Verify a decision

{"actor":"system:backfill","investigation_id":"1848f0de-42fd-40f9-ba1b-84c8aa72ef2a","kind":"publish","page_slug":"themis-protocol","published_at":"2026-05-29T17:23:43.305Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Themis Protocol","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://blog.themis.exchange/themis-the-first-defi-nft-lending-protocol-raises-2m-with-multiple-backers-including-dao-maker-4554fb9f578f","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/themis-protocol","type":"other","url":""},{"credibility":3,"name":"https://github.com/Themis-protocol/Introduction","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://neptunemutual.medium.com/how-was-themis-protocol-exploited-79844ff4f97b","type":"other","url":""},{"credibility":3,"name":"https://smartcontract.tips/articoli/flash-loan-attack-themis-en/","type":"other","url":""},{"credibility":3,"name":"https://blog.solidityscan.com/themis-protocol-hack-analysis-7241f6470b2e","type":"other","url":""},{"credibility":3,"name":"https://www.web3isgoinggreat.com/?id=themis-protocol-hacked-shortly-after-going-live","type":"other","url":""},{"credibility":3,"name":"https://arbiscan.io/address/0xdb73eb484e7dea3785520d750eabef50a9b9ab33","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://neptunemutual.medium.com/how-was-themis-protocol-exploited-79844ff4f97b","type":"other","url":""},{"credibility":3,"name":"https://blog.solidityscan.com/themis-protocol-hack-analysis-7241f6470b2e","type":"other","url":""},{"credibility":3,"name":"https://github.com/Themis-protocol/Solidity-Open-Source/issues/1","type":"other","url":""},{"credibility":3,"name":"https://smartcontract.tips/articoli/flash-loan-attack-themis-en/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://cryptorank.io/news/feed/1ea76-198354-themis-protocol-370000-damage-due-to-flashloan-attack","type":"other","url":""},{"credibility":3,"name":"https://cryptonews.net/news/security/21237749/","type":"other","url":""},{"credibility":3,"name":"https://www.web3isgoinggreat.com/?id=themis-protocol-hacked-shortly-after-going-live","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/themis-protocol","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.web3isgoinggreat.com/?id=themis-protocol-hacked-shortly-after-going-live","type":"other","url":""},{"credibility":3,"name":"https://github.com/Themis-protocol/Solidity-Open-Source/issues/1","type":"other","url":""},{"credibility":3,"name":"https://blog.solidityscan.com/themis-protocol-hack-analysis-7241f6470b2e","type":"other","url":""},{"credibility":3,"name":"https://neptunemutual.medium.com/how-was-themis-protocol-exploited-79844ff4f97b","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://arbiscan.io/address/0xdb73eb484e7dea3785520d750eabef50a9b9ab33","type":"other","url":""},{"credibility":3,"name":"https://neptunemutual.medium.com/how-was-themis-protocol-exploited-79844ff4f97b","type":"other","url":""},{"credibility":3,"name":"https://smartcontract.tips/articoli/flash-loan-attack-themis-en/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://defillama.com/protocol/themis-protocol","type":"other","url":""},{"credibility":3,"name":"https://cryptorank.io/news/feed/1ea76-198354-themis-protocol-370000-damage-due-to-flashloan-attack","type":"other","url":""},{"credibility":3,"name":"https://www.web3isgoinggreat.com/?id=themis-protocol-hacked-shortly-after-going-live","type":"other","url":""}]}],"sources_used":[],"summary":"Themis Protocol is a DeFi lending and borrowing platform deployed on Arbitrum that allows users to collateralize Uniswap v3 LP positions and Balancer LP tokens to borrow stablecoins and blue-chip assets. On June 27, 2023, approximately eleven days after its beta launch, the protocol suffered a flash loan oracle manipulation exploit resulting in approximately $370,000 in losses. The attacker laundered the stolen funds via Tornado Cash, the protocol was suspended indefinitely, and TVL effectively dropped to near zero following the incident.","timeline":[{"date":"2021-11-01","event":"Themis Protocol announces $2 million seed round with backers including DAO Maker, NFX, LD Capital, and Ghaf Capital.","source":""},{"date":"2022-03-28","event":"A High Risk vulnerability in the Uniswap v3 LP pricing formula is filed in Themis Protocol's public GitHub repository, noting that use of spot price (slot0) rather than TWAP makes LP token collateral exploitable via price manipulation.","source":""},{"date":"2023-06-16","event":"Themis Protocol launches in beta on Arbitrum One. TVL grows to approximately $1 million within days.","source":""},{"date":"2023-06-27","event":"Themis Protocol is exploited via a flash loan oracle manipulation attack on Arbitrum One. Approximately $370,000 is stolen by manipulating the Balancer LP token price oracle. Attacker address: 0xdb73eb484e7dea3785520d750eabef50a9b9ab33.","source":""},{"date":"2023-06-27","event":"Themis team suspends borrowing functions and announces an emergency investigation. Team states it is preparing a compensation plan and pursuing fund recovery from the attacker.","source":""},{"date":"2023-06-28","event":"Attacker cross-chains stolen funds via Stargate Finance and begins laundering approximately 191 ETH through Tornado Cash.","source":""},{"date":"2023-06-28","event":"Multiple security firms including Neptune Mutual and SolidityScan publish post-mortem analyses of the Themis Protocol exploit.","source":""}]},"v":1}