Verify a decision

{"actor":"system:backfill","investigation_id":"62f7aab4-ebb9-4d15-9bc0-0739d5b23f3a","kind":"publish","page_slug":"mangofarmsol","published_at":"2026-05-28T08:16:08.480Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"MangoFarmSOL","sections":[{"content":"MangoFarmSOL presented itself as a high-yield farming protocol on the Solana blockchain, marketing its MANGO governance token airdrop slated for January 10, 2024. Users were required to deposit SOL tokens into the protocol's smart contract to qualify for the airdrop. Beginning around January 3, 2024, the project engaged key opinion leaders (KOLs) and crypto influencers to promote the protocol across social media. On January 5, the team publicly announced the airdrop schedule. By January 3–7, total value locked (TVL) exceeded $1.3 million. On January 6, 2024 — four days before the promised airdrop — the operators withdrew 13,512 SOL (approximately $1.26 million at prevailing prices) from the contract to wallet address 8ggviFegLUzsddm9ShyMy42TiDYyH9yDDS3gSGdejND7. Simultaneously, a malicious frontend was introduced under the guise of an 'emergency migration,' which was promoted on the project's official Twitter account. Users who interacted with this interface had their wallet assets drained, yielding an additional estimated $60,000 in losses. Total confirmed losses are estimated at approximately $1.32 million.","heading":"Overview and Scheme Mechanics","severity":"critical","sources":[{"credibility":2,"name":"MangoFarmSOL Exit Scam — CertiK Technical Analysis","type":"research","url":"https://www.certik.com/resources/blog/mangofarmsol-exit-scam"},{"credibility":2,"name":"Funds on MangoFarmSOL drained, community alleges rug pull — CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/funds-mangofarmsol-drained-community-rug-pull"},{"credibility":2,"name":"The Disappearing Mango: Understanding the Rise and Fall of the MangoFarmSOL Scam — ChainCatcher","type":"news_article","url":"https://www.chaincatcher.com/en/article/2115643"},{"credibility":2,"name":"Solana's MangoFarmSOL Loses $2M in Alleged Rug Pull — BanklessTimes","type":"news_article","url":"https://www.banklesstimes.com/news/2024/01/08/solanas-mangofarmsol-loses-dollar2m-in-alleged-rug-pull/"}]},{"content":"CertiK's post-incident analysis traced the stolen funds through a multi-step laundering chain. The primary theft involved 13,512 SOL being moved to scammer-controlled Solana wallet 8ggviFegLUzsddm9ShyMy42TiDYyH9yDDS3gSGdejND7, then redistributed and swapped for USDC before being bridged to the Ethereum network via Wormhole in four separate transactions, distributing funds across Ethereum addresses including 0x09e3, 0xc504, 0x6898, and 0x8816. On Ethereum, USDC was converted to ETH and routed through the Railgun privacy protocol (approximately 263 ETH), eXch instant exchange (approximately 292 ETH), and FixedFloat exchange. The secondary drainer proceeds of approximately $58,600 in USDC were bridged via Allbridge in two transactions (9,999 USDC and 48,942 USDC) and converted to approximately 26 ETH before being deposited into FixedFloat. The use of Railgun — a zero-knowledge proof-based privacy mixer — substantially obscures the final destination of the stolen funds.","heading":"On-Chain Fund Flow and Laundering","severity":"critical","sources":[{"credibility":2,"name":"MangoFarmSOL Exit Scam — CertiK Technical Analysis","type":"research","url":"https://www.certik.com/resources/blog/mangofarmsol-exit-scam"},{"credibility":2,"name":"Solana Users Hit With Rugpull by MangoFarmSOL Drainer — CoinMarketCap","type":"news_article","url":"https://coinmarketcap.com/academy/article/solana-users-hit-with-rugpull-by-mangofarmsol-drainer"}]},{"content":"MangoFarmSOL is reported to have engaged multiple social media influencers to promote the project prior to the exit scam. Former NFL wide receiver Antonio Brown is among the named promoters; he subsequently deleted his promotional post on X (formerly Twitter). Multiple additional unnamed KOLs also promoted the project beginning January 3, 2024, according to ChainCatcher's post-mortem. It is not publicly established whether these influencers were paid promoters knowingly participating in the scheme, or whether they were themselves misled. Antonio Brown has a documented history of promoting other disputed crypto projects.","heading":"Influencer Promotion","severity":"high","sources":[{"credibility":2,"name":"Solana Users Hit With Rugpull by MangoFarmSOL Drainer — Yahoo Finance / CoinDesk","type":"news_article","url":"https://finance.yahoo.com/news/solana-users-hit-rugpull-mangofarmsol-055244515.html"},{"credibility":3,"name":"Antonio Brown's Crypto Controversy: Unpacking the MangoFarmSOL Solana Scam of 2024 — YouTube","type":"other","url":"https://www.youtube.com/watch?v=5xknO30pm_c"},{"credibility":2,"name":"Double Blow to Solana: MangoFarmSOL Rug Pull and NFT Sales Decline — CoinPaper","type":"news_article","url":"https://coinpaper.com/2984/double-blow-to-solana-mango-farm-sol-rug-pull-and-nft-sales-decline"}]},{"content":"Pseudonymous developer and security researcher '0xfoobar', who had recently been appointed as MangoFarmSOL's security auditor, issued a public warning on X on January 6, 2024, stating that the project's frontend had been compromised and flagging the situation as a potential rug pull. This warning preceded or coincided with the project going dark. Shortly after, MangoFarmSOL deleted its Twitter account, deactivated its website, and closed its Telegram channel (which had accumulated over 1,000 subscribers) to new members.","heading":"Security Warning and Discovery","severity":"high","sources":[{"credibility":2,"name":"Solana Users Hit With Rugpull by MangoFarmSOL Drainer — CoinMarketCap","type":"news_article","url":"https://coinmarketcap.com/academy/article/solana-users-hit-with-rugpull-by-mangofarmsol-drainer"},{"credibility":2,"name":"Funds on MangoFarmSOL drained, community alleges rug pull — CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/funds-mangofarmsol-drained-community-rug-pull"}]},{"content":"The developer or developers behind MangoFarmSOL have not been publicly identified. Screenshots circulated on X allegedly showing messages from the operator in which they claimed to have been coerced into creating Ponzi schemes and referenced involvement with another Solana-based yield protocol called BananaMiner. Representatives from BananaMiner publicly denied any connection to MangoFarmSOL, stating they had been approached for collaboration but declined citing a conflict of interest. The authenticity of the alleged developer messages has not been independently verified. No arrests, legal proceedings, or regulatory filings related to MangoFarmSOL are known as of May 2026.","heading":"Developer Identity and BananaMiner Connection","severity":"high","sources":[{"credibility":2,"name":"Solana's MangoFarmSOL Loses $2M in Alleged Rug Pull — BanklessTimes","type":"news_article","url":"https://www.banklesstimes.com/news/2024/01/08/solanas-mangofarmsol-loses-dollar2m-in-alleged-rug-pull/"},{"credibility":2,"name":"Blockonomi — Rugpull Exit Scam: Investors Cry Foul as Solana Farming Pool Disappears with Millions","type":"news_article","url":"https://blockonomi.com/rugpull-exit-scam-investors-cry-foul-as-solana-farming-pool-disappears-with-millions/"}]},{"content":"MangoFarmSOL has been identified by ZachXBT, the pseudonymous blockchain investigator known for exposing crypto fraud, as a flagged scam entity. The incident has been widely cited in the crypto security community as an example of a Solana-ecosystem drainer that combined a smart contract theft with a secondary malicious-frontend attack. The event occurred during a period of heightened activity and user growth on the Solana network in early 2024, and was noted alongside a broader decline in Solana NFT sales as a dual setback to ecosystem confidence. The project's use of influencer marketing to attract retail deposits, followed by a coordinated exit, is consistent with patterns documented in other DeFi exit scams of the same period.","heading":"Ecosystem Context and ZachXBT Flag","severity":"high","sources":[{"credibility":2,"name":"Double Blow to Solana: MangoFarmSOL Rug Pull and NFT Sales Decline — CoinPaper","type":"news_article","url":"https://coinpaper.com/2984/double-blow-to-solana-mango-farm-sol-rug-pull-and-nft-sales-decline"},{"credibility":2,"name":"MangoFarmSOL Funds Vanish, Community Cries Foul Over Alleged Rug Pull — BitKan","type":"news_article","url":"https://bitkan.com/news/mangofarmsol-funds-vanish-community-cries-foul-over-alleged-rug-pull-23275"}]},{"content":"As of May 2026, no regulatory actions (SEC, CFTC, DOJ, or equivalent international bodies) have been publicly reported in connection with MangoFarmSOL. No law enforcement arrests or indictments are on record. The perpetrators remain unidentified. The stolen funds were routed through privacy tools that substantially complicate on-chain attribution and recovery. No victim restitution mechanism has been announced.","heading":"Regulatory and Legal Status","severity":"medium","sources":[{"credibility":2,"name":"MangoFarmSOL Exit Scam — CertiK Technical Analysis","type":"research","url":"https://www.certik.com/resources/blog/mangofarmsol-exit-scam"}]}],"sources_used":[{"credibility":2,"name":"MangoFarmSOL Exit Scam — CertiK","type":"research","url":"https://www.certik.com/resources/blog/mangofarmsol-exit-scam"},{"credibility":2,"name":"Funds on MangoFarmSOL drained, community alleges rug pull — CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/funds-mangofarmsol-drained-community-rug-pull"},{"credibility":2,"name":"Solana Users Hit With Rugpull by MangoFarmSOL Drainer — Yahoo Finance","type":"news_article","url":"https://finance.yahoo.com/news/solana-users-hit-rugpull-mangofarmsol-055244515.html"},{"credibility":2,"name":"Solana Users Hit With Rugpull by MangoFarmSOL Drainer — CoinMarketCap","type":"news_article","url":"https://coinmarketcap.com/academy/article/solana-users-hit-with-rugpull-by-mangofarmsol-drainer"},{"credibility":2,"name":"Solana's MangoFarmSOL Loses $2M in Alleged Rug Pull — BanklessTimes","type":"news_article","url":"https://www.banklesstimes.com/news/2024/01/08/solanas-mangofarmsol-loses-dollar2m-in-alleged-rug-pull/"},{"credibility":2,"name":"Double Blow to Solana: MangoFarmSOL Rug Pull and NFT Sales Decline — CoinPaper","type":"news_article","url":"https://coinpaper.com/2984/double-blow-to-solana-mango-farm-sol-rug-pull-and-nft-sales-decline"},{"credibility":2,"name":"The Disappearing Mango: Understanding the Rise and Fall of the MangoFarmSOL Scam — ChainCatcher","type":"news_article","url":"https://www.chaincatcher.com/en/article/2115643"},{"credibility":2,"name":"Rugpull Exit Scam: Investors Cry Foul as Solana Farming Pool Disappears with Millions — Blockonomi","type":"news_article","url":"https://blockonomi.com/rugpull-exit-scam-investors-cry-foul-as-solana-farming-pool-disappears-with-millions/"},{"credibility":2,"name":"MangoFarmSOL Funds Vanish, Community Cries Foul Over Alleged Rug Pull — BitKan","type":"news_article","url":"https://bitkan.com/news/mangofarmsol-funds-vanish-community-cries-foul-over-alleged-rug-pull-23275"}],"summary":"MangoFarmSOL was a purported yield-farming protocol on the Solana blockchain that executed an exit scam in January 2024, draining approximately $1.32 million from users who had deposited SOL tokens in anticipation of a promised MANGO token airdrop. The perpetrators deployed a malicious frontend under the guise of an 'emergency migration,' bridged stolen funds to Ethereum, and laundered proceeds through privacy tools including Railgun and instant exchanges before all social media accounts, the project website, and the Telegram channel were abandoned. No perpetrators have been publicly identified and no regulatory or law enforcement actions are known to have followed.","timeline":[{"date":"2024-01-03","event":"MangoFarmSOL launches influencer and KOL promotional campaign across social media; users begin depositing SOL tokens.","source":"ChainCatcher","source_url":"https://www.chaincatcher.com/en/article/2115643"},{"date":"2024-01-05","event":"MangoFarmSOL team publicly announces MANGO token airdrop scheduled for January 10, 2024.","source":"ChainCatcher","source_url":"https://www.chaincatcher.com/en/article/2115643"},{"date":"2024-01-06","event":"Operators drain 13,512 SOL (~$1.26M) from the protocol contract. A malicious frontend is deployed under the guise of an 'emergency migration,' draining an additional ~$60,000 from users who interact with it. Security auditor 0xfoobar publicly warns on X that the frontend is compromised and flags a potential rug pull.","source":"CertiK / CoinMarketCap","source_url":"https://www.certik.com/resources/blog/mangofarmsol-exit-scam"},{"date":"2024-01-06","event":"Stolen SOL converted to USDC and bridged to Ethereum via Wormhole across four transactions. Proceeds routed through Railgun (~263 ETH), eXch (~292 ETH), and FixedFloat. Frontend drainer proceeds bridged separately via Allbridge.","source":"CertiK Technical Analysis","source_url":"https://www.certik.com/resources/blog/mangofarmsol-exit-scam"},{"date":"2024-01-06","event":"MangoFarmSOL deletes its Twitter/X account, deactivates its website, and closes the Telegram channel (1,000+ subscribers) to new members.","source":"CoinTelegraph / Yahoo Finance","source_url":"https://cointelegraph.com/news/funds-mangofarmsol-drained-community-rug-pull"},{"date":"2024-01-07","event":"Screenshots allegedly showing messages from the MangoFarmSOL operator circulate on X; messages claim coercion into Ponzi scheme creation and reference BananaMiner. BananaMiner representatives deny any connection.","source":"BanklessTimes","source_url":"https://www.banklesstimes.com/news/2024/01/08/solanas-mangofarmsol-loses-dollar2m-in-alleged-rug-pull/"},{"date":"2024-01-08","event":"Multiple crypto news outlets including CoinTelegraph, BanklessTimes, and CoinMarketCap publish reports on the MangoFarmSOL exit scam. Antonio Brown's promotional post confirmed deleted.","source":"Multiple outlets","source_url":"https://coinmarketcap.com/academy/article/solana-users-hit-with-rugpull-by-mangofarmsol-drainer"},{"date":"2024-01-10","event":"Promised MANGO token airdrop date passes with no distribution. Project remains entirely inactive.","source":"CoinMarketCap / ChainCatcher","source_url":"https://coinmarketcap.com/academy/article/solana-users-hit-with-rugpull-by-mangofarmsol-drainer"}]},"v":1}