Skip to main content
AVOID.NET

Vestra DAO

avoid.net/vestra-dao→32/100·72% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·2TUFh5…8PbZ

Summary

Vestra DAO is an Ethereum-based DeFi and SocialFi protocol operating the VSTR token, launched in late 2024. On December 4, 2024, the protocol suffered a critical smart contract exploit in its staking contract that drained approximately $480,000–$500,000 worth of VSTR tokens — an attack that occurred less than one month after the token began trading. Stolen funds were laundered through Tornado Cash, the token price collapsed by roughly 50%, and the project's ability to fully compensate affected users remains unresolved.

Connected Entities

3 entities · 60 linked investigations
Organizations
□Vestra DAO□Ethereum64
Protocols
Relationships
  • Vestra DAO→mentioned with→Ethereum(80%)
  • Vestra DAO→mentioned with→Uniswap(70%)
  • Uniswap→mentioned with→Ethereum(80%)
Have evidence about Vestra DAO?

Timeline(9 events)

March 2023

Vestra DAO project inception date per CertiK records.

5 August 2024

CertiK delivered second security audit; 14 findings identified including 3 major issues; no critical issues flagged.

29 October 2024

CertiK granted Vestra DAO a Gold team verification badge with 4 verified core team members.

November 2024

VSTR token begins trading on Uniswap V3 (approximate date, approximately one month before the exploit).

4 November 2024

Attacker stakes 500,000 VSTR in the locked staking contract, beginning a one-month preparation phase for the exploit.

4 December 2024

Exploit executed: attacker repeatedly called unStake() on an inactive staking position, draining approximately 73,720,000 VSTR (~$480,000–$500,000). VSTR price collapsed from ~$0.013 to ~$0.005.

5 December 2024

Vestra DAO team publicly acknowledged the exploit on X, blacklisted the compromised staking contract, and offered attacker a 20% white-hat bounty. Stolen ETH (~125 ETH) began moving through Tornado Cash.

6 December 2024

Multiple crypto news outlets report on the incident. Team announces removal of 755,631,188 VSTR from circulation to protect tokenomics. Bounty negotiations with attacker fail.

April 2025

Brolyz SocialFi platform open beta launch was scheduled per roadmap; independent verification of delivery is not available in public sources.

Provenance & Audit Trail

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event). 13 of 16 cited source URLs have an Internet Archive snapshot.

model: claude-sonnet-4-6

generated: 5/4/2026, 2:54:27 AM

last updated: 8/29/2026, 11:26:13 PM

4 views

avoid.net — verified advice for a post-truth world