Verify a decision

{"actor":"system:backfill","investigation_id":"3237b462-d3c5-42b9-9b44-d2611221db93","kind":"publish","page_slug":"treasure-dao","published_at":"2026-06-01T17:49:49.113Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Treasure DAO","sections":[{"content":"On March 3, 2022, the Treasure NFT Marketplace on Arbitrum was exploited through a critical input validation vulnerability in the marketplace's smart contract. The buyItem() function failed to verify that the _quantity parameter was greater than zero before processing NFT transfers. Because total price was calculated as _pricePerItem * _quantity, passing a quantity of zero caused the total payment required to evaluate to zero, allowing attackers to claim NFTs without transferring any MAGIC tokens. Security firm SlowMist confirmed the flaw was located in the TreasureMarketplaceBuyer contract at address 0x812cda2181ed7c45a35a691e0c85e231d218e273 and the TreasureMarketplace contract at 0x2e3b85f85628301a0bce300dee3a6b04195a15ee. The Treasure team described the root cause as 'a basic bug arising from a prior fix that should have been identified earlier.' A total of 153 NFTs were stolen across multiple collections, with an estimated value of approximately 426,500 MAGIC tokens — worth roughly $1.4 million at the time of the incident. The MAGIC token price fell from $3.82 to $2.55 immediately following disclosure before partially recovering to approximately $3.30.","heading":"March 2022 Marketplace Exploit","severity":"critical","sources":[{"credibility":2,"name":"TreasureDAO Marketplace Suffers Exploit, 153 NFTs Stolen — DappRadar","type":"news_article","url":"https://dappradar.com/blog/treasauredao-marketplace-suffers-exploit-153-nfts-stolen"},{"credibility":2,"name":"Analysis of the TreasureDAO Zero Fee Exploit — SlowMist","type":"research","url":"https://slowmist.medium.com/analysis-of-the-treasuredao-zero-fee-exploit-73791f4b9c14"},{"credibility":2,"name":"Hackers Exploit Arbitrum-based Marketplace Treasure: Over 100 NFTs Stolen — CryptoPotato","type":"news_article","url":"https://cryptopotato.com/hackes-exploit-arbitrum-based-marketplace-treasure-over-100-nfts-stolen/"},{"credibility":1,"name":"Treasure marketplace tells users to delist NFTs after exploit — The Block","type":"news_article","url":"https://www.theblock.co/linked/136143/treasure-marketplace-tells-users-to-delist-nfts-after-exploit"}]},{"content":"Within hours of the exploit being publicly disclosed, some attackers voluntarily began returning stolen NFTs, particularly Smol Brains. The Treasure team reported that approximately 100 of the 153 stolen NFTs were returned, leaving roughly 50 NFTs unrecovered. Co-founder John Patten publicly stated he would personally surrender his own Smol Brains holdings to compensate affected users, stating 'I will personally give up all my Smols to fix this.' The team announced that for users who did not receive their assets back, a formal remediation proposal would be submitted to the DAO for a community vote. CoinDesk reported that 'the DAO would vote on compensation packages for affected users who remained uncompensated.' The Treasure Marketplace was frozen immediately after the exploit was identified, and the team conducted a full code review before redeploying. The specific outcome of the community vote on compensation and whether all remaining affected users were fully reimbursed was not confirmed in available public sources.","heading":"NFT Recovery and Compensation","severity":"high","sources":[{"credibility":1,"name":"Stolen Smol Brains NFTs Returned to Users Hours After Treasure Exploit — CoinDesk","type":"news_article","url":"https://www.coindesk.com/tech/2022/03/03/stolen-smol-brains-nfts-returned-to-users-hours-after-treasure-exploit"},{"credibility":2,"name":"TreasureDAO addresses recent exploit on Treasure NFT marketplace — Aliens","type":"news_article","url":"https://www.aliens.com/livenews/latest/treasuredao-addresses-recent-exploit-on-treasure-nft-marketplace"},{"credibility":3,"name":"TreasureDAO Exploited — Arover","type":"news_article","url":"https://www.arover.net/2022/03/04/treasuredao-exploited-over-100-stolen-nfts/"}]},{"content":"Following the March 2022 exploit, Treasure paused and subsequently decommissioned the original Treasure Marketplace. In June 2022, the team launched a redesigned NFT marketplace called Trove. The Trove platform expanded beyond the original Treasure ecosystem NFTs to support a wider range of collections — including art, photography, and PFP projects — priced in ETH, while Treasure ecosystem-native collections remained priced in MAGIC. The launch of Trove was widely covered as a direct response to the security failures of the prior marketplace.","heading":"Marketplace Rebuild and Trove Launch","severity":"medium","sources":[{"credibility":2,"name":"TreasureDAO's Trove Marketplace of NFT Games Powered By MAGIC — CoinGecko","type":"news_article","url":"https://www.coingecko.com/learn/treasuredao-magic-gamefi"},{"credibility":2,"name":"The Rebirth of Treasure DAO: Games, AI Agents and an NFT Marketplace — DappRadar","type":"news_article","url":"https://dappradar.com/blog/what-is-treasuredao"}]},{"content":"In 2022, Treasure DAO raised $3 million in an initial funding round led by 1kx, with participation from Merit Circle, AcadArena, Ready Player DAO, and Jiho, the co-founder of Axie Infinity. In September 2022, the project conducted an additional $3.5 million token sale at a fully diluted valuation of $80 million, led by Digital Strategies Guild, with Arbitrum, Alchemy Ventures, Skycatcher, and others participating. The MAGIC token reached an all-time high of approximately $6.32 in 2022 before declining sharply as market conditions deteriorated. The ecosystem expanded to include games such as Bridgeworld, Smolverse, and The Beacon. In December 2024, Treasure launched a proprietary Layer 2 blockchain, Treasure Chain, built on the zkSync Elastic Chain ecosystem, marking a migration away from Arbitrum.","heading":"Funding, Growth, and Ecosystem Expansion (2022–2024)","severity":"low","sources":[{"credibility":2,"name":"TreasureDAO Closes $3.5 Million Funding Round via Token Sale — TokenInsight","type":"news_article","url":"https://tokeninsight.com/en/news/treasuredao-closes-3.5-million-funding-round-via-token-sale-with-arbitrum-involved"},{"credibility":2,"name":"Review of the Current State of the TreasureDAO Ecosystem — LD Capital via Medium","type":"research","url":"https://ld-capital.medium.com/review-of-the-current-state-of-the-treasuredao-ecosystem-2f0a4d0b4bf6"},{"credibility":1,"name":"Web3 Watch: Treasure DAO launches L2 mainnet in ZKsync Elastic Chain ecosystem — Blockworks","type":"news_article","url":"https://blockworks.com/news/treasuredao-layer-2-mainnet-zksync"}]},{"content":"By early 2025, Treasure DAO was facing a severe financial crisis. The project reported over $11.3 million in quarterly expenses during Q4 2024, against approximately $40,000 in quarterly revenue, yielding a significant deficit. Treasury reserves were reported at approximately $2.4 million in stablecoins plus 22.3 million MAGIC tokens. At least 15 contributors were laid off, and co-founder Karel Vuong departed his role. Co-founder John Patten acknowledged the project 'didn't have a scalable business model.' The Treasure Chain was shut down on May 30, 2025, approximately five months after its December 2024 launch, as the $450,000 annual operating cost was deemed unsustainable. Game publishing operations were terminated, with partner games including The Beacon and Calamity departing the ecosystem. Following the restructuring, the project reported reducing its annual burn rate from approximately $11 million to $3.4 million, with a further target reduction to $2.9 million by October 2025.","heading":"Financial Crisis, Layoffs, and Restructuring (2025)","severity":"high","sources":[{"credibility":1,"name":"Treasure makes major cuts in last-ditch effort to stay afloat — Blockworks","type":"news_article","url":"https://blockworks.co/news/treasure-dao-gaming-closes-cuts-layoffs"},{"credibility":2,"name":"Treasure DAO Shuts Gaming Platform, Faces $11.3M Quarterly Loss — AInvest","type":"news_article","url":"https://www.ainvest.com/news/treasure-dao-shuts-gaming-platform-faces-11-3m-quarterly-loss-2504/"},{"credibility":2,"name":"Treasure Chain Shuts Down on May 30th — PlayToEarn","type":"news_article","url":"https://playtoearn.com/news/treasure-chain-shuts-down-on-may-30th"},{"credibility":2,"name":"Gaming ecosystem Treasure Chain shuts down mainnet nearly five months after its launch — crypto.news","type":"news_article","url":"https://crypto.news/gaming-ecosystem-treasure-chain-shuts-down-mainnet-nearly-five-months-after-its-launch/"},{"credibility":2,"name":"Treasure DAO Announces Major Pivot to Extend Runway Into 2026 — PlayToEarn","type":"news_article","url":"https://playtoearn.com/news/treasure-dao-announces-major-pivot-to-extend-runway-into-2026"}]},{"content":"Following the 2025 restructuring, Treasure DAO announced a strategic pivot toward AI agent infrastructure. The new direction centers on a marketplace for trading AI agents — entities with unique attributes including skills, persistent memory, and reputation — that operate across Web3 platforms including games, DeFi tools, and social media. The MAGIC token retains its role as the primary medium of exchange within this revised ecosystem. In April 2025, MAGIC experienced a 155% price surge attributed to speculative interest in the AI pivot, though the token remained well below its 2022 all-time high at approximately $0.06 as of mid-2025. The project's forum (forum.treasure.lol) published quarterly transparency reports throughout 2025 and a Q4 2025 report in early 2026, indicating the project continues operations in reduced form.","heading":"AI Agent Pivot and Current Direction","severity":"medium","sources":[{"credibility":2,"name":"The Rebirth of Treasure DAO: Games, AI Agents and an NFT Marketplace — DappRadar","type":"news_article","url":"https://dappradar.com/blog/what-is-treasuredao"},{"credibility":3,"name":"MAGIC Price Analysis: Can It Go Up More Than 10x After the Treasure Rebrand? — Bitrue","type":"news_article","url":"https://www.bitrue.com/blog/treasure-rebrand-magic-price-surge"},{"credibility":1,"name":"Treasure Official Website","type":"official","url":"https://treasure.lol/"}]}],"sources_used":[{"name":"TreasureDAO Marketplace Suffers Exploit, 153 NFTs Stolen — DappRadar","type":"news_article","url":"https://dappradar.com/blog/treasauredao-marketplace-suffers-exploit-153-nfts-stolen"},{"name":"Stolen Smol Brains NFTs Returned to Users Hours After Treasure Exploit — CoinDesk","type":"news_article","url":"https://www.coindesk.com/tech/2022/03/03/stolen-smol-brains-nfts-returned-to-users-hours-after-treasure-exploit"},{"name":"Analysis of the TreasureDAO Zero Fee Exploit — SlowMist via Medium","type":"research","url":"https://slowmist.medium.com/analysis-of-the-treasuredao-zero-fee-exploit-73791f4b9c14"},{"name":"Treasure marketplace tells users to delist NFTs after exploit — The Block","type":"news_article","url":"https://www.theblock.co/linked/136143/treasure-marketplace-tells-users-to-delist-nfts-after-exploit"},{"name":"Hackers Exploit Arbitrum-based Marketplace Treasure: Over 100 NFTs Stolen — CryptoPotato","type":"news_article","url":"https://cryptopotato.com/hackes-exploit-arbitrum-based-marketplace-treasure-over-100-nfts-stolen/"},{"name":"TreasureDAO's Trove Marketplace of NFT Games Powered By MAGIC — CoinGecko","type":"news_article","url":"https://www.coingecko.com/learn/treasuredao-magic-gamefi"},{"name":"TreasureDAO Closes $3.5 Million Funding Round via Token Sale — TokenInsight","type":"news_article","url":"https://tokeninsight.com/en/news/treasuredao-closes-3.5-million-funding-round-via-token-sale-with-arbitrum-involved"},{"name":"Treasure makes major cuts in last-ditch effort to stay afloat — Blockworks","type":"news_article","url":"https://blockworks.co/news/treasure-dao-gaming-closes-cuts-layoffs"},{"name":"Treasure DAO Shuts Gaming Platform, Faces $11.3M Quarterly Loss — AInvest","type":"news_article","url":"https://www.ainvest.com/news/treasure-dao-shuts-gaming-platform-faces-11-3m-quarterly-loss-2504/"},{"name":"Treasure Chain Shuts Down on May 30th — PlayToEarn","type":"news_article","url":"https://playtoearn.com/news/treasure-chain-shuts-down-on-may-30th"},{"name":"Gaming ecosystem Treasure Chain shuts down mainnet nearly five months after its launch — crypto.news","type":"news_article","url":"https://crypto.news/gaming-ecosystem-treasure-chain-shuts-down-mainnet-nearly-five-months-after-its-launch/"},{"name":"The Rebirth of Treasure DAO: Games, AI Agents and an NFT Marketplace — DappRadar","type":"news_article","url":"https://dappradar.com/blog/what-is-treasuredao"},{"name":"Web3 Watch: Treasure DAO launches L2 mainnet in ZKsync Elastic Chain ecosystem — Blockworks","type":"news_article","url":"https://blockworks.com/news/treasuredao-layer-2-mainnet-zksync"},{"name":"Review of the Current State of the TreasureDAO Ecosystem — LD Capital","type":"research","url":"https://ld-capital.medium.com/review-of-the-current-state-of-the-treasuredao-ecosystem-2f0a4d0b4bf6"},{"name":"John Patten — IQ.wiki","type":"other","url":"https://iq.wiki/wiki/john-patten"},{"name":"Treasure Official Website","type":"official","url":"https://treasure.lol/"},{"name":"Treasure DAO Announces Major Pivot to Extend Runway Into 2026 — PlayToEarn","type":"news_article","url":"https://playtoearn.com/news/treasure-dao-announces-major-pivot-to-extend-runway-into-2026"}],"summary":"Treasure DAO is an Arbitrum-based NFT gaming and metaverse ecosystem centered around the MAGIC token, founded in 2021 by John Patten and Karel Vuong. In March 2022, its NFT marketplace suffered a critical smart contract exploit in which attackers purchased approximately $1.4 million worth of NFTs at zero cost by passing a zero-quantity parameter to the buyItem() function, bypassing all payment validation. The project has since undergone significant restructuring, including the shutdown of its proprietary zkSync-based Treasure Chain in May 2025, mass layoffs, and a strategic pivot toward AI agent infrastructure.","timeline":[{"date":"2021-09-01","event":"Treasure DAO founded by John Patten and Karel Vuong, inspired by the Loot NFT project. The MAGIC token is launched as the ecosystem's native currency.","source":"Gate.io Learn","source_url":"https://www.gate.com/learn/articles/what-is-treasure-dao/891"},{"date":"2022-01-01","event":"Treasure DAO raises $3 million in a funding round led by 1kx, with participation from Merit Circle, AcadArena, Ready Player DAO, and Axie Infinity co-founder Jiho.","source":"BeinCrypto","source_url":"https://beincrypto.com/learn/magic-token/"},{"date":"2022-03-03","event":"Treasure Marketplace exploited via a zero-quantity bug in the buyItem() smart contract function. 153 NFTs — primarily Smol Brains and Legions — are stolen with an estimated value of ~$1.4 million. The marketplace is immediately frozen.","source":"DappRadar","source_url":"https://dappradar.com/blog/treasauredao-marketplace-suffers-exploit-153-nfts-stolen"},{"date":"2022-03-03","event":"Some attackers begin voluntarily returning stolen NFTs within hours of the exploit. CoinDesk reports roughly half of stolen NFTs were returned. Co-founder John Patten pledges personal compensation.","source":"CoinDesk","source_url":"https://www.coindesk.com/tech/2022/03/03/stolen-smol-brains-nfts-returned-to-users-hours-after-treasure-exploit"},{"date":"2022-06-01","event":"Treasure DAO launches Trove, a redesigned NFT marketplace replacing the exploited Treasure Marketplace, supporting both ecosystem-native MAGIC-priced listings and general ETH-priced collections.","source":"CoinGecko","source_url":"https://www.coingecko.com/learn/treasuredao-magic-gamefi"},{"date":"2022-09-16","event":"Treasure DAO completes a $3.5 million MAGIC token sale at an $80 million fully diluted valuation, led by Digital Strategies Guild with participation from Arbitrum and others.","source":"TokenInsight","source_url":"https://tokeninsight.com/en/news/treasuredao-closes-3.5-million-funding-round-via-token-sale-with-arbitrum-involved"},{"date":"2024-12-01","event":"Treasure DAO launches Treasure Chain, a proprietary Layer 2 blockchain built on the zkSync Elastic Chain ecosystem, migrating from Arbitrum.","source":"Blockworks","source_url":"https://blockworks.com/news/treasuredao-layer-2-mainnet-zksync"},{"date":"2025-04-01","event":"Treasure DAO announces major restructuring: at least 15 contributors laid off, co-founder Karel Vuong departs, game publishing operations terminated. Treasury reported at ~$2.4M stablecoins with $11.3M quarterly expenses against $40K quarterly revenue.","source":"Blockworks","source_url":"https://blockworks.co/news/treasure-dao-gaming-closes-cuts-layoffs"},{"date":"2025-05-30","event":"Treasure Chain mainnet shuts down approximately five months after launch, following ratification of governance proposal TIP-52. Users required to bridge out all holdings. Chain operational costs of ~$450,000/year cited as unsustainable.","source":"PlayToEarn","source_url":"https://playtoearn.com/news/treasure-chain-shuts-down-on-may-30th"}]},"v":1}