Verify a decision

{"actor":"system:backfill","investigation_id":"165277a4-bd68-46b8-92c0-11ffcadf8ec3","kind":"publish","page_slug":"zabu-finance","published_at":"2026-05-28T17:49:51.101Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Zabu Finance","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://slowmist.medium.com/brief-analysis-of-zabu-finance-being-hacked-44243919ea29","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-zabu-finance-hack-september-2021","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/tech/2021/09/13/avalanche-based-zabu-finance-exploited-in-32m-hack","type":"other","url":""},{"credibility":3,"name":"https://beincrypto.com/zabu-finance-exploited-on-avalanche-3-2m/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-zabu-finance-hack-september-2021","type":"other","url":""},{"credibility":3,"name":"https://beincrypto.com/zabu-finance-exploited-on-avalanche-3-2m/","type":"other","url":""},{"credibility":3,"name":"https://www.quadrigainitiative.com/casestudy/polyyeldfinancexyeldexploit.php","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://beincrypto.com/zabu-finance-exploited-on-avalanche-3-2m/","type":"other","url":""},{"credibility":3,"name":"https://ambcrypto.com/avalanche-based-zabu-finance-loses-3-2m-to-defi-exploit/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/tech/2021/09/13/avalanche-based-zabu-finance-exploited-in-32m-hack","type":"other","url":""},{"credibility":3,"name":"https://beincrypto.com/zabu-finance-exploited-on-avalanche-3-2m/","type":"other","url":""},{"credibility":3,"name":"https://www.quadrigainitiative.com/hackfraudscam/zabufinancestakingcalculationbug.php","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://defillama.com/protocol/zabu-finance","type":"other","url":""},{"credibility":3,"name":"https://www.coinbase.com/price/zabu-finance","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://en.wikipedia.org/wiki/ZachXBT","type":"other","url":""}]}],"sources_used":[{"credibility":1,"name":"Avalanche-Based Zabu Finance Exploited in $3.2M Hack — CoinDesk","type":"news_article","url":"https://www.coindesk.com/tech/2021/09/13/avalanche-based-zabu-finance-exploited-in-32m-hack"},{"credibility":2,"name":"Brief Analysis of Zabu Finance Being Hacked — SlowMist","type":"research","url":"https://slowmist.medium.com/brief-analysis-of-zabu-finance-being-hacked-44243919ea29"},{"credibility":2,"name":"Explained: The Zabu Finance Hack (September 2021) — Halborn","type":"research","url":"https://www.halborn.com/blog/post/explained-the-zabu-finance-hack-september-2021"},{"credibility":2,"name":"Zabu Finance Exploited on Avalanche For $3.2M — BeInCrypto","type":"news_article","url":"https://beincrypto.com/zabu-finance-exploited-on-avalanche-3-2m/"},{"credibility":2,"name":"Knowsec Blockchain Lab Zabu Finance Flash Loan Analysis — Medium","type":"research","url":"https://medium.com/@Knownsec_Blockchain_Lab/knowsec-blockchain-lab-zabu-finance-flash-loan-security-incident-analysis-5fe10e7f4849"},{"credibility":3,"name":"Sep 2021 Zabu Finance Staking Calculation Bug — Quadriga Initiative","type":"community_report","url":"https://www.quadrigainitiative.com/hackfraudscam/zabufinancestakingcalculationbug.php"},{"credibility":2,"name":"Avalanche-based Zabu Finance loses $3.2M to DeFi exploit — AMBCrypto","type":"news_article","url":"https://ambcrypto.com/avalanche-based-zabu-finance-loses-3-2m-to-defi-exploit/"},{"credibility":2,"name":"Zabu Finance — DefiLlama Protocol Page","type":"on_chain","url":"https://defillama.com/protocol/zabu-finance"},{"credibility":3,"name":"Jul 2021 PolyYeld Finance xYeld Exploit — Quadriga Initiative","type":"community_report","url":"https://www.quadrigainitiative.com/casestudy/polyyeldfinancexyeldexploit.php"}],"summary":"Zabu Finance was an Avalanche-based yield farming protocol that suffered a $3.2 million flash loan exploit on September 12, 2021, marking what was widely described as the first major DeFi hack on the Avalanche blockchain. The vulnerability — a known deflationary token accounting flaw that had already been exploited on Polygon two months prior — drained the protocol's SPORE staking pool and caused the ZABU token to collapse from approximately $0.004 to near-zero. The protocol attempted a v2 token relaunch but has since gone effectively dormant, with a TVL of approximately $5,000 and a website SSL certificate that expired in August 2022.","timeline":[{"date":"2021-07-01","event":"PolyYeld Finance on Polygon is exploited using the identical deflationary-token accounting flaw; YELD token crashes to zero. The vulnerability is publicly documented but no widespread industry remediation follows.","source":""},{"date":"2021-09-12","event":"Zabu Finance is exploited on Avalanche via flash loan attack targeting SPORE pool's deflationary token accounting flaw. Attacker mints approximately 4.5 billion ZABU tokens and dumps them on Pangolin and Trader Joe DEXes, stealing approximately $3.2 million. ZABU price collapses ~99.5%.","source":""},{"date":"2021-09-13","event":"Zabu Finance team sets all farm rewards to zero and announces a snapshot-based v2 token recovery plan. PeckShield publicly states the bug 'happened many times before.' SlowMist and Knownsec publish technical analyses of the exploit.","source":""},{"date":"2021-09-13","event":"Zabu Finance burns approximately 93.12 million ZABU tokens (valued at ~$360,000 at time of burn) as part of recovery efforts.","source":""},{"date":"2022-08-22","event":"Zabu Finance website SSL certificate expires and is not renewed, indicating active development and maintenance has ceased.","source":""},{"date":"2026-05-01","event":"DefiLlama records Zabu Finance TVL at approximately $5,147. ZABU token is delisted from major exchanges. Protocol is effectively dormant.","source":""}]},"v":1}