Skip to main content
Sign in

Vestra DAO

avoid.net/vestra-dao→32/100·72% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]
anchored·2TUFh5…8PbZ

Summary

Vestra DAO is an Ethereum-based DeFi and SocialFi protocol operating the VSTR token, launched in late 2024. On December 4, 2024, the protocol suffered a critical smart contract exploit in its staking contract that drained approximately $480,000–$500,000 worth of VSTR tokens — an attack that occurred less than one month after the token began trading. Stolen funds were laundered through Tornado Cash, the token price collapsed by roughly 50%, and the project's ability to fully compensate affected users remains unresolved.

Connected Entities

1 entities
Organizations
□Vestra DAO
Relationships
    Have evidence about Vestra DAO?

    Timeline(9 events)

    2023-03-01

    Vestra DAO project inception date per CertiK records.

    2024-08-05

    CertiK delivered second security audit; 14 findings identified including 3 major issues; no critical issues flagged.

    2024-10-29

    CertiK granted Vestra DAO a Gold team verification badge with 4 verified core team members.

    2024-11-01

    VSTR token begins trading on Uniswap V3 (approximate date, approximately one month before the exploit).

    2024-11-04

    Attacker stakes 500,000 VSTR in the locked staking contract, beginning a one-month preparation phase for the exploit.

    2024-12-04

    Exploit executed: attacker repeatedly called unStake() on an inactive staking position, draining approximately 73,720,000 VSTR (~$480,000–$500,000). VSTR price collapsed from ~$0.013 to ~$0.005.

    2024-12-05

    Vestra DAO team publicly acknowledged the exploit on X, blacklisted the compromised staking contract, and offered attacker a 20% white-hat bounty. Stolen ETH (~125 ETH) began moving through Tornado Cash.

    2024-12-06

    Multiple crypto news outlets report on the incident. Team announces removal of 755,631,188 VSTR from circulation to protect tokenomics. Bounty negotiations with attacker fail.

    2025-04-01

    Brolyz SocialFi platform open beta launch was scheduled per roadmap; independent verification of delivery is not available in public sources.

    Provenance & Audit Trail
    Anchored on SolanaVerify on-chainsrc:defillama

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.

    full audit log →version history →

    model: claude-sonnet-4-6

    generated: 5/4/2026, 2:54:27 AM

    last updated: 5/30/2026, 4:56:38 AM

    avoid.net — verified advice for a post-truth world