Fact-check findings
What an automated fact-checker found when it re-read Wintermute against the sources the page cites. Only the most recent review is shown.
These findings are produced by an automated reviewer, and its results vary between runs: the same page, checked three times on the same day, came back with 15%, 20% and 34% of its claims disputed, mostly because each run extracted a different number of claims. Treat what follows as leads, not rulings.
“Disputed” means the reviewer could not reconcile the claim with the evidence it cited. It does not mean the claim is false. “Unverifiable” means no reachable source settled it either way.
Nothing here changes the page on its own. A proposed correction is applied only after a human moderator approves it; until then the page reads as it did when reviewed.
unverifiable
1 claimNo source the reviewer could reach confirms or contradicts the claim.
- #4[unverifiable][awaiting moderator]in section: Background
“In 2024, Wintermute's OTC volumes grew 313%, and in 2025 the firm expanded into the United States with a New York office.”
reviewerIn 2024 Wintermute OTC volumes grew 313%, and in 2025 the firm expanded into the US with a New York office.Not independently checked within this review's budget. Search results confirm US expansion activity (Wintermute USA broker-dealer registration) but not the 313% figure.
partially supported
2 claimsThe cited evidence supports part of the claim but not all of it.
- #2[partially supported][awaiting moderator]in section: Recovery
“On October 14, 2022 — one day before its deadline — Wintermute repaid its $96 million TrueFi loan in full, with interest, demonstrating continued liquidity despite the hack.”
reviewerWintermute repaid its $96 million TrueFi loan in full on October 14, 2022, one day before the deadline.Date and timing are correct. Sources disagree on the principal: CoinDesk headline $96M, CoinDesk body and the cited Cointelegraph URL say $92M. The $96M figure is likely principal plus interest or a headline figure, so the page should note the discrepancy. - #3[partially supported][awaiting moderator]in the timeline
“Wintermute submits formal feedback to the SEC Crypto Task Force, arguing network tokens should not be classified as securities.”
reviewerWintermute submitted feedback to the SEC Crypto Task Force on 2025-09-03.The date is correct for the original submission, but the cited PDF is the Oct 27 follow-up, not the Sept 3 filing. The citation should point to the SEC page for the Sept 3 submission.
confirmed
1 claimThe cited evidence supports the claim as written.
- #1[confirmed][no action needed]in section: The Profanity Vanity Address Exploit
“Following the 1inch disclosure, Wintermute transferred all ETH out of the compromised hot wallet. However, the firm critically failed to revoke the hot wallet's administrative permissions over its DeFi vault smart contract.”
reviewerWintermute's DeFi vault was drained on Sept 20, 2022 via a compromised Profanity-generated admin hot wallet that retained admin permissions after ETH was moved out.Halborn confirms the mechanism and the asset breakdown. Halborn itself does not reconcile the $118.4M vault figure with the ~$160M headline.