peg-as-ftxs-ftt-token-tanked"},{"credibility":2,"name":"Abracadabra Finance suffers $6.5 million exploit, MIM stablecoin crashes to $0.76 | Crypto Briefing","type":"news_article","url":"https://cryptobriefing.com/abracadabra-finance-suffers-6-5-million-exploit-mim-stablecoin-crashes-076/"},{"credibility":1,"name":"MIM stablecoin slightly loses dollar parity amid fears of partial FTT backing | The Block","type":"news_article","url":"https://www.theblock.co/post/184109/mim-stablecoin-slightly-loses-dollar-parity-amid-fears-of-partial-ftt-backing"}]},{"content":"The Terra/LUNA collapse in May 2022 left Abracadabra with approximately $12–12.5 million in bad debt denominated in MIM, created because automated liquidations on UST-collateralized cauldrons could not execute before positions became undercollateralized. The protocol published a formal bad debt repayment plan (AIP #10) in November 2022, committing the treasury to repaying approximately 5% of outstanding bad debt (roughly 425,000 MIM) per month using protocol fee revenue, spread over a 20-month schedule. The percentage of treasury protocol fees allocated to repayment was increased from 25% to 80% under this plan. By the time AIP #10 was enacted, outstanding bad debt had been reduced from 12.5 million MIM to under 8.5 million MIM using earlier ad hoc repayments. The FTX collapse in November 2022 compounded concerns when it became clear that FTT tokens served as the single largest collateral class within Abracadabra cauldrons, representing an estimated 33–35% of total TVL at the time. Subsequent exploits in 2024 and 2025 generated additional rounds of bad debt that the protocol absorbed using treasury buybacks and burns.","heading":"Bad Debt and Insolvency Concerns","severity":"high","sources":[{"credibility":2,"name":"AIP #10: Bad Debt Repayment Plan | Abracadabra Forum","type":"official","url":"https://forum.abracadabra.money/t/aip-10-bad-debt-repayment-plan/3940"},{"credibility":2,"name":"MIM issuer Abracadabra launches vote on bad-debt repayment plan triggered by UST crash | BlockBeats","type":"news_article","url":"https://www.theblockbeats.info/en/flash/111667"},{"credibility":2,"name":"Abracadabra's Magic Internet Money De-pegs With Insolvency FUD | The Crypto Times","type":"news_article","url":"https://cryptotimes.io/abracadabras-magic-internet-money-de-pegs-with-insolvency-fud"}]},{"content":"Abracadabra's Cauldron model allows users to post a wide variety of interest-bearing tokens as collateral. This flexibility, while a core product differentiator, has repeatedly created concentrated exposure to assets that subsequently collapsed in value. In November 2022, FTT — the native token of FTX — was estimated to account for approximately 33–35% of all collateral locked in Abracadabra cauldrons. The liquidation price for FTT in those cauldrons was reportedly around $6.76, meaning any price drop below that threshold would trigger cascading liquidations. As FTX imploded, FTT fell rapidly and MIM depegged as a result. Earlier, UST was similarly concentrated as collateral before the Terra ecosystem collapsed. The pattern of accepting high-yield, high-risk tokens as collateral — and the resulting systemic exposure when those tokens fail — represents a recurring structural risk to MIM's peg stability and the protocol's overall solvency.","heading":"Collateral Risk and FTX Exposure","severity":"high","sources":[{"credibility":1,"name":"Abracadabra's MIM Stablecoin Briefly Lost Dollar Peg as FTX's FTT Token Tanked | CoinDesk","type":"news_article","url":"https://www.coindesk.com/markets/2022/11/08/abracadabras-mim-stablecoin-briefly-lost-dollar-peg-as-ftxs-ftt-token-tanked"},{"credibility":1,"name":"MIM stablecoin slightly loses dollar parity amid fears of partial FTT backing | The Block","type":"news_article","url":"https://www.theblock.co/post/184109/mim-stablecoin-slightly-loses-dollar-parity-amid-fears-of-partial-ftt-backing"}]},{"content":"SPELL reached an all-time high of approximately $0.075 in November 2021. By August 2023, it had fallen to approximately $0.0003498 — a decline of over 99.5%. As of early 2026, SPELL was trading near $0.0001648, representing a decline of over 99.7% from the all-time high. The token has a highly inflationary emission schedule: the original design called for 50% of total supply issued in year one, 25% in year two, and halving in subsequent years. As of mid-2026, the annualized inflation rate for SPELL is reported at approximately 59.68% against a circulating supply of approximately 171.5 billion tokens, meaning roughly 64 billion new tokens were minted in the prior year. With annualized protocol revenue near zero — the protocol reportedly generated approximately $10 per day in fees in early 2026, against a market cap in the range of tens of millions — SPELL stakers earn negligible returns. The SPELL tokenomics create persistent sell pressure from emissions without sufficient revenue or utility to absorb it.","heading":"SPELL Token Tokenomics and Price Collapse","severity":"high","sources":[{"credibility":3,"name":"Spell Token (SPELL) Price Prediction for 2022, 2023, 2025 and 2030 | StormGain","type":"research","url":"https://stormgain.com/blog/spell-token-spell-price-prediction"},{"credibility":2,"name":"SPELL Token Price Prediction 2025, 2026 and 2030: Can SPELL Make a Comeback? | CryptoNews","type":"news_article","url":"https://cryptonews.net/news/analytics/32728935/"},{"credibility":2,"name":"Abracadabra TVL, Fees & Revenue | DeFiLlama","type":"on_chain","url":"https://defillama.com/protocol/abracadabra"}]},{"content":"Abracadabra Money's total value locked peaked in late 2021 during the height of DeFi 2.0 enthusiasm, generating over $38.75 million in gross revenue in Q4 2021 alone. As of mid-2026, the protocol's TVL has declined to approximately $8.66 million, the majority held on Arbitrum ($5.52 million) and Ethereum ($2.61 million). Daily fee generation is minimal — approximately $69 per day in early 2026 — and the protocol's annualized earnings are negative, meaning incentive spending exceeds revenue. The protocol continues to operate with stricter debt caps, isolated cauldron structures, and more conservative collateral acceptance policies following the security incidents of 2024–2025. Compared to leading DeFi lending protocols such as Aave — which reported TVL near $74 billion in Q3 2025 — Abracadabra now represents a small fraction of the DeFi lending market.","heading":"Protocol TVL Decline and Current State","severity":"high","sources":[{"credibility":2,"name":"Abracadabra TVL, Fees & Revenue | DeFiLlama","type":"on_chain","url":"https://defillama.com/protocol/abracadabra"}]},{"content":"Abracadabra's security audit record is mixed and has been a source of criticism. DeFiSafety's process quality review reported that Abracadabra lacked formal third-party audits and had no documented code coverage testing, formal verification, or testnet stress testing at the time of their assessment. In March 2024, Code4rena conducted a competitive audit of the Abracadabra MimSwap system, identifying 20 unique vulnerabilities including 4 rated HIGH severity and 16 rated MEDIUM severity. Popsicle Finance, a sister protocol under the Frog Nation umbrella that shared infrastructure and team, was exploited for $20.7 million in August 2021 before its own post-incident audits by Quantstamp and Certora. The three Abracadabra-specific exploits in 2024–2025 exploited logical flaws in contract accounting and action sequencing in contracts that had been deployed for extended periods, suggesting that audit coverage — when present — did not catch the specific classes of vulnerabilities that were later exploited.","heading":"Security Audit History","severity":"high","sources":[{"credibility":2,"name":"Abracadabra.money - detailed report | DeFiSafety","type":"research","url":"https://www.defisafety.com/app/pqrs/19"},{"credibility":2,"name":"Code4rena Abracadabra MimSwap Audit Report 2024","type":"research","url":"https://code4rena.com/reports/2024-03-abracadabra-money"},{"credibility":2,"name":"Abracadabra Money Hack Unveils Deep-Rooted DeFi Security Flaws | OneSafe","type":"research","url":"https://www.onesafe.io/blog/abracadabra-money-hack-defi-security-vulnerabilities"}]},{"content":"Abracadabra Money and its affiliated Wonderland project have faced significant governance credibility concerns. During the Sifu crisis in January–February 2022, Sestagalli acknowledged he had known for at least a month about Sifu's true identity as Michael Patryn before ZachXBT's public disclosure. Sestagalli chose not to disclose this to the community. After the revelation, TIME holders voted 88% in favor of removing Sifu. In a subsequent snapshot vote on whether to dissolve Wonderland, 55.11% of voters chose to continue the protocol. Despite this, Sestagalli announced the project's closure, effectively overriding the community's governance vote. Critics, including observers at Crypto Briefing and BeInCrypto, characterized this as a violation of DAO governance principles. The Wonderland/Abracadabra ecosystem operates with concentrated decision-making power in practice, despite formal DAO governance structures. Sestagalli subsequently returned to DeFi in late 2022, receiving mixed reception from community members.","heading":"Governance Concerns and DAO Override","severity":"high","sources":[{"credibility":2,"name":"Wonderland (TIME) Scandal: Daniele Sestagalli Ignores Community Vote | BeInCrypto","type":"news_article","url":"https://beincrypto.com/wonderland-time-ceo-ignores-community-vote-announces-projects-closure/"},{"credibility":2,"name":"Disgraced DeFi Founder Daniele Sestagalli Calls Time on Wonderland | Crypto Briefing","type":"news_article","url":"https://cryptobriefing.com/disgraced-defi-founder-daniele-sestagalli-calls-time-wonderland/"},{"credibility":2,"name":"Daniele Sesta and $TIME: A Story of Decline | CoinCulture","type":"news_article","url":"https://coinculture.com/au/people/the-downfall-of-daniele-sesta-and-time-202202/"}]},{"content":"On-chain investigator ZachXBT was the primary source behind the January 27, 2022 disclosure that identified Wonderland's treasury manager 0xSifu as Michael Patryn, the pseudonymous co-founder of QuadrigaCX and convicted felon Omar Dhanani. The revelation triggered the collapse of the TIME token and sympathy declines across the Frog Nation ecosystem including SPELL and MIM. ZachXBT's disclosure is widely credited in the crypto security community as one of the defining on-chain investigations of the 2021–2022 DeFi 2.0 cycle. Beyond this specific disclosure, the 0xSifu wallet's movement of $8.3–$8.4 million through Tornado Cash after the scandal broke was noted and reported by on-chain observers, adding to concerns about the trustworthiness of Wonderland's treasury management.","heading":"ZachXBT and On-Chain Investigator Findings","severity":"critical","sources":[{"credibility":1,"name":"Wonderland Rattled After Co-Founder Tied to Failed QuadrigaCX Exchange | CoinDesk","type":"news_article","url":"https://www.coindesk.com/markets/2022/01/27/wonderland-rattled-after-cofounder-tied-to-alleged-quadrigacx-190m-exit-scam"},{"credibility":2,"name":"'Funds are Sifu': Wonderland's Controversial Treasury Chief Washes $8.3M of ETH Via Tornado Cash | F1Coins","type":"news_article","url":"https://f1coins.com/news/funds-are-sifu-wonderlands-controversial-treasury-chief-washes-83m-of-eth-via-tornado-cash"},{"credibility":2,"name":"Wonderland ($TIME) and $MIM scandal: what you need to know | Pontem Network","type":"news_article","url":"https://pontem.network/posts/wonderland-time-and-mim-scandal-what-you-need-to-know"}]},{"content":"Abracadabra Money was designed as part of a mutually reinforcing DeFi ecosystem with Wonderland (TIME) and Popsicle Finance (ICE). These projects shared governance participants, treasury linkages, and relied on each other's token performance. Popsicle Finance suffered a $20.7 million exploit in August 2021 before Abracadabra itself was exploited. The interconnected nature of Frog Nation projects meant that reputational or financial damage to one project cascaded to others. Wonderland used wMEMO — wrapped Wonderland staked tokens — as collateral on Abracadabra, creating a direct financial coupling between the two protocols. The collapse of Wonderland and the Sifu scandal damaged trust in MIM and SPELL simultaneously, illustrating the systemic risk inherent in the Frog Nation architecture.","heading":"Frog Nation Ecosystem and Interconnected Risk","severity":"high","sources":[{"credibility":1,"name":"DeFi Project Popsicle's ICE Token Triples as Controversial Wonderland Founder Returns | CoinDesk","type":"news_article","url":"https://www.coindesk.com/markets/2022/12/21/defi-project-popsicles-ice-token-triples-as-controversial-wonderland-founder-returns"},{"credibility":2,"name":"How The Collapse Of One Small Crypto Project Exposed A Serious Flaw In The Market | Finimize","type":"news_article","url":"https://finimize.com/content/how-collapse-one-small-crypto-project-exposed-serious-flaw-market"}]}],"sources_used":[{"credibility":2,"name":"Abracadabra.money: SPELL Token & Crypto Lending | Gemini","type":"research","url":"https://www.gemini.com/cryptopedia/abracadabra-money-spell-token-abracadabra-crypto-lending"},{"credibility":2,"name":"Magic Internet Money (MIM): A Yield-Bearing Stablecoin | Gemini","type":"research","url":"https://www.gemini.com/cryptopedia/magic-internet-money-mim-crypto-abracadabra-money"},{"credibility":2,"name":"Abracadabra TVL, Fees & Revenue | DeFiLlama","type":"on_chain","url":"https://defillama.com/protocol/abracadabra"},{"credibility":2,"name":"Who Is Daniele Sestagalli? | Crypto Briefing","type":"news_article","url":"https://cryptobriefing.com/who-is-daniele-sestagalli/"},{"credibility":1,"name":"Wonderland Rattled After Co-Founder Tied to Failed QuadrigaCX Exchange | CoinDesk","type":"news_article","url":"https://www.coindesk.com/markets/2022/01/27/wonderland-rattled-after-cofounder-tied-to-alleged-quadrigacx-190m-exit-scam"},{"credibility":1,"name":"How Did a Former Quadriga Exec End Up Running a DeFi Protocol? | CoinDesk","type":"news_article","url":"https://www.coindesk.com/tech/2022/01/27/how-did-a-former-quadriga-exec-end-up-running-a-defi-protocol-wonderland-founder-explains"},{"credibility":2,"name":"Wonderland (TIME) Scandal: Daniele Sestagalli Ignores Community Vote | BeInCrypto","type":"news_article","url":"https://beincrypto.com/wonderland-time-ceo-ignores-community-vote-announces-projects-closure/"},{"credibility":2,"name":"How DeFi Protocol Wonderland Avoided Shutdown After Scandal | Decrypt","type":"news_article","url":"https://decrypt.co/91968/how-wonderland-daniele-sestagalli-defi-avoided-shutting-down-after-michael-patryn-scandal"},{"credibility":1,"name":"QuadrigaCX Co-Founder Michael Patryn Is Actually Convicted Criminal Omar Dhanani | CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/quadrigacx-co-founder-michael-patryn-is-actually-convicted-criminal-omar-dhanani-report"},{"credibility":1,"name":"Quadriga co-founder served time in U.S. prison for role in identity-theft ring | Globe and Mail","type":"news_article","url":"https://www.theglobeandmail.com/business/article-quadriga-co-founder-served-time-in-us-for-role-in-identity-theft/"},{"credibility":2,"name":"Breaking Down the $6.5M Abracadabra Money Hack | Extropy.IO / Medium","type":"research","url":"https://extropy-io.medium.com/breaking-down-the-6-5m-abracadabra-money-hack-a-detailed-analysis-of-the-cauldron-v4-exploit-44100da10896"},{"credibility":1,"name":"Abracadabra Drained of $13M in Attack Targeting Cauldrons Tied to GMX Liquidity Tokens | CoinDesk","type":"news_article","url":"https://www.coindesk.com/business/2025/03/25/abracadabra-drained-of-usd13m-in-exploit-targeting-cauldrons-tied-to-gmx-liquidity-tokens"},{"credibility":2,"name":"Explained: The Abracadabra Hack (October 2025) | Halborn","type":"research","url":"https://www.halborn.com/blog/post/explained-the-abracadabra-hack-october-2025"},{"credibility":2,"name":"Explained: The Abracadabra Money Hack (March 2025) | Halborn","type":"research","url":"https://www.halborn.com/blog/post/explained-the-abracadabra-money-hack-march-2025"},{"credibility":1,"name":"Abracadabra loses $1.8 million in protocol's third major DeFi hack since 2024 | The Block","type":"news_article","url":"https://www.theblock.co/post/373453/abracadabra-loses-1-8-million-in-protocols-third-major-defi-hack-since-2024"},{"credibility":1,"name":"MIM Stablecoin Suffers Flash Crash Amid $6.5M Exploit | CoinDesk","type":"news_article","url":"https://www.coindesk.com/business/2024/01/30/mim-stablecoin-suffers-flash-crash-amid-65m-exploit"},{"credibility":1,"name":"Magic Internet Money token depegs as LUNA domino effect persists | CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/magic-internet-money-token-depegs-as-terra-luna-domino-effect-persists"},{"credibility":1,"name":"Abracadabra's MIM Stablecoin Briefly Lost Dollar Peg as FTX's FTT Token Tanked | CoinDesk","type":"news_article","url":"https://www.coindesk.com/markets/2022/11/08/abracadabras-mim-stablecoin-briefly-lost-dollar-peg-as-ftxs-ftt-token-tanked"},{"credibility":1,"name":"MIM stablecoin slightly loses dollar parity amid fears of partial FTT backing | The Block","type":"news_article","url":"https://www.theblock.co/post/184109/mim-stablecoin-slightly-loses-dollar-parity-amid-fears-of-partial-ftt-backing"},{"credibility":2,"name":"AIP #10: Bad Debt Repayment Plan | Abracadabra Forum","type":"official","url":"https://forum.abracadabra.money/t/aip-10-bad-debt-repayment-plan/3940"},{"credibility":2,"name":"Abracadabra.money - detailed report | DeFiSafety","type":"research","url":"https://www.defisafety.com/app/pqrs/19"},{"credibility":2,"name":"Code4rena Abracadabra MimSwap Audit Report 2024","type":"research","url":"https://code4rena.com/reports/2024-03-abracadabra-money"},{"credibility":2,"name":"Draining the Cauldron: Inside the $13M Abracadabra GMX V2 Exploit | Three Sigma","type":"research","url":"https://threesigma.xyz/blog/exploit/abracadabra-gmx-defi-exploit-explained"},{"credibility":2,"name":"Disgraced DeFi Founder Daniele Sestagalli Calls Time on Wonderland | Crypto Briefing","type":"news_article","url":"https://cryptobriefing.com/disgraced-defi-founder-daniele-sestagalli-calls-time-wonderland/"},{"credibility":2,"name":"'Funds are Sifu': Wonderland's Controversial Treasury Chief Washes $8.3M of ETH Via Tornado Cash | F1Coins","type":"news_article","url":"https://f1coins.com/news/funds-are-sifu-wonderlands-controversial-treasury-chief-washes-83m-of-eth-via-tornado-cash"},{"credibility":1,"name":"DeFi Project Popsicle's ICE Token Triples as Controversial Wonderland Founder Returns | CoinDesk","type":"news_article","url":"https://www.coindesk.com/markets/2022/12/21/defi-project-popsicles-ice-token-triples-as-controversial-wonderland-founder-returns"},{"credibility":3,"name":"Jan 2022 — Wonderland Money Sifu Scandal — $8.4m | QuadrigaInitiative","type":"community_report","url":"http://www.quadrigainitiative.com/casestudy/wonderlandmoneysifuscandal.php"},{"credibility":2,"name":"Abracadabra Finance suffers $6.5 million exploit, MIM stablecoin crashes to $0.76 | Crypto Briefing","type":"news_article","url":"https://cryptobriefing.com/abracadabra-finance-suffers-6-5-million-exploit-mim-stablecoin-crashes-076/"},{"credibility":2,"name":"SPELL Token Price Prediction 2025, 2026 and 2030: Can SPELL Make a Comeback? | CryptoNews","type":"news_article","url":"https://cryptonews.net/news/analytics/32728935/"}],"summary":"Abracadabra Money is a DeFi lending protocol that issues Magic Internet Money (MIM), a USD-pegged stablecoin minted against interest-bearing collateral, governed by the SPELL token. The protocol has experienced three confirmed smart contract exploits between January 2024 and October 2025 totaling over $21 million in losses, multiple MIM depegging events triggered by collateral failures and hacks, and a severe governance credibility crisis in early 2022 after its affiliated Wonderland project's treasury manager was revealed to be a convicted felon and QuadrigaCX co-founder. SPELL has declined over 99.7% from its all-time high and the protocol's TVL has fallen from a 2021 peak in the billions to under $10 million as of mid-2026.","timeline":[{"date":"2021-06-01","event":"Abracadabra Money launches, introducing MIM stablecoin and SPELL governance token","source":"Gemini Cryptopedia","source_url":"https://www.gemini.com/cryptopedia/abracadabra-money-spell-token-abracadabra-crypto-lending"},{"date":"2021-08-01","event":"Popsicle Finance (sister Frog Nation project) exploited for $20.7 million via Sorbetto Fragola pool vulnerability","source":"Phemex Academy","source_url":"https://phemex.com/academy/what-is-popsicle-finance-ice"},{"date":"2021-11-01","event":"SPELL token reaches all-time high of approximately $0.075; Abracadabra TVL peaks at billions in managed assets","source":"CryptoNews SPELL Price Prediction","source_url":"https://cryptonews.net/news/analytics/32728935/"},{"date":"2022-01-26","event":"Wonderland's TIME token collapses to a low of $420 after a $8.4 million withdrawal from the multi-sig treasury sparks liquidation cascade","source":"CoinDesk","source_url":"https://www.coindesk.com/markets/2022/01/26/wonderlands-time-sets-low-of-420-after-liquidation-cascade"},{"date":"2022-01-27","event":"ZachXBT publicly identifies Wonderland treasury manager 0xSifu as Michael Patryn (Omar Dhanani), convicted felon and QuadrigaCX co-founder; TIME, SPELL, and ICE all crash","source":"CoinDesk","source_url":"https://www.coindesk.com/markets/2022/01/27/wonderland-rattled-after-cofounder-tied-to-alleged-quadrigacx-190m-exit-scam"},{"date":"2022-01-27","event":"Sestagalli publicly confirms he knew Sifu's identity before the disclosure and chose not to inform the community","source":"CoinDesk","source_url":"https://www.coindesk.com/tech/2022/01/27/how-did-a-former-quadriga-exec-end-up-running-a-defi-protocol-wonderland-founder-explains"},{"date":"2022-01-28","event":"Community votes 88% in favor of removing Sifu as Wonderland treasury manager","source":"BeInCrypto","source_url":"https://beincrypto.com/wonderland-time-ceo-ignores-community-vote-announces-projects-closure/"},{"date":"2022-02-01","event":"Sestagalli announces Wonderland's closure despite community snapshot vote narrowly favoring continuation, overriding DAO governance outcome","source":"BeInCrypto","source_url":"https://beincrypto.com/wonderland-time-ceo-ignores-community-vote-announces-projects-closure/"},{"date":"2022-06-18","event":"MIM stablecoin drops to $0.914 amid Terra/LUNA contagion; Autism Capital alleges $12 million in bad debt from UST lending market exposure","source":"CoinTelegraph","source_url":"https://cointelegraph.com/news/magic-internet-money-token-depegs-as-terra-luna-domino-effect-persists"},{"date":"2022-11-08","event":"MIM depegs to approximately $0.952 as FTX collapses; FTT tokens comprising an estimated 33–35% of Abracadabra cauldron collateral become near-worthless","source":"CoinDesk","source_url":"https://www.coindesk.com/markets/2022/11/08/abracadabras-mim-stablecoin-briefly-lost-dollar-peg-as-ftxs-ftt-token-tanked"},{"date":"2022-11-01","event":"Abracadabra community votes on AIP #10 bad debt repayment plan; protocol commits to repaying 5% of bad debt monthly from treasury fee revenue over 20 months","source":"Abracadabra Forum","source_url":"https://forum.abracadabra.money/t/aip-10-bad-debt-repayment-plan/3940"},{"date":"2023-08-01","event":"SPELL records then-all-time low of approximately $0.0003498","source":"CryptoNews SPELL Price Prediction","source_url":"https://cryptonews.net/news/analytics/32728935/"},{"date":"2024-01-30","event":"Abracadabra exploited for $6.5 million via Cauldron V3/V4 rounding vulnerability on Ethereum; MIM crashes to $0.76","source":"CoinDesk","source_url":"https://www.coindesk.com/business/2024/01/30/mim-stablecoin-suffers-flash-crash-amid-65m-exploit"},{"date":"2025-03-25","event":"Abracadabra exploited for approximately $13 million via self-liquidation flash loan attack targeting GMX V2 GM pool cauldrons on Arbitrum; 6,260 ETH stolen across 56 transactions","source":"CoinDesk","source_url":"https://www.coindesk.com/business/2025/03/25/abracadabra-drained-of-usd13m-in-exploit-targeting-cauldrons-tied-to-gmx-liquidity-tokens"},{"date":"2025-10-04","event":"Abracadabra exploited for $1.8 million via cook() function logic error in deprecated Cauldron V4 contracts; funds laundered via Tornado Cash","source":"Halborn","source_url":"https://www.halborn.com/blog/post/explained-the-abracadabra-hack-october-2025"},{"date":"2026-02-06","event":"SPELL records new all-time low of approximately $0.0001648","source":"CryptoNews SPELL Price Prediction","source_url":"https://cryptonews.net/news/analytics/32728935/"}]},"v":1}