Avoid your next
big mistake

Lido Finance is the largest Ethereum liquid-staking protocol, launched in December 2020, enabling users to stake ETH and receive the liquid derivative token stETH without meeting the standard 32 ETH validator minimum. Governed by the Lido DAO via the LDO token, the protocol held approximately 24% of all staked ETH and roughly $19 billion in TVL as of early 2026. Lido carries no fraud or exit-scam history, but poses well-documented systemic centralization risk to Ethereum consensus, governance-concentration concerns among LDO token holders, and faces an active US federal securities lawsuit alleging that LDO is an unregistered security.

Marinade Finance is a non-custodial liquid staking protocol on Solana, launched on mainnet August 2, 2021. It operates two primary products — mSOL (liquid staking) and Marinade Native (non-liquid delegation) — and as of mid-2025 held approximately 10–11 million SOL in total staked value, making it one of Solana's largest staking providers. The protocol is governed by MNDE token holders via an on-chain DAO and has compiled a clean auditing track record with no confirmed exploits as of the investigation date.

Orca is a concentrated-liquidity automated market maker (AMM) and decentralized exchange built on the Solana blockchain, launched in February 2021 by co-founders Grace "Ori" Kwan and Yutaro Mori. Its core product, Whirlpools, is an open-source CLMM protocol with six independent security audits, a verifiable on-chain build, and no confirmed exploits since inception. The protocol operates via a DAO governed by the ORCA token and has expanded to Eclipse mainnet; the primary documented risk factors are residual upgrade-authority centralization, the legacy Three Arrows Capital investor relationship (now defunct), and a 2023 decision to geo-block U.S. users from the web interface without a public regulatory explanation.

Genesis Global Trading, Inc. and its affiliated lending entity Genesis Global Capital, LLC were major crypto OTC trading and institutional lending businesses operating as subsidiaries of Digital Currency Group (DCG), founded by Barry Silbert. Cascading losses from Three Arrows Capital's June 2022 default and further exposure to FTX's November 2022 collapse caused Genesis to suspend customer withdrawals on November 16, 2022, and to file for Chapter 11 bankruptcy on January 19, 2023. The bankruptcy involved over $3 billion in creditor claims, regulatory action by the SEC and New York Attorney General, and ongoing litigation alleging fraud by DCG and its executives.

Frosties was an 8,888-piece Ethereum-based NFT collection themed around animated ice cream characters that launched on January 9, 2022, raising approximately $1.1 million before its creators executed a premeditated rug pull within hours of mint sellout. Ethan Nguyen (pseudonym 'Frostie') and Andre Llacuna (pseudonym 'heyandre'), both then 20 years old, were arrested in Los Angeles in March 2022 and charged with conspiracy to commit wire fraud and conspiracy to commit money laundering in the Southern District of New York, marking the first U.S. federal criminal prosecution of an NFT rug pull. Llacuna subsequently pleaded guilty and testified as a government witness in the Roman Storm Tornado Cash trial, while the case established that existing federal wire fraud statutes apply to NFT fraud schemes.

Tinyman is an automated market maker (AMM) and decentralized exchange (DEX) built on the Algorand blockchain, launched on mainnet in October 2021. On January 1, 2022, attackers exploited a logic flaw in the protocol's pool-token burn function to drain approximately $3 million in wrapped Bitcoin and Ethereum assets across 43 pools. Tinyman subsequently patched the contracts, launched a compensation program covering all affected liquidity providers, and released a fully re-audited v2.0 protocol in early 2023.

Zipmex was a Southeast Asian cryptocurrency exchange founded in 2018 and licensed to operate in Thailand, Singapore, Indonesia, and Australia. In July 2022, the exchange suspended customer withdrawals after disclosing $53 million in losses stemming from exposure to collapsed crypto lenders Babel Finance and Celsius Network. Multiple rescue deals failed, the Singapore entity entered voluntary liquidation in May 2024, Thai regulators revoked its operating licenses, and the former CEO of Zipmex Thailand was charged with fraud and deception by the Thai Securities and Exchange Commission.

Liquid Global (operating under its parent entity Quoine Pte. Ltd.) was a Japanese-headquartered cryptocurrency exchange founded in 2014 and rebranded from QUOINE to Liquid in 2018. In August 2021, the exchange suffered one of the largest exchange hacks of that year — approximately $97 million in Bitcoin, Ethereum, XRP, TRON, and other tokens stolen — with the attack subsequently attributed by Chainalysis to actors working on behalf of the DPRK, consistent with Lazarus Group tradecraft. FTX provided a $120 million emergency loan days after the breach, then acquired Liquid outright in April 2022; when FTX itself filed for Chapter 11 bankruptcy in November 2022, Liquid halted all withdrawals and customer funds were caught in the subsequent restructuring proceedings.

Babel Finance was a Hong Kong-based crypto lending and asset management firm that raised $80 million at a $2 billion valuation in May 2022, only to suspend all withdrawals the following month citing 'unusual liquidity pressures.' Internal restructuring documents later revealed that co-founder Wang Li had directed the firm's proprietary trading desk using customer funds with no risk controls, resulting in losses ultimately totaling $766 million and triggering insolvency proceedings in Singapore.

GAW Miners and its CEO Homero Joshua Garza operated a large-scale cryptocurrency fraud between mid-2014 and early 2015, selling cloud-mining contracts (Hashlets) backed by computing power that did not exist and subsequently launching a cryptocurrency called Paycoin (XPY) with fabricated promises of a $20 price floor guaranteed by a nonexistent $100 million reserve fund. The scheme defrauded more than 10,000 investors of approximately $9.2 million in one of the earliest major crypto enforcement actions in the United States. Garza pleaded guilty to wire fraud in July 2017 and was sentenced to 21 months in federal prison in September 2018; the SEC obtained parallel civil judgments totaling over $22 million against Garza and the two corporate entities.

YAM Finance was an experimental DeFi rebase protocol launched on August 11, 2020 after only ten days of development and without a formal security audit. A single missing division operator in the rebase function caused the protocol to mint an astronomical surplus of YAM tokens to its treasury, rendering on-chain governance permanently inoperable within roughly 35 hours of launch; a community rescue attempt failed and approximately $750,000 in yCRV tokens were permanently locked. The protocol was subsequently relaunched as YAMv2 and YAMv3 following a PeckShield audit, but never recovered its initial market position or community trust.

Mirror Protocol was a decentralized synthetic-asset protocol built on the Terra blockchain, launched by Terraform Labs in December 2020, that allowed users worldwide to mint and trade mAssets tracking the prices of real-world equities and other assets. The protocol suffered two separate exploits totaling over $92 million — a $90 million lock-contract vulnerability in October 2021 that went undetected for seven months, and a $2 million oracle-pricing exploit in May 2022 coinciding with the catastrophic collapse of the Terra/Luna ecosystem. The U.S. Securities and Exchange Commission subsequently charged Terraform Labs and CEO Do Kwon with securities fraud in February 2023, with MIR governance tokens and other Terra assets named as unregistered securities; Terraform and Kwon agreed to pay $4.47 billion to settle those charges in June 2024. Mirror Protocol has been dormant since August 26, 2022.

Hodlnaut was a Singapore-based cryptocurrency lending platform founded in 2019 by Zhu Juntao and Simon Lee that suspended all withdrawals in August 2022 after suffering an estimated $189.7 million in losses tied to undisclosed exposure to the Terra/UST ecosystem. Company directors allegedly misled regulators and users about the extent of their Terra exposure in the weeks following the May 2022 collapse, and over 1,000 financial documents were deleted to obstruct judicial managers. The Singapore High Court ordered the platform wound up in November 2023, and former CEO Zhu Juntao was charged with six counts of fraud by false representation in May 2026.

OlympusDAO is a decentralized reserve currency protocol launched in March 2021 on Ethereum, issuing the OHM token backed by a treasury of on-chain assets. It attracted billions in TVL during 2021 through ultra-high staking APYs exceeding 7,000% and a viral '(3,3)' game-theory meme, before OHM collapsed more than 99% from its all-time high. The protocol remains operational but is a shadow of its peak, having transitioned toward sustainable lending products while continuing to face unresolved legal claims and a documented smart contract exploit.

Iron Finance was a multi-chain algorithmic stablecoin protocol deployed on Polygon and Binance Smart Chain in early 2021, best known for its IRON stablecoin partially collateralized by the protocol's native TITAN token. In June 2021, large token holders began liquidating their TITAN positions, triggering a negative feedback loop that drove TITAN from approximately $65 to near zero in a matter of hours and is widely cited as the first large-scale bank run in DeFi history. Estimated user losses reached approximately $2 billion, and the incident prompted prominent investor Mark Cuban — who publicly held positions in the protocol — to call for stablecoin regulation.

Cryptopia was a New Zealand-based cryptocurrency exchange founded in 2014 in Christchurch that grew to over 1.4 million users before suffering a critical security breach in January 2019 in which approximately NZ$24 million (roughly USD $16 million) in Ethereum and ERC-20 tokens was stolen. The hack rendered the company insolvent, leading to its placement into liquidation in May 2019 under Grant Thornton New Zealand as appointed liquidators. The resulting legal proceedings produced a landmark 2020 High Court ruling — Ruscoe v Cryptopia Limited (In Liquidation) [2020] NZHC 728 — establishing that cryptocurrencies are intangible property capable of being held on trust under common law.

CryptoZoo was a blockchain-based NFT game co-founded by YouTuber Logan Paul, launched in September 2021 with promises of a playable play-to-earn game involving exotic animal NFTs and a native ZOO token; the game never launched as described. A December 2022 three-part investigative series by YouTuber Coffeezilla alleged the project was a scam, exposing alleged mismanagement, insider token dumping, and a lead developer who allegedly fabricated his credentials and held the game code hostage. Logan Paul offered a partial refund program, was cleared of fraud charges when a class-action lawsuit was dismissed in October 2025 on 'puffery' grounds, but faces a separate ongoing defamation trial over his suit against Coffeezilla.

Spicenet is an early-stage DeFi interoperability protocol founded in 2023 and headquartered in Kingston, Canada, with a technical hub in Bengaluru, India. The project raised $3.4 million in a December 2024 seed round led by Hack VC and Magnus Capital, and is building a cross-chain brokerage network comprising two products — Spice Flow (multi-chain distribution) and Spice Edge (execution layer). As of May 2026, Spicenet remains pre-mainnet; no regulatory actions, fraud allegations, or security breaches have been publicly documented.

INK Finance is a multichain DeFi governance and treasury management protocol, native token QUILL, with deployments on Polygon, Ethereum, Avalanche, and BNB Chain. On May 11, 2026, an attacker drained approximately $140,180 USDT from its Workspace Treasury Proxy contract on Polygon by exploiting a whitelist authorization flaw amplified with a Balancer V2 flash loan. The exploit was confirmed on-chain via Polygonscan; as of the time of writing the INK Finance team had not released a formal post-mortem or recovery plan.

The OpenClaw GitHub Phishing Campaign is a series of coordinated social-engineering attacks, active since at least January 2026, that exploit the brand identity of OpenClaw — a legitimate open-source AI agent framework with over 300,000 GitHub stars — to lure crypto developers into connecting cryptocurrency wallets to a malicious cloned website. The March 2026 wave used fake GitHub accounts to mass-tag developers with promises of a $5,000 CLAW token airdrop, directing them to a wallet-draining site at token-claw[.]xyz backed by obfuscated JavaScript and a command-and-control server. An earlier January 2026 wave involved the hijacking of official OpenClaw social accounts and a fraudulent CLAWD token on Solana that briefly reached a $16 million market cap before collapsing more than 90%.

Swift Wave Capital (also branded Value Chain Exchange or VCEX) is an alleged cryptocurrency investment fraud operating a recruitment-driven 'click-a-button' Ponzi scheme. Documented from at least January 2026, the platform shares near-identical mechanics, infrastructure fingerprints, and promoter networks with the collapsed BG Wealth Sharing / DSJ Exchange operation, which is estimated to have defrauded investors of over $150 million. New Zealand's Financial Markets Authority added Swift Wave Capital to its fraudulent investment platform list in April 2026.

On May 6, 2026, the SEC and DOJ charged 30 individuals — with the SEC filing civil charges against 21 of them — in connection with an alleged decade-long insider trading scheme orchestrated by M&A attorney Nicolo Nourafchan and his partner Robert Yadgarov. Nourafchan allegedly misappropriated material nonpublic information from confidential client files at multiple elite BigLaw firms including Sidley Austin, Latham & Watkins, Cleary Gottlieb, and Goodwin Procter, then distributed tips through a tiered network of middlemen and traders in exchange for cash kickbacks. The alleged scheme spanned roughly 30 M&A transactions, generated tens of millions of dollars in illicit profits, and involved fugitives in Russia and Israel as well as international regulatory cooperation across five foreign jurisdictions.

Ko Thet Company, Sanduo Group, and Giant Company are three alleged criminal organizations that operated cryptocurrency investment fraud ('pig-butchering') scam centers, primarily in Southeast Asia and the UAE. A coordinated international law enforcement operation (Operation Tri-Force Sentinel) involving the FBI, Dubai Police, and Chinese Ministry of Public Security led to at least 276 arrests, the dismantlement of nine scam centers, the seizure of 503 fraudulent websites, and the restraint of approximately $701 million in cryptocurrency in April–May 2026. Five defendants—including one Burmese national and three Indonesian nationals—were charged with wire fraud and money laundering conspiracy in the Southern District of California.

Rapira Group LLC and Aifory LLC (operating as Aifory Pro) are Georgia-incorporated cryptocurrency exchanges that operated primarily as ruble-to-crypto fiat on-ramps targeting Russian and CIS retail users. On May 26, 2026, the UK Foreign, Commonwealth and Development Office designated both entities under the Russia (Sanctions) (EU Exit) Regulations 2019 as part of an 18-entity package targeting the A7 sanctions-evasion network. UK sanctions impose full asset freezes, Regulation 17A correspondent banking prohibitions, and internet access restrictions — representing the first application of banking-style sanctions to crypto exchanges under the UK Russia sanctions regime. Georgian courts separately convicted individuals connected to the fictitious registration scheme used to incorporate both entities, with the alleged organizer receiving a 9-year sentence in April 2026.

SKP (SKIPPY) is a BEP-20 token on BNB Smart Chain deployed in October 2021 and originally presented as a utility token for an Australian e-commerce and travel business. On May 27, 2026, blockchain security firm TenArmor detected an active exploit draining approximately $212,000 from SKP-linked liquidity pools across PancakeSwap, Venus, and Lista DAO on BNB Chain, with the attacker exiting with approximately 162,854 BSC-USD and 74.877 BNB. As of the date of this investigation, the root cause of the exploit is unconfirmed, no official post-mortem or team response has been issued, and the token exhibits extreme supply concentration and no active trading volume.

Bitpapa IC FZC LLC is a UAE-registered peer-to-peer cryptocurrency exchange primarily serving Russian and CIS markets that has been sanctioned by three separate national jurisdictions: OFAC (March 2024), Ukraine (July 2025), and the UK FCDO (May 2026). Authorities allege the platform facilitated millions of dollars in transactions with OFAC-designated entities including Garantex and Hydra Market, employed systematic wallet rotation to evade transaction monitoring, and provided financial services to the A7 LLC network accused of moving over $90 billion into Russia's war economy. The platform has continued operating through multiple sanctions designations, illustrating the limits of unilateral enforcement against P2P fiat-on-ramps.

Gotbit Consulting LLC was a Belize-registered cryptocurrency market-making firm that operated a multi-year wash trading enterprise from 2018 to 2024. Founder and CEO Aleksei Andriunin pleaded guilty in March 2025 and was sentenced to eight months in prison in June 2025, with Gotbit ordered to forfeit approximately $23 million in seized cryptocurrency and to cease operations permanently. The firm was part of a broader DOJ enforcement sweep — Operation Token Mirrors — charging ten foreign nationals from four firms in the Northern District of California.

Syndicate Labs was an a16z-backed Ethereum rollup infrastructure company founded in 2021 by Will Papper and Ian Lee, raising over $28 million to build programmable smart sequencers and the Commons Chain L3. On April 29, 2026, its Commons cross-chain bridge was exploited via a compromised private key stored without multisig or hardware-signing protection, draining approximately 18.5 million SYND tokens (~$330,000) plus ~$50,000 in user funds; all affected users were subsequently made whole from treasury reserves. On May 21, 2026, the company announced a full wind-down, citing irrecoverable consolidation of the rollup market around Base and Arbitrum, causing SYND to fall to an all-time low of $0.01061.

bandcampro is a Russian-speaking threat actor who operated an 8-month AI-assisted crypto theft and influence campaign (September 2025–May 2026) via the Telegram channel @americanpatriotus, which had accumulated roughly 17,000 subscribers over a five-year run beginning February 2021. The actor distributed a trojanized self-custody wallet called StellarMonster that deployed the GoToResolve remote access tool, enabling seed phrase harvesting and full wallet compromise. A jailbroken Google Gemini instance and 73 stolen API keys automated content generation, credential attacks, and infrastructure management. The campaign was publicly exposed by Trend Micro researchers on or around May 22, 2026.

Rublevka Team is a Russian-speaking, affiliate-driven drainer-as-a-service operation active since 2023 that has documented over $10.9 million in cryptocurrency theft across at least 240,000 wallet drain events. The group operates primarily on the Solana blockchain as of spring 2025 and markets its tooling to low-skill affiliates through Telegram bots and Russian-language cybercrime forums. No law enforcement actions or sanctions had been publicly reported as of the date of this investigation.

Riscoin is an alleged cryptocurrency copy-trading investment scheme operated under the corporate umbrella of League of Seagull Ltd. and its associated brand Seagull Alliance. On May 14, 2026, the Philippine Securities and Exchange Commission issued a cease-and-desist order against Riscoin, Riscoin Exchange, Riscoin Trading, League of Seagull Ltd., and Seagull Alliance for soliciting unregistered securities and operating a fraudulent, Ponzi-like scheme. Multiple regulators in New Zealand, Australia, and the Philippines have independently warned the public against the platform, and the scheme is alleged to have collapsed in May 2026 when withdrawal fees were raised to 99.8 percent, effectively blocking all investor redemptions.

Kelsier Ventures (also operated as Kelsier Labs LLC) is a Delaware-registered crypto venture capital and marketing firm controlled by the Davis family — Hayden Davis (CEO), Gideon Davis (COO), and Tom Davis (Chairman) — with Charles Thomas Davis also named in litigation. The firm is a co-defendant in two active federal class-action lawsuits in the U.S. District Court for the Southern District of New York alleging it served as the marketing and execution arm for a coordinated serial pump-and-dump scheme spanning at least 15 Solana-based memecoins, including MELANIA, LIBRA, M3M3, ENRON, and TRUST, resulting in alleged investor losses exceeding $69 million across the five focal tokens and an estimated $251–280 million in LIBRA alone. Hayden Davis publicly admitted to sniping both the MELANIA and LIBRA tokens, and blockchain analytics firm Bubblemaps documented on-chain evidence linking Davis-controlled wallets to more than $100 million in alleged liquidity extraction.

BONK.fun (also styled LetsBonk.fun) is a Solana-based meme coin launchpad that launched on April 25, 2025, as a joint initiative between the BONK community and the Raydium protocol, enabling no-code token creation with automatic BONK buyback-and-burn mechanics. On March 11–12, 2026, the platform suffered a domain hijack via social engineering against its domain registrar; attackers deployed a wallet drainer disguised as a fake terms-of-service modal, resulting in approximately $30,000 in confirmed losses before the site was taken offline. The platform relaunched on March 19–20, 2026, with a 110% refund commitment to affected users and enhanced security measures.

MAP Protocol is a cross-chain omnichain infrastructure project founded in 2019, issuing the MAPO token and operating the Butter Bridge for cross-chain asset transfers. On May 21, 2026, an attacker exploited an abi.encodePacked hash-collision vulnerability in Butter Bridge V3.1's retry-message path, minting approximately 1 quadrillion MAPO tokens — roughly 4.8 million times the legitimate circulating supply — causing a 96% token price collapse and extracting approximately $290,000 in combined ETH and liquidity. MAP Protocol subsequently paused all bridge operations and announced plans to patch, audit, and redeploy the bridge infrastructure.

DSJEX (DSJ Exchange PTY Ltd) and its sister recruitment platform BG Wealth Sharing LTD operated for approximately twelve months as a coordinated fake AI trading platform and multi-level marketing Ponzi scheme, collapsing in late April and early May 2026 with estimated investor losses exceeding $150 million. The scheme attracted victims through promises of 1.3%–2.6% daily returns, a fabricated CEO persona, and MLM referral commissions, while operators ran simulated trading on a fraudulent backend. Following a U.S. domain seizure and law enforcement action on April 23, 2026, operators laundered over $92 million across Ethereum and Tron before a coordinated effort by on-chain investigator ZachXBT, Tether, Binance, OKX, and U.S. law enforcement froze $41.5 million in stolen funds.

The Verus Ethereum Bridge is a cross-chain infrastructure component of the VerusCoin (VRSC) protocol, enabling value transfers between the Verus network and Ethereum. The bridge suffered two major exploits in 2026—on May 18 ($11.58M) and July 23 ($7.54M)—both caused by the same unpatched validation gap in its submitImports function, producing total confirmed losses of approximately $19.1M. The failure to patch a known critical flaw before reloading user funds into the bridge on July 8, 2026, and the absence of a public post-mortem following the second attack, represent severe governance failures that have driven TVL from roughly $100M (early 2025) to approximately $9M.

Echo Protocol is a Bitcoin liquidity aggregation and yield infrastructure protocol operating on the Monad and Aptos blockchains, offering liquid staking, restaking, and cross-chain DeFi services through its wrapped Bitcoin asset eBTC. On May 19, 2026, the protocol suffered a critical admin key compromise on its Monad deployment, enabling an attacker to mint approximately 1,000 unauthorized eBTC tokens worth $76.7 million and borrow $3.45 million in WBTC through the Curvance lending protocol, ultimately laundering roughly $822,000 through Tornado Cash. The incident exposed severe centralized access-control failures in a protocol marketed as trustless Bitcoin DeFi infrastructure.

Injective Protocol is a Layer 1 blockchain built on the Cosmos SDK, designed for decentralized finance applications including derivatives, perpetuals, and spot trading via a fully on-chain order book. Founded in 2018 by Eric Chen and Albert Chon and backed by Binance Labs, Pantera Capital, and Mark Cuban, it launched its canonical mainnet in November 2021 and has grown to a top-tier DeFi chain. No regulatory enforcement actions have been identified against Injective; however, concerns exist around a 2025-2026 bug bounty dispute involving an alleged $500 million critical vulnerability, validator stake concentration, and third-party scams impersonating the protocol.

Abracadabra Money is a DeFi lending protocol that issues Magic Internet Money (MIM), a USD-pegged stablecoin minted against interest-bearing collateral, governed by the SPELL token. The protocol has experienced three confirmed smart contract exploits between January 2024 and October 2025 totaling over $21 million in losses, multiple MIM depegging events triggered by collateral failures and hacks, and a severe governance credibility crisis in early 2022 after its affiliated Wonderland project's treasury manager was revealed to be a convicted felon and QuadrigaCX co-founder. SPELL has declined over 99.7% from its all-time high and the protocol's TVL has fallen from a 2021 peak in the billions to under $10 million as of mid-2026.

Pudgy Penguins (PENGU) is an NFT brand turned crypto token. Original founders (Cole Villemain et al.) were ousted in January 2022 after accusations of cash-grabbing and draining the treasury. Luca Netz purchased the project for 750 ETH in April 2022 and rebuilt it into a consumer brand. PENGU token launched December 2024 on Solana but dropped 86% from peak by April 2025. Abstract L2 network launch disappointed holders expecting airdrops. Canary Capital filed a PENGU ETF (SEC acknowledged July 2025). Partnerships with VanEck (NFC collectibles) and Visa (Pengu Card debit card) announced April 2026.

Aptos is a Layer-1 proof-of-stake blockchain founded in 2021 by Mo Shaikh and Avery Ching, former employees of Meta's Diem (Libra) project, using the Move programming language originally developed for Diem. The project raised $350 million across two rounds in 2022 from investors including a16z, FTX Ventures, Jump Crypto, and Three Arrows Capital, launching its mainnet in October 2022 amid significant criticism over opaque tokenomics, low initial throughput, and heavy insider allocations. While Aptos has since grown its DeFi TVL above $1 billion, attracted institutional partnerships with BlackRock, Microsoft, and Brevan Howard, and received digital commodity classification from the SEC and CFTC in 2026, early controversies around token distribution, FTX investor exposure, a 5-hour network outage in October 2023, and the departure of co-founder CEO Mo Shaikh in December 2024 remain part of the project's documented record.

BCAP is the world's first tokenized venture capital fund interest, issued in April 2017 as a Regulation D security token. It represents a non-voting economic interest in Blockchain Capital's Fund III. The firm manages $2B+ AUM with portfolio companies including Coinbase, Kraken, and Circle. Key risks include a $6.3M SIM-swap attack on co-founder Bart Stephens, Brock Pierce founding controversy, Epstein/Coinbase periphery connections, and effectively zero secondary market liquidity despite the token wrapper. No SEC enforcement actions exist.

Kaspa is a proof-of-work cryptocurrency launched in November 2021 that implements the GHOSTDAG blockDAG protocol, developed from academic research by Yonatan Sompolinsky at the Hebrew University of Jerusalem. The project claims a fair launch with no premine, no ICO, and no venture capital allocation to insiders, though pre-launch R&D was funded by Polychain Capital through the now-dissolved DAGLabs entity. Kaspa has a credible technical foundation and transparent governance, but faces centralization concerns from institutional ASIC miners and carries unresolved questions about the erasure of early transaction history following a genesis reset in November 2021.

Cosmos Hub (ATOM) is the flagship chain of the Cosmos ecosystem, built on Tendermint/CometBFT with IBC protocol. Founded by Jae Kwon and Ethan Buchman, the project has endured severe governance crises: ATOM 2.0 rejected (37.4% NoWithVeto), Jae Kwon's AtomOne fork, a no-confidence vote against ICF leadership, and North Korean-linked developers contributing to the Liquid Staking Module. ATOM was named a security in SEC lawsuits against Binance and Kraken (both dropped without adjudication). Three critical IBC vulnerabilities were disclosed but patched without exploitation. Ecosystem health is declining with key projects departing.

Pi Network is a mobile-first Layer 1 cryptocurrency project launched in March 2019 by Stanford-affiliated academics Dr. Nicolas Kokkalis and Dr. Chengdiao Fan. It attracted a reported 60–100 million users by enabling smartphone-based 'mining' through an app, but spent nearly six years in a restricted testnet before launching its Open Network on February 20, 2025. The project carries significant risk flags: a $10 million federal lawsuit filed in October 2025 alleging unauthorized token transfers and secret insider sales, a 2021 alleged KYC data breach affecting ~10,000 Vietnamese users, documented pyramid-scheme warnings from Chinese, Malaysian, and Vietnamese regulators, public labeling as a scam by the Bybit CEO, allegations of undisclosed insider token dumps, and structural centralization contradicting its decentralized blockchain claims.

Polkadot (DOT) is a multi-chain protocol founded by Gavin Wood, ranked #41 by market cap (~$2.3B). The project faces significant headwinds: a $133M treasury overspending crisis (projected 2-year depletion), the 2017 Parity wallet freeze that locked ~$98M of ICO proceeds, an April 2026 Hyperbridge exploit minting $1B in fake bridged DOT (losses ~$2.5M), and steep ecosystem decline with active parachains dropping from 200+ to ~30. No SEC enforcement actions exist, and ETF applications are under review.

Ondo Finance is a real-world asset (RWA) tokenization protocol founded in 2021 by former Goldman Sachs executives Nathan Allman and Justin Schmidt. The platform offers tokenized exposure to U.S. Treasury securities (OUSG, USDY) and, since September 2025, a broader set of tokenized equities via Ondo Global Markets. The protocol held over $1.8 billion in TVL as of late 2025 and received formal notice in November 2025 that a two-year SEC investigation had been closed without charges.

Shiba Inu (SHIB) is an Ethereum-based ERC-20 meme token launched in August 2020 by an anonymous founder operating under the pseudonym 'Ryoshi.' It has grown into a broader ecosystem encompassing ShibaSwap (a decentralized exchange), Shibarium (an Ethereum Layer 2 network), and a multi-token system (SHIB, LEASH, BONE, TREAT). The project is ranked approximately #31 by market cap (~$3.8B as of May 2026) but carries material risks including both founders' anonymity, a history of infrastructure failures and a confirmed bridge hack, significant whale concentration, internal community fraud allegations against its current lead developer, and its fundamentally speculative meme-driven value proposition.

MemeCore (M) is a self-described Layer 1 blockchain and meme-economy platform launched in 2024, with its native token listing on multiple major centralized exchanges in July 2025 at a market capitalization that reached approximately $4.2-6 billion by early 2026. On-chain investigator ZachXBT publicly challenged the project in April 2026, alleging that insiders hold over 90% of the token supply against a reported circulating float, and flagged $7.9 million in suspicious post-listing outflows from Kraken to 18 newly created wallet addresses. MemeCore has not provided a verifiable on-chain rebuttal to these allegations as of May 2026, and CertiK's audit data independently confirms that approximately 87.4% of the top two holders' combined ratio represents significant supply concentration.

Avalanche (AVAX) is a Layer-1 proof-of-stake blockchain launched in September 2020 by Ava Labs, a company co-founded by Cornell University computer scientist Emin Gün Sirer alongside Maofan 'Ted' Yin and Kevin Sekniqi. The network is distinguished by its tri-chain architecture (X-Chain, P-Chain, C-Chain) and the Avalanche Consensus Protocol, which targets sub-second transaction finality. While the project has accumulated significant institutional backing, ETF filings, and a March 2026 CFTC/SEC commodity classification, it has also faced a significant 2022 whistleblower scandal alleging weaponization of litigation against competitors, multiple DeFi exploits on its ecosystem, and two disclosed critical infrastructure vulnerabilities.

Bitcoin Cash (BCH) is a proof-of-work cryptocurrency that forked from Bitcoin on August 1, 2017, at block 478,559, increasing the block size limit from 1 MB to 8 MB to enable higher on-chain transaction throughput. It is classified as a commodity by U.S. regulators and ranked approximately #14 by market capitalization (~$8.8B as of May 2026). The project carries meaningful reputational risk tied to its primary promoter Roger Ver, who was indicted for $48 million in tax fraud in 2024 and reached a deferred prosecution settlement; additionally, the network experienced a contentious hash war in 2018 that split the chain, and Bitcoin.com operated a wallet app and website that allegedly misled users into purchasing BCH instead of Bitcoin.

TRON (TRX) is a blockchain platform founded by Justin Sun, ranked #8 by market cap (~$33B). The SEC filed securities fraud, market manipulation, and illegal celebrity promotion charges in March 2023, settled in March 2026 for $10 million. TRON hosted over $26 billion of $45 billion in global illicit crypto volumes in 2024 (58%). Sun's $75M investment in Trump's WLFI raised conflict-of-interest concerns, with the SEC case halted shortly after Trump's inauguration. Sun-affiliated exchanges Poloniex and HTX suffered $215M+ in combined hacks in November 2023.

Ethereum (ETH) is the second-largest cryptocurrency by market capitalization (~$278 billion as of May 2026) and the leading smart-contract platform, hosting the majority of decentralized finance (DeFi) and NFT activity. The protocol has a documented history of governance controversy stemming from the 2016 DAO hack hard fork, ongoing centralization concerns around liquid staking and MEV infrastructure, and persistent smart-contract and phishing-based fraud targeting end users, though Ethereum itself has not been the subject of any regulatory enforcement action and its spot ETFs have received SEC approval.

Zcash (ZEC) is a privacy-focused proof-of-work cryptocurrency launched on October 28, 2016, notable as one of the first large-scale deployments of zero-knowledge proofs (zk-SNARKs) outside academia. The project has a transparent organizational history, credentialed academic founders, and a resolved SEC investigation, but has faced significant controversies including a critical counterfeiting vulnerability disclosed in 2019, ongoing governance disputes that caused the entire Electric Coin Company development team to resign in January 2026, and regulatory pressure in multiple jurisdictions resulting in exchange delistings.

Wormhole is a cross-chain messaging and token bridge protocol enabling interoperability across more than 30 blockchain networks, originally developed by Certus One and later backed by Jump Crypto. On February 2, 2022, Wormhole suffered a $326 million exploit — the largest hack in Solana ecosystem history at the time — when an attacker exploited a deprecated Solana function to forge guardian signatures and mint 120,000 wETH without locking any collateral. Jump Crypto immediately replenished the stolen funds to keep users whole, and the project subsequently raised $225 million at a $2.5 billion valuation, separated from Jump Trading as an independent entity, and launched the W governance token in April 2024; as of 2026, the stolen funds remain substantially unrecovered despite a partial $140 million counter-exploit via English court order.

Wirecard AG was a German payment processor and financial services company headquartered in Munich that collapsed in June 2020 after revealing that approximately €1.9 billion in cash held in purported escrow accounts in the Philippines almost certainly did not exist. The scandal, described as the largest corporate fraud in postwar German history, implicated the company's senior leadership, exposed systemic failures by auditor Ernst & Young and German financial regulator BaFin, and revealed intelligence connections through fugitive COO Jan Marsalek, who is alleged to have been a Russian intelligence asset. Criminal proceedings against former CEO Markus Braun and co-defendants were ongoing in Munich as of early 2026, with no verdict yet reached.

Trinity Wallet was the official desktop and mobile software wallet for the IOTA cryptocurrency, developed and maintained by the IOTA Foundation. In February 2020, a supply chain attack exploiting a compromised MoonPay SDK delivered via CDN resulted in the theft of approximately 8.55 Ti (teraIOTA) worth roughly $2 million from 50 user seeds, forcing the IOTA Foundation to shut down the entire IOTA network for 27 days. Trinity was subsequently deprecated in April 2021 following the Chrysalis protocol upgrade, with the Firefly wallet introduced as its replacement.

Origin Protocol is a San Francisco-based DeFi and NFT platform founded in 2017 by Josh Fraser and Matthew Liu, best known for its yield-bearing stablecoin Origin Dollar (OUSD) and Origin Ether (OETH). In November 2020, before completing any security audit, OUSD was exploited via a reentrancy flash-loan attack resulting in approximately $7.7 million in losses including over $1 million from the team's own treasury. The protocol subsequently completed multiple audits, compensated affected users, and relaunched; it has continued operating with expanded DeFi yield products through 2025, though the OGN token trades at a fraction of its 2021 all-time high.

TurtleDex (TTDX) was a Binance Smart Chain decentralized file-storage protocol that conducted a confirmed exit scam on March 19, 2021, approximately 72 hours after its presale closed. The anonymous development team drained 9,000 BNB (approximately $2.5 million) from liquidity pools on PancakeSwap and ApeSwap, converted the proceeds to ETH split across nine wallets, and routed the funds to Binance exchange addresses before deleting all official channels. No funds are known to have been recovered and no perpetrators have been publicly identified.

Eleven Finance is a yield optimizer and leveraged yield farming protocol deployed on Binance Smart Chain (BSC) and Polygon. On June 22, 2021, attackers exploited a critical smart contract vulnerability in the protocol's Nerve-partnership vaults, draining approximately $4.5–4.8 million. The team published a recovery plan, repaid an initial 25% tranche from personal debt, and later announced full principal recovery; however, the ELE token has since lost over 99% of its value from its all-time high, and the protocol appears largely inactive.

JayPegs Automart (also styled Jay Pegs Auto Mart) is an Ethereum-based NFT and token project launched in September 2021 by the anonymous team behind NGMI.global, themed as a satirical used-car dealership selling 2007 Kia Sedona NFTs. On September 17, 2021, a contractor injected malicious code into the SushiSwap MISO auction front end during the project's DONA token sale, redirecting approximately $3.1 million (864.8 ETH) to the attacker's wallet. Funds were fully recovered within 24 hours following public identification of the alleged attacker and threat of FBI referral.

Nirvana V1 was a Solana-based algorithmic stablecoin and yield protocol that operated twin tokens: ANA (an algorithmic metastable wealth token) and NIRV (a decentralized stablecoin). On July 28, 2022, the protocol was catastrophically exploited via a flash loan attack that drained approximately $3.5 million — representing nearly all protocol reserves — causing both tokens to collapse and forcing a permanent shutdown. The attacker, Shakeeb Ahmed, was later identified, arrested, and convicted in the first-ever U.S. criminal prosecution for hacking a smart contract, and was sentenced to three years in prison in April 2024.

KyberSwap is a decentralized exchange (DEX) and liquidity protocol operated by Kyber Network. In November 2023, KyberSwap Elastic — the protocol's concentrated liquidity layer — suffered one of the largest DEX exploits of the year, with approximately $48.9 million drained across thirteen chains via a sophisticated tick-manipulation and rounding-error attack. The alleged attacker, Canadian national Andean Medjedovic, was subsequently indicted by U.S. federal prosecutors on five felony counts and remains a fugitive as of mid-2026.

Lodestar V0 is the original deployment of Lodestar Finance, an algorithmic money market lending protocol on Arbitrum. On December 10, 2022, the protocol suffered a critical flash loan exploit in which an attacker manipulated the plvGLP price oracle to drain approximately $6.9 million in user funds. The protocol was subsequently relaunched as Lodestar V1 in July 2023; V0 remains abandoned with negligible TVL (~$95K) and the attacker was never publicly identified.

LendHub was a decentralized cross-chain lending protocol operating primarily on the Huobi Eco Chain (HECO) and Binance Smart Chain (BSC). On January 12, 2023, the protocol suffered an approximately $6 million exploit caused by an operational failure to remove a deprecated IBSV cToken from its market, allowing an attacker to drain funds by arbitraging the two coexisting token versions. The protocol's TVL collapsed to near zero following the exploit, stolen funds were laundered through Tornado Cash, and the protocol is no longer considered operational.

DFX Finance is a decentralized foreign exchange protocol optimized for trading fiat-backed stablecoins such as CADC, EURS, and XSGD, backed by investors including Polychain Capital. On November 10, 2022, the V2 smart contracts were exploited via a reentrancy vulnerability in the flash loan function, resulting in approximately $7.5 million in total losses split between a primary attacker (~$4.3M) and an MEV front-running bot (~$3.2M). The stolen funds were funneled into Tornado Cash; the protocol subsequently paused all contracts, launched a DFX-token reimbursement plan, and later released V3, but TVL remains near zero as of 2024.

Platypus Finance is an Avalanche-based stablecoin automated market maker (AMM) and issuer of the USP stablecoin that suffered three separate exploits in 2023, losing a combined total of approximately $11.75 million. The first and most severe attack in February 2023 exploited a logic flaw in the protocol's emergency withdrawal function, draining roughly $8.5–9.1 million and causing the USP stablecoin to lose its dollar peg. Two French brothers identified by blockchain investigator ZachXBT were arrested and later acquitted on criminal charges after one argued he was an 'ethical hacker'; as of 2024 the protocol's total value locked had collapsed from over $200 million at peak to below $100,000.

Tender Finance (tender.fi) was an Arbitrum-based decentralized lending and borrowing protocol that suffered a $1.59 million oracle misconfiguration exploit on March 7, 2023. A white hat hacker exploited a decimal precision error in the GMX price oracle, depositing one GMX token worth approximately $71 to borrow nearly $1.6 million in assets. The hacker returned funds in exchange for a $97,000 bounty, and the project subsequently rebranded to GLend under the Gemach DAO umbrella, migrating its TND token to GLEND and later to GMAC.

Zircon Gamma was a Moonriver-deployed automated market maker (AMM) built by Zircon Labs that pioneered single-sided liquidity provision via its Pylon risk-tranching mechanism. On March 18, 2023, an attacker exploited a vulnerability in the protocol's modified Uniswap V2 core across both its Moonriver and BNB Chain deployments, draining approximately $350,000 in user funds. Following the exploit, the ZRG token lost essentially all market value, development activity ceased by mid-2023, and the promised relaunch and debt-repayment plan have not been publicly demonstrated as fulfilled.

Arcadia Finance v1 was a decentralized margin lending protocol deployed on Ethereum and Optimism that suffered a critical reentrancy exploit on July 10, 2023, resulting in the loss of approximately $459,030 across both chains. The attack exploited a missing reentrancy guard in the vault liquidation function combined with absent untrusted-input validation, allowing the attacker to bypass collateral health checks and drain darcWETH and darcUSDC vaults. The stolen funds on Optimism were largely laundered through Tornado Cash; the protocol subsequently paused all contracts and issued a bounty ultimatum to the attacker that went unanswered.

Conic Finance was a DeFi liquidity-diversification protocol built on Curve Finance that allowed users to deposit assets into Omnipools across multiple Curve pools. On July 21, 2023, the protocol suffered two separate exploits totaling approximately $4.2 million — a $3.26 million read-only reentrancy attack on its ETH Omnipool and a subsequent $300,000 sandwich attack on its crvUSD Omnipool — after which TVL never recovered. In March 2025, the team formally shut down the protocol, citing an inability to fix critical security issues in a planned v2 upgrade.

Levana Perps is a decentralized perpetual-swap protocol originally deployed on Osmosis (Cosmos ecosystem) and later expanded to Sei and Injective. In December 2023, the protocol suffered a confirmed oracle-manipulation exploit spanning 13 days that drained approximately $1.14 million (roughly 10% of liquidity provider funds). The protocol subsequently underwent a strategic rebrand and token migration into the Rujira (RUJI) ecosystem in 2025, effectively sunsetting the standalone LVN token.

Pike Finance is a natively cross-chain lending protocol built on Wormhole's messaging layer and Circle's Cross-Chain Transfer Protocol (CCTP), which launched its beta mainnet in early 2024. Within days of launch, the protocol suffered two separate exploits on April 26 and April 30, 2024, draining approximately $299K and $1.68M respectively for a combined loss of roughly $1.98M. The first exploit stemmed from an improperly validated CCTP integration; the second arose from a storage layout corruption introduced during the emergency patch, allowing attackers to reinitialize and take over spoke contracts.

Penpie is a yield optimizer and vote-escrowed liquidity layer built on top of Pendle Finance, developed by the Magpie XYZ team. On September 3, 2024, the protocol was exploited for approximately $27 million through a reentrancy vulnerability in its batch reward harvesting function, compounded by a permissionlessly registered fake Pendle market. The attacker laundered substantially all stolen funds through Tornado Cash within days, rejecting a negotiated bounty offer from the Penpie team.

Orion Protocol is a decentralized liquidity aggregator that connects centralized and decentralized exchanges into a single non-custodial trading interface, launched in 2020 with its native ORN token. On February 2, 2023, the protocol suffered a reentrancy exploit that drained approximately $3 million across its Ethereum and Binance Smart Chain deployments through a malicious fake-token attack against an unaudited exchange contract. The protocol subsequently rebranded to Lumia in late 2024, migrating all ORN tokens to LUMIA at a 1:1 ratio.

Odin.fun is a Bitcoin-native memecoin launchpad built on the Runes protocol, using the Internet Computer (ICP) blockchain as a settlement layer for fast, low-cost trading. The platform launched in early 2025 and attracted backing from the Taproot Wizards Ordinals project, but has suffered at least two confirmed security exploits — a $178,000 authentication vulnerability in April 2025 and a $7 million liquidity manipulation attack in August 2025 — with the latter draining user funds that the team has acknowledged it cannot fully repay from its own treasury.

Lodestar Finance is an Arbitrum-based decentralized money market protocol that enables lending, borrowing, and leveraged trading against crypto collateral. On December 10, 2022, the protocol suffered a flash loan exploit in which an attacker manipulated the price oracle for the plvGLP collateral token, draining approximately $6.9 million from depositors. The protocol subsequently relaunched in April 2023 with a V2 update, partially compensating victims with recovered GLP assets and esLODE tokens, though the attacker was never identified and no confirmed negotiated return of funds occurred.

LCX Exchange (Liechtenstein Cryptoassets Exchange) is a regulated crypto trading platform incorporated in Liechtenstein and registered with the country's Financial Market Authority (FMA). On January 8, 2022, the exchange suffered a hot wallet compromise resulting in the theft of approximately $6.8–7.94 million in various cryptocurrencies; LCX subsequently covered all user losses from company funds and cooperated with multi-jurisdictional law enforcement, ultimately freezing approximately 60% of stolen assets. As of 2024–2025, LCX remains operational, holds multiple licenses under the Liechtenstein Blockchain Act (TVTG), and has filed a pre-application for a pan-European MiCA license.

Kannagi Finance was a decentralized yield aggregator launched on zkSync Era in June 2023. On July 29, 2023, its anonymous team executed an exit scam, draining approximately $2.13 million in user deposits and deleting all online presence. The incident is considered the first major rug pull on the zkSync Era network, with at least $1.1 million subsequently routed through the Tornado Cash mixer.

Ionic Money is a decentralized money market protocol operating on Mode Network (an OP Superchain L2), rebranded from Midas Capital after two exploits on that predecessor protocol in 2023. In February 2025, Ionic Money suffered a social engineering attack in which attackers impersonating the Lombard Finance team convinced the protocol to list a counterfeit LBTC token as collateral, resulting in approximately $8.6–8.8 million in losses. The protocol and its affiliated ecosystem protocols on Mode Network absorbed significant bad debt, with no confirmed user compensation as of mid-2025.

On November 22, 2023, the HECO Chain cross-chain bridge and the HTX exchange (formerly Huobi), both linked to entrepreneur Justin Sun, were simultaneously exploited in what security researchers attributed to a private key compromise. The HECO bridge lost approximately $87 million in various tokens; additional HTX hot wallet losses brought confirmed totals to roughly $113 million. Blockchain analytics firm Elliptic subsequently attributed the attack to North Korea's Lazarus Group, which began laundering funds through Tornado Cash in March 2024.

Gamma Strategies is a non-custodial, automated concentrated liquidity management protocol operating across multiple EVM chains, allowing users to deposit assets into managed vaults (Hypervisors) that actively rebalance Uniswap V3 and similar DEX positions. On January 4, 2024, the protocol suffered a price manipulation exploit across four vaults resulting in approximately $3.4–6.2 million in losses, caused by misconfigured price change thresholds in deposit proxy settings. The protocol paused deposits, engaged OpenZeppelin for a remediation audit, and committed to a long-term user compensation plan funded by protocol revenue, though full recovery of lost funds was not guaranteed at launch of that plan.

Cryptsy was a Florida-based altcoin exchange that operated from May 2013 until its collapse in January 2016, at which time it was one of the largest altcoin trading platforms by volume. Founder Paul Vernon, known as 'Big Vern,' allegedly staged a hack narrative to conceal his personal theft of over $1 million in customer funds, then fled to China, remotely destroyed the customer database, and was later designated a federal fugitive. A U.S. federal court issued a $8.2 million default judgment against Vernon in 2017, and a 17-count criminal indictment was unsealed in January 2022; Vernon remains a fugitive believed to be residing in China.

Cork Protocol is an Ethereum-based DeFi protocol offering tokenized depeg protection instruments analogous to credit default swaps, founded in 2023 by Phil Fogel and Rob Schmitt and backed by a16z CSX. On May 28, 2025, the protocol suffered a critical smart contract exploit resulting in approximately $12 million in losses, attributed to missing access controls in its Uniswap V4 hook integration. Stolen funds were subsequently laundered through Tornado Cash; a rebuilt version dubbed Cork Phoenix launched on mainnet in January 2026.

Bunni Protocol is a Uniswap liquidity-incentive layer developed by Timeless Finance that evolved from a Uniswap v3 LP-token wrapper (v1) to a full DEX built on Uniswap v4 hooks (v2). On September 2, 2025, Bunni v2 suffered an $8.4 million flash-loan exploit caused by a rounding-direction vulnerability in its withdrawal mechanism — a class of issue that multiple auditors had flagged in advance. The team announced permanent shutdown in October 2025, citing the inability to fund the six-to-seven-figure re-audit required for a secure relaunch.

On August 2, 2016, Bitfinex — a Hong Kong-based cryptocurrency exchange — was breached by hacker Ilya Lichtenstein, who exploited security failures in the exchange's multi-signature wallet architecture to steal 119,756 BTC (approximately $72 million at the time). Bitfinex controversially socialized the losses across all user accounts with a 36.067% haircut and issued BFX debt tokens, which were fully redeemed at par by April 2017. In February 2022, the U.S. Department of Justice arrested Lichtenstein and his wife Heather Morgan after seizing approximately 94,000 BTC worth $3.6 billion — the largest financial seizure in DOJ history at the time — and both subsequently pleaded guilty; Lichtenstein was sentenced to 5 years (released early in January 2026) and Morgan to 18 months.

BigONE is a Seychelles-registered centralized cryptocurrency exchange that launched globally in November 2017, evolving from Yunbi.com, a China-based exchange backed by Li Xiaolai's INBlockchain fund. In July 2025 the exchange suffered a $27 million supply-chain hack; simultaneously, blockchain investigator ZachXBT alleged the platform had processed at least $60 million in pig-butchering and romance-scam proceeds through a single deposit address over the prior seven months. The exchange operates without a license from major financial regulators (FCA, ASIC, CySEC) and carries a documented history of alleged wash trading, user complaints about frozen withdrawals, and tournament prize disputes.

Bedrock Protocol is a multi-asset liquid restaking protocol developed by RockX, offering synthetic Bitcoin (uniBTC), liquid-staked ETH (uniETH), and IoTeX staking (uniIOTX). On September 27, 2024, the protocol suffered a critical smart contract exploit in which a flawed minting function allowed an attacker to mint uniBTC tokens at a 1:1 ETH-to-BTC ratio, draining approximately $2 million from DEX liquidity pools. Subsequent investigation by security firm Fuzzland, disclosed in June 2025, alleged that a former Fuzzland employee planted a supply-chain backdoor to execute the attack; Fuzzland stated it compensated Bedrock for losses and reported the matter to law enforcement.

Astroport is an automated market maker (AMM) DEX originally launched on the Terra blockchain in December 2021, developed by a joint venture of Delphi Labs, Terraform Labs, We3, and Attic Lab. The protocol suffered catastrophic TVL loss during the May 2022 Terra/Luna ecosystem collapse and was subsequently rebuilt as a multi-chain AMM spanning Neutron, Sei, Injective, and Terra 2.0. In July 2024, Astroport was directly exploited via a reentrancy vulnerability in IBC hooks on the Terra chain, resulting in approximately $6.4 million in losses.

ALEX Lab is a Bitcoin DeFi protocol built on the Stacks blockchain, offering a decentralized exchange, yield farming, cross-chain bridging via XLink, and a token launchpad. The protocol suffered two significant security incidents: a May 2024 exploit of its XLink bridge via a compromised private key (alleged to be linked to North Korea's Lazarus Group) that drained approximately $4.3 million, and a second smart contract vault exploit in June 2025 that resulted in roughly $8.3 million in losses. Despite user reimbursement pledges and post-exploit security upgrades, the repeated nature of major incidents materially reduces trust.

On March 15, 2022, Agave (an Aave fork on Gnosis Chain) and Hundred Finance (a Compound fork deployed on Gnosis Chain) were simultaneously exploited via a reentrancy attack that abused post-transfer callback hooks in Gnosis Chain's non-standard ERC-677 bridged tokens, resulting in combined losses of approximately $11.7 million. Hundred Finance suffered a second major exploit in April 2023 on Optimism ($7.4 million), after which the protocol voted to shut down permanently in August 2023. Agave continued operating in diminished capacity before its DAO formally wound down in early 2024.

Lulo (lulo.fi), formerly known as Flexlend, is a Solana-based DeFi lending aggregator that automatically routes stablecoin deposits to the highest-yielding protocols on the network, including Kamino, Drift, Marginfi, Morpho, Maple, and Pendle. Founded in 2022 and formally launched in early 2024, the protocol has grown to over $86 million in TVL and surpassed $100 million in cumulative deposits, supported by five independent security audits and backing from Circle Ventures and Solana Ventures. The platform's primary risk profile is composability-layer exposure: deposits are routed across multiple third-party protocols, meaning a failure at any underlying venue could affect user funds, although Lulo's 'Protected' tier includes automated on-chain coverage for such events.

Light Protocol is a Solana-native ZK compression infrastructure layer developed by Luminous Labs Lda, a Portugal-based company co-founded in 2021 by Swen Schäferjohann. The protocol reduces on-chain state storage costs by up to 99% using zero-knowledge proofs and has undergone multiple independent security audits including formal circuit verification. No fraud allegations, regulatory actions, or fund-loss incidents have been identified; primary risk signals are inherent ZK/smart-contract complexity, partially unaudited SDK tooling, and infrastructure scaling concerns raised by Solana node operators.

Lifinity was a proactive market maker and oracle-based decentralized exchange built on Solana, operating from February 2022 until it voluntarily shut down in December 2025 after processing approximately $150 billion in lifetime trading volume. The protocol was notable for its use of Pyth oracle pricing instead of traditional AMM mechanics, a no-VC community-funded launch via a veIDO, and a transparent wind-down that distributed roughly $43.4 million in treasury assets to LFNTY token holders. Risk factors include an anonymous pseudonymous founder operating as 'Durden' or 'durdenwannabe,' a $699,090 pool drainage incident in December 2023 caused by a protocol-level bug, and structural dependence on the Pyth oracle as a single external pricing dependency.

Jupiter Perps is a perpetual-futures decentralized exchange (DEX) built on Solana, operated by Jupiter Exchange, offering up to 250x leveraged trading on SOL, ETH, and wBTC against a shared liquidity pool called JLP (Jupiter Liquidity Pool). The protocol has grown to become the dominant perps venue on Solana with a JLP TVL that surpassed $2 billion in September 2025 and over $100 billion in cumulative trading volume as of 2024. The platform has undergone multiple independent smart contract audits with no critical exploits against its own contracts reported, though JLP token holdings in third-party vaults were implicated as stolen assets in the April 2026 Drift Protocol breach.

Hxro Network is a decentralized derivatives and liquidity primitive built on the Solana blockchain, providing shared exchange, risk management, and settlement infrastructure for on-chain futures, options, and parimutuel betting markets. The project raised $49 million across two token rounds in 2021 from well-regarded institutional investors including Jump Crypto, Blockchain Capital, Susquehanna International Group, and Alameda Research. While the team is publicly identified with traditional finance credentials and multiple third-party security audits have been completed, the HXRO token has experienced a severe decline from its all-time high, and the network has struggled to achieve meaningful adoption relative to competing Solana derivatives protocols.

Honeyland is a mobile-first, play-to-earn blockchain strategy game built on Solana by Hexagon Studios (Singapore), where players manage bee colonies to earn the native HXD token. The project raised $4 million prior to its public token launch in March 2023 and was acquired by Montreal-based Bravo Ready Studios in July 2025. No confirmed fraud, hack, or regulatory action has been identified; the primary risk factors are severe token price depreciation (approximately 99.9% from all-time high), low trading liquidity, and the structural sustainability challenges common to play-to-earn game economies.

Hivemapper is a decentralized physical infrastructure network (DePIN) built on Solana that incentivizes drivers to collect street-level imagery via dashcams and rewards them with the native HONEY token. The company, led by named founder Ariel Seidman, has raised over $50 million in total funding and counts Lyft, TomTom, and Volkswagen ADMT among its enterprise customers. While no fraud or regulatory action has been identified, the project carries moderate risks related to token price volatility, hardware shipping delays, a 2022 regulatory ambiguity around whether HONEY constitutes a security, and inherent privacy considerations from mass collection of street-level imagery.

Helius (helius.dev) is a Toronto-founded, Solana-focused developer infrastructure company offering RPC nodes, enhanced APIs, webhooks, data streaming, and validator services. Founded in June 2022 by former Coinbase and AWS engineers, the company has raised $34.85 million across three rounds led by Founders Fund, Haun Ventures, and Foundation Capital, and operates as a key infrastructure layer for the Solana ecosystem. No regulatory actions or security breaches have been identified against Helius; the main risk signals are minor service reliability incidents and unresolved workplace conduct allegations against its CEO.

Helium Mobile is a Mobile Virtual Network Operator (MVNO) launched by Nova Labs, Inc. in 2023, marketed as the world's first crypto-powered consumer cellular service. It provides coverage primarily via T-Mobile's wholesale 5G network, supplemented by a community-built Wi-Fi hotspot layer, and issues MOBILE token rewards to subscribers and hotspot operators. Parent company Nova Labs settled a $200,000 SEC fraud charge in April 2025 over misrepresentations made to investors about enterprise partnerships, while the MOBILE token has been deprecated in favor of HNT under community governance proposal HIP 138.

Helium is a decentralized physical infrastructure network (DePIN) founded in 2013 by Amir Haleem, Shawn Fanning, and Sean Carey, operated by Nova Labs, Inc. The network incentivizes individuals to deploy wireless hotspots for IoT (LoRaWAN) and mobile coverage using its HNT token, which migrated to the Solana blockchain in April 2023. The project has a documented history of misrepresenting partner relationships to investors, resulting in a $200,000 SEC civil settlement in April 2025, but has demonstrated meaningful real-world usage growth through verified carrier data-offload partnerships with AT&T, T-Mobile, and Telefonica.

Griffain is a Solana-based AI-agent coordination platform launched in November 2024 that enables users to deploy autonomous on-chain agents for trading, NFT minting, and wallet management via natural language commands. The platform's native GRIFFAIN token reached a peak market capitalization of approximately $634 million in January 2025 before declining roughly 98% to a market cap near $10 million by early 2026. No regulatory actions, hacks, or fraud allegations have been identified; primary risk factors include agent custody model ambiguity, autonomous trading feature exposure to highly speculative memecoin markets, opaque smart contract audit disclosures, and limited public information on full team composition beyond the named co-founder.

Grass is a Solana-based decentralized physical infrastructure network (DePIN) developed by Wynd Labs that pays users GRASS tokens in exchange for contributing unused internet bandwidth, which is then sold to AI companies and research institutions for large-scale public web scraping. The project launched in June 2023, completed a $3.5M seed round and a subsequent $10M bridge round backed by Polychain Capital and Tribe Capital, and executed its first major token airdrop in October 2024. While the project reports meaningful revenue growth and legitimate enterprise customers, it operates in a legally grey area involving residential proxy networks, carries unanswered questions about code transparency, and its token has declined approximately 94% from its all-time high amid sustained unlock pressure.

GooseFX was a Solana-based decentralized finance platform founded in 2021 that offered an AMM DEX (GAMMA), single-sided liquidity pools, perpetual futures trading, and an NFT aggregator under the GOFX utility token. The project raised $4.5 million in seed funding from reputable investors including Animoca Brands and CoinShares, received at least one published security audit from Halborn, and accumulated over $700 million in cumulative trading volume during 2024 before announcing a voluntary wind-down in August 2025. No regulatory actions, theft-related exploits, or rug-pull signals have been identified; the protocol sunsetting appears to reflect commercial failure rather than fraud.

Goatseus Maximus (GOAT) is a Solana-based memecoin launched on October 10, 2024, via Pump.fun by an anonymous deployer, whose rise was driven almost entirely by the AI agent Truth Terminal promoting the 'Goatse Gospel' internet-culture narrative on social media. The token reached a peak market capitalization above $1 billion in November 2024 — the first Pump.fun token to achieve that milestone — before declining more than 98% from its all-time high by mid-2026. It carries no formal whitepaper, no disclosed development roadmap, no utility, and its creator remains anonymous; its value is derived solely from speculative attention and an AI-generated cultural narrative.

Glow Wallet is a non-custodial Solana wallet developed by Luma Labs, Inc., a San Francisco-based company co-founded by Danqing (Dan) Liu and Victor Pontis. Available as a browser extension and mobile app since early 2022, it is marketed as a design-forward wallet with transaction simulation, in-app staking, zero-fee swaps, and a decentralized identity system called Glow ID. No major security breaches specific to Glow have been publicly reported, and no regulatory actions have been identified against the project or its developer.

Genopets is a Solana-based move-to-earn NFT game launched in 2021, self-described as the first free-to-play move-to-earn title in the space, operated by a named and publicly identifiable founding team. The project raised $8.3 million in seed funding from reputable investors including Pantera Capital and Samsung Next, but its dual-token economy (GENE and KI) has suffered severe inflation-driven value collapse characteristic of the broader move-to-earn category. As of mid-2026 the team remains active, having pivoted toward AI-agent infrastructure under the 'ELITE/WHITTAKR' umbrella, though both tokens trade near all-time lows with minimal liquidity.

Fuse Wallet is a Solana-based smart wallet developed by Squads Labs, the team behind Squads Protocol, Solana's leading multisig and smart account infrastructure. Launched in public TestFlight in June 2024 and on the Apple App Store in December 2025, Fuse replaces traditional seed phrases with a multi-factor authentication model built on Squads Protocol's audited smart account standard. Squads Labs has raised approximately $40.9 million across multiple funding rounds from institutional investors including Electric Capital, Coinbase Ventures, and Multicoin Capital, and no known regulatory actions, hacks, or fraud allegations have been identified against the product.

Fragmetric (fragmetric.xyz) is a Solana-native liquid restaking protocol that issues fragSOL, fragJTO, and fragBTC as Liquid Restaking Tokens (LRTs) built on Jito's restaking infrastructure. The protocol raised $12 million across seed and strategic rounds from recognized institutional backers including Hashed, Finality Capital, and RockawayX, and has undergone multiple independent security audits by Certora and Quantstamp. Material risks include smart-contract complexity inherent to restaking, slashing exposure through Node Consensus Networks (NCNs), partial team pseudonymity, and significant FRAG token price depreciation following the July 2025 listing.

Flash Trade (flash.trade) is a non-custodial, asset-backed perpetuals and spot exchange built on Solana, founded in early 2023 by Anas Khader and Zoheb Shahzan (previously of the Investin project). The protocol is bootstrapped, has undergone multiple third-party security audits, publishes an open-source reference implementation, and has processed over $20 billion in cumulative trading volume. No exploits, regulatory actions, or fraud allegations have been identified; primary risk factors are a modest TVL (~$10.7M), a low-cap governance token (FAF, ~$3.7M market cap), oracle dependency on Pyth Network, and limited public background on the founding team.

Firedancer is an independent, high-performance Solana validator client developed by Jump Crypto (Jump Trading Group), written from scratch in C primarily by a team led by Chief Science Officer Dr. Kevin Bowers and founding engineer Ritchie Patel. Released under the Apache 2.0 open-source license, it aims to increase Solana's throughput toward one million transactions per second while improving network resilience through client diversity. As of May 2026, the client is live on Solana mainnet with roughly 20% of validators running it, though full rollout remains cautious pending completion of comprehensive third-party security audits. The project carries a notable backer-risk signal: Jump Crypto's parent subsidiary Tai Mo Shan settled SEC charges for $123 million in December 2024 over TerraUSD manipulation, and a separate CFTC investigation was reported in 2024 with no publicly disclosed outcome as of this writing.

Fartcoin (FARTCOIN) is a Solana-based memecoin launched anonymously on October 18, 2024 via the Pump.fun launchpad, inspired by a suggestion from Truth Terminal, an autonomous AI chatbot developed by Andy Ayrey and funded with a $50,000 grant by Marc Andreessen of a16z. The token carries no stated utility and derives all value from speculation, community sentiment, and association with the AI-agent narrative; it reached an all-time high market capitalization of approximately $2.3 billion in January 2025 before declining more than 93% to approximately $160 million by May 2026. As a memecoin with an anonymous founding team, no intrinsic value, high whale concentration, and significant price volatility, it represents substantial speculative risk.

Famous Fox Federation (FFF) is a Solana-native NFT ecosystem founded in September 2021, comprising a genesis collection of 7,777 fox PFP NFTs and several sub-collections under the 'Foxosphere' umbrella. The team, operating under the pseudonyms 'DraxxTs' and 'FoxyDev', has built and shipped multiple on-chain utilities including the Rafffle raffle platform, the Citrus NFT lending protocol, a token marketplace, and gamified staking missions. No regulatory actions, exploits, or rug-pull incidents have been identified through public sources, though the founders remain pseudonymous and $FOXY token value has declined substantially from its all-time high.

Exponent Finance is a Solana-based yield tokenization protocol launched in late 2024 that enables users to separate yield-bearing assets into tradable Principal Tokens (PT) and Yield Tokens (YT), analogous to Pendle Finance on Ethereum. The protocol has attracted $7.1 million in venture funding from institutional backers including Multicoin Capital, Solana Ventures, and RockawayX, and processed over $2 billion in yield volume across 35,000+ users. Key risk considerations include a small but growing team, a SAFE-plus-token-warrant capital structure suggesting a future token launch, TVL that experienced a sharp 60%+ drawdown tied to incentive expiry, and an audit history that is active but still maturing.

Edgevana is a Las Vegas-based bare-metal infrastructure and node-deployment platform founded in 2019, specializing in Solana validator onboarding, RPC node provisioning, and decentralized edge compute. The company operates a liquid staking product (edgeSOL) with approximately 839,000 SOL under management and has secured notable partnerships with the Solana Foundation, Avalanche, and StackPath. No regulatory actions, fraud allegations, or significant security incidents have been identified.

Dual Finance is a Solana-based structured-products protocol offering Dual Investment Pools (DIPs) and Staking Options, products designed to provide yield to token holders and sustainable liquidity incentives to DAOs. Founded in 2022 by named individuals with verifiable TradFi and FAANG backgrounds, the protocol reached a peak TVL of approximately $35 million in 2023 but has since contracted sharply to under $500K as of mid-2025. No exploits, regulatory actions, or fraud allegations have been identified in public records; the primary concerns are low current TVL, limited publicly-verifiable audit documentation, and significant DUAL token price depreciation since its 2023 ATH.

DRiP Haus (drip.haus) is a Solana-based digital collectibles distribution platform that uses compressed NFT technology to enable creators to deliver free or low-cost weekly drops to subscribers. Founded in late 2022 by Vibhu Norby, a named serial entrepreneur with a verifiable track record, the company raised $11.5 million across two funding rounds before being acquired by Jupiter, Solana's leading DeFi aggregator, in an all-cash deal announced April 2, 2025. No regulatory actions, fraud allegations, or significant security incidents have been identified; the primary risk factors are platform-level policy changes that reduced accessibility for collectors and the uncertainties inherent in post-acquisition integration.

Dogwifhat (WIF) is a Solana-based memecoin launched anonymously in November 2023, featuring a Shiba Inu dog wearing a pink knitted hat. It reached a peak market capitalization of approximately $4.8 billion in March 2024 before declining more than 90% from its all-time high by mid-2026. The project carries inherent memecoin risks — no utility, anonymous creators, speculative-only value — alongside a notable failed community fundraiser for a Las Vegas Sphere advertisement that raised nearly $700,000 but never executed, ultimately refunding donors in 2025.

Dialect (dialect.to) is a Solana-focused smart messaging and infrastructure company best known for co-developing the Blinks (Blockchain Links) and Actions standard with the Solana Foundation, launched in June 2024. Founded in 2021 by Chris Osborn, a named founder with a verifiable academic and professional background, the company raised a $4.1M seed round in March 2022 led by Multicoin Capital and Jump Crypto. No regulatory actions, fraud allegations, or confirmed security incidents specific to Dialect have been documented; the principal risk surface is the Blinks protocol itself, which introduces phishing and malicious-endpoint attack vectors that Dialect attempts to mitigate through a public registry of verified actions.

Decaf (decaf.so) is a non-custodial stablecoin wallet and payments platform built on Solana and Stellar, founded in 2022 and headquartered in Miami, FL, targeting emerging-market users who need low-cost cross-border payments and fiat cash-out. The company has raised a seed round from recognizable crypto-native and fintech investors including Visa, and has established formal partnerships with Circle, MoneyGram, and the Stellar Development Foundation. No regulatory actions, hacks, or fraud allegations have been identified as of the investigation date.

Daos.fun is a Solana-based platform that allows vetted creators to launch on-chain investment DAOs (marketed as 'meme hedge funds'), raising SOL from the public and trading it across SPL tokens with full unilateral discretion. Launched in September 2024 by pseudonymous developer Baoskee (identified by Alliance DAO as Bao Mai), the platform gained rapid notoriety through the ai16z / ElizaOS DAO and attracted significant speculative capital. Structural risks include fund-manager custody with no investor veto, extreme market-cap-to-NAV premiums documented at 29x–58x, the absence of a public smart-contract audit, and unresolved securities-law exposure in multiple jurisdictions.

Crossmint is a New York-based web3 infrastructure company founded in 2022 by Alfonso Gómez-Jordana Mañas and Rodrigo Fernández Touza. It provides APIs and no-code tools for embedded wallets, NFT minting, stablecoin orchestration, and AI-agent payments, reporting over 40,000 enterprise and developer customers. The company raised $23.6 million in March 2025 led by Ribbit Capital, holds SOC 2 Type II certification, a VASP license, and received MiCA authorization in Spain in December 2025.

Cropper Finance is a permissionless automated market maker (AMM) and yield farming protocol built on the Solana blockchain, launched in mid-2021. The platform raised approximately $1.1–1.5 million across seed and public rounds and underwent security audits by Halborn Security, but operates with a pseudonymous-to-anonymous founding team and has experienced severe TVL and token value decline since its 2021 peak. As of 2025–2026 the protocol shows minimal trading activity, negligible TVL, and near-zero community engagement, raising questions about long-term viability.

Clockwork was a Solana-based smart-contract automation protocol that allowed developers to schedule transactions and build event-driven on-chain programs without relying on centralized cloud infrastructure. Founded in 2021 as Cronos and rebranded in 2022, the project raised $4 million in seed funding from Multicoin Capital, Asymmetric, and Solana Ventures before its founder announced an orderly shutdown effective October 31, 2023, citing limited commercial upside. No fraud, security exploits, or regulatory actions have been identified; the shutdown is assessed as a voluntary wind-down of a legitimate infrastructure project.

Claynosaurz is a Solana-native NFT collection and web3 animation studio launched in November 2022, comprising 10,222 animated 3D dinosaur characters. Founded by Montreal-based animation professionals with verifiable film industry credits, the project has delivered multiple product milestones including physical merchandise, a Solana Phone exclusive NFT drop, cross-chain expansion to Sui, and a forthcoming Gameloft mobile game. No fraud, rug pull, or regulatory actions have been identified; the primary risk factors relate to NFT market depreciation, complex multi-token ecosystem mechanics, and the inherent execution risk of an early-stage gaming and entertainment IP.

Cega (cega.fi) was a decentralized exotic options and structured products protocol that operated from June 2022 through late 2024 on Solana, Ethereum, and Arbitrum. Founded by Arisa Toyosaki, a named former derivatives trader, and backed by Dragonfly Capital, Pantera Capital, and Coinbase Ventures, the protocol processed over $500 million in cumulative transaction volume without a reported user fund loss. In November 2024 Cega was acquired by an undisclosed party and wound down its public-facing product suite, urging remaining depositors to withdraw.

BullX (neo.bullx.io) is a multi-chain DEX trading terminal and Telegram bot launched in mid-2024, primarily targeting Solana memecoin traders. The platform is operated by Future Bridge Inc., incorporated in Panama, with leadership known only by the pseudonym 'Blitz.' BullX accumulated over $12.4 billion in lifetime trading volume and $112 million in fees before suffering a sharp user decline in early 2025 amid allegations of referral commission withholding, CEO inaccessibility, and a two-month social media blackout — though the platform remains operational as of mid-2026.

Boop.fun is a Solana-based memecoin launchpad launched in May 2025 that allows users to create community-driven tokens called 'cults,' backed by a native $BOOP token with staking rewards and an influencer-driven airdrop mechanism. The platform reached a $500 million market cap within 90 minutes of launch but declined sharply amid founder credibility disputes — including allegations by former Binance CEO CZ of insider trading and false credential claims — an airdrop mechanism that was terminated early for being 'exploited and manipulated,' and a ~99% collapse in BOOP token price from its all-time high. Founder Dingaling (alleged real name: Dinghua Xiao) stepped down in November 2025, and the platform's ongoing leadership and development trajectory remain uncertain.

BonkBot is a Solana-focused Telegram trading bot launched in 2023, affiliated with the BONK memecoin community but operated as a legally separate entity. It has grown to become one of the largest Telegram-based trading bots by volume, reporting over $14 billion in lifetime trades and more than 500,000 total users, with all 1% trading fees directed toward purchasing and burning BONK tokens. The platform operated in a custodial manner for most of its history before announcing a non-custodial key management system upgrade in October 2024; a March 2024 incident in which 302 users lost approximately $523,000 in SOL highlighted custody risks common to this class of product, though BonkBot attributed the losses to a compromise at a rival bot (Solareum) rather than its own infrastructure.

BlazeStake is a non-custodial Solana liquid staking protocol operated by SolBlaze, launched in May 2022, that issues bSOL tokens to depositors in exchange for staked SOL distributed across 200+ validators. The protocol uses the official Solana Labs stake-pool smart contract, which has received seven external security audits from five firms; upgrade authority is controlled by an ecosystem multisig overseen by the Solana Foundation. The team operates pseudonymously and the protocol has no disclosed regulatory actions or hacks, though it was involved in a publicized partnership dispute with MarginFi in April 2024.

Believe (believe.app) is a Solana-based token launchpad founded by Australian entrepreneur Ben Pasternak, originally launched in January 2025 as 'Clout' before rebranding. The platform popularized a 'tweet-to-token' model under the 'Internet Capital Markets' narrative, enabling anyone to deploy a Solana token by replying to an X post. The platform and its founder face a federal class action lawsuit alleging coordinated investor fraud across three successive token schemes, Pasternak's arrest on criminal assault and strangulation charges, and widespread accusations of supply dilution, broken buyback promises, and fee extraction totaling an estimated $54 million on roughly $6 billion in trading volume.

Backpack is a Solana-ecosystem crypto wallet and centralized exchange (operating as Trek Labs Ltd FZE) founded in 2022 by Armani Ferrante and Tristan Yver, both veterans of the FTX and Alameda Research organizations prior to those firms' 2022 collapse. The exchange holds a VARA VASP license in Dubai and a MiFID II license (via acquisition of FTX EU from CySEC in January 2025), has published daily zero-knowledge proof-of-reserves since August 2025, and raised funding at a reported $1 billion valuation in early 2026. Key risk signals include the founders' FTX-era history, a contested FTX EU acquisition that drew a public rebuke from the FTX bankruptcy estate, a 60-plus percent post-TGE collapse of its native BP token, and ongoing US regulatory limitations.

Aurory is a Solana-based free-to-play, play-to-earn role-playing game featuring NFT creatures called Nefties, launched in 2021 by a team with backgrounds at major game studios. The project suffered a significant December 2023 exploit of its SyncSpace marketplace bridge, resulting in approximately $830,000 in stolen AURY tokens. As of mid-2026, the AURY token trades near all-time lows, down over 99% from its 2021 peak, reflecting sustained tokenomics pressure, limited adoption, and investor uncertainty following the security incident.

Anza (Anza Technology, Inc.) is a Delaware-incorporated software development firm founded in January 2024 by approximately 45 former Solana Labs engineers and executives, including Solana co-founder Stephen Akridge. The company serves as the primary maintainer of the Agave validator client — a fork of the original Solana Labs codebase and the majority client on the Solana network — and has proposed Alpenglow, a wholesale redesign of Solana's consensus mechanism approved by governance in September 2025. Anza has no token of its own; risk considerations center on its outsized influence over Solana's core protocol, the regulatory context of its formation, and a personal civil lawsuit involving co-founder Stephen Akridge.

Aldrin (formerly Cryptocurrencies.ai) is a Solana-based decentralized exchange and AMM protocol that launched its RIN utility token via IDO in mid-2021, backed by investors including Alameda Research. The project's original DEX product experienced severe activity decline following the FTX/Alameda collapse in November 2022 and the concurrent implosion of the Serum orderbook infrastructure it relied upon. As of 2025–2026, Aldrin Labs has pivoted to multi-chain Telegram trading bots (RINbot) on Sui and Aptos, while the original Solana DEX is effectively inactive with near-zero TVL and the RIN token has lost approximately 99.98% of its all-time-high value.

Adrena Protocol was a decentralized peer-to-pool perpetual futures exchange built on Solana, offering up to 100x leverage trading via a dual-token model (ADX governance token and ALP liquidity pool token). Founded circa 2023 by an anonymous team of self-described Solana-native builders, the protocol achieved approximately $8 billion in cumulative trading volume and $10 million in fee revenue before entering maintenance mode in November 2025 after failing to secure sufficient external funding and struggling with user retention. As of early 2026, the founding team has ceased active development, the protocol remains operational in a caretaker state, and a community relaunch targeting RWA (real-world asset) perpetuals has been announced in partnership with oracle provider Autonom.

Access Protocol is a Solana-based Web3 content monetization platform operated by Access Labs Inc., founded by Mika Honkasalo in 2022. The protocol enables users to stake its native ACS token into publisher stake pools in lieu of traditional subscriptions, with launch partners including CoinGecko and The Block. While the project raised modest seed funding, listed on Coinbase at launch, and has not been implicated in fraud or regulatory action, significant concerns exist around its highly inflationary tokenomics, sharp price decline of roughly 99% from its all-time high, a small and lightly-documented team, and the absence of publicly disclosed smart contract audit reports.

WoToken was a Chinese cryptocurrency multi-level marketing Ponzi scheme that operated from July 2018 to October 2019, defrauding approximately 715,249 investors of roughly 7.7 billion yuan (approximately $1.1–$1.15 billion USD) in cryptocurrency. Six defendants were tried in May 2020 and four primary operators received prison sentences of up to 8.5 years following a second-instance ruling by the Intermediate People's Court of Yancheng City, Jiangsu Province in October 2020. At least one operator was reported to have prior involvement in the PlusToken scheme, leading observers to describe WoToken as 'PlusToken 2.0.'

Vitae was a social-media rewards platform operated by Switzerland-registered Vitae AG, which issued the VITAE token and promised users income from content interactions through a multi-level affiliate structure. Belgian and Swiss authorities, coordinated by Europol, shut down the platform in June 2021, arresting five individuals and seizing over €2.6 million in cash and cryptocurrency across 17 raids, alleging the operation was a Ponzi and pyramid fraud that defrauded approximately 223,000 people in 177 countries. The platform's founder, Michael Weber, operated under the alias 'Michael Bradley' and had prior involvement in the BitConnect Ponzi scheme; he remained at large in the United States as of last known reporting.

USI-Tech (United Software Intelligence Technology) was a Dubai-registered cryptocurrency and forex multilevel-marketing scheme that operated from approximately 2016 through early 2018, selling so-called 'BTC Packages' and promising investors an average daily return of 1% over 140 days. Regulators across the United States, Canada, New Zealand, and Spain issued cease-and-desist or warning orders in 2017–2018; an estimated $150 million in investor funds — predominantly in Bitcoin and Ether — was allegedly misappropriated before the platform went offline overnight. Co-founder and CEO Horst Jicha was indicted in the U.S. Eastern District of New York in August 2023, arrested in December 2023, and became a fugitive in October 2024 after allegedly tampering with his ankle monitor and absconding in violation of pretrial-release conditions.

TurtleDex was a purported decentralized cloud storage protocol launched on Binance Smart Chain (BSC) in March 2021. The project raised approximately 9,000 BNB (roughly $2.5 million) in a presale on March 15, 2021, then executed an exit scam on or around March 19, 2021, draining liquidity pools on PancakeSwap and ApeSwap, converting the proceeds to ETH, and disappearing entirely. The team's identities were disclosed only under pseudonyms in a pre-launch AMA, and no funds were recovered.

Trade Coin Club (TCC) was a multi-level marketing cryptocurrency program that operated from late 2016 through mid-2018, allegedly collecting over 82,000 Bitcoin valued at approximately $295 million from more than 100,000 investors worldwide. The program falsely promised daily returns of at least 0.35% generated by an automated trading bot; the SEC and DOJ allege no such trading occurred and that investor withdrawals were funded entirely by new investor deposits, constituting a classic Ponzi scheme. In November 2022, the SEC charged four individuals including founder Douver Torres Braga; Braga was subsequently extradited from Switzerland in February 2025 to face a 13-count federal criminal indictment.

Pincoin and iFan were two cryptocurrency tokens promoted in Vietnam in 2017–2018 by Modern Tech Joint-Stock Company, a Ho Chi Minh City-based firm operated by eight Vietnamese nationals. The scheme promised monthly returns of up to 48 percent through a multi-level marketing structure and is alleged to have defrauded approximately 32,000 investors of roughly 15 trillion Vietnamese dong (approximately $660 million USD), making it one of the largest ICO exit scams on record. The eight operators vacated their offices and allegedly fled Vietnam around March 2018; as of publicly available reporting through 2021, no confirmed arrests or convictions of the principals had been reported in English-language sources.

PGI Global (Praetorian Group International) was a fraudulent cryptocurrency and foreign exchange investment platform operated by Ramil Ventura Palafox from December 2019 through October 2021. The scheme raised over $201 million from more than 90,000 investors worldwide by promising daily returns of 0.5% to 3% through purported Bitcoin and forex trading, while in reality operating as a Ponzi scheme. Palafox pleaded guilty in September 2025 to federal wire fraud and money laundering charges and was sentenced in February 2026 to 20 years in prison. He did not immediately begin serving the sentence: according to the FBI, on April 6, 2026 Palafox removed his court-ordered GPS monitor and fled rather than report to prison, but was recaptured in Los Angeles approximately nine days later, on or about April 15, 2026, and was ordered detained pending transfer to federal prison. The SEC filed parallel civil charges in April 2025 over an alleged $198 million fraud.

OneCoin was a global fraudulent cryptocurrency scheme founded in 2014 by Ruja Ignatova ("the Cryptoqueen") and Karl Sebastian Greenwood. Operating as both a Ponzi scheme and a multi-level-marketing pyramid, it defrauded an estimated 3.5 million victims across more than 175 countries of over $4 billion by marketing a cryptocurrency that had no real blockchain. Ignatova disappeared in October 2017, is an FBI Ten Most Wanted Fugitive with a $5 million reward, and multiple co-conspirators have been convicted and sentenced to federal prison.

MiningMax (also styled Mining Max LLC) was a US-registered cryptocurrency mining company that operated from approximately September 2016 through October 2017, allegedly defrauding approximately 18,000 investors across 54 countries out of roughly 270 billion Korean won (approximately $250 million USD). South Korean prosecutors indicted 21 individuals in December 2017 on charges of fraud and violations of Korea's door-to-door sales law; the company's chairman, Nam Ho Park (also known as Daniel Park), and vice chairman fled the country and were placed on Interpol's wanted list. The California Department of Financial Protection and Innovation (DFPI) issued a Desist and Refrain Order against Mining Max LLC and its founder Nam Ho Park in July 2020.

Luna Yield ($LUNY) was a purported cross-chain yield aggregator built on Solana that conducted an initial DEX offering (IDO) on the SolPad launchpad in August 2021. Approximately two days after its IDO, the anonymous development team removed all liquidity from protocol pools, deleted the project website and all social media accounts, and transferred an estimated $6.7 million in user funds across multiple cryptocurrencies to obfuscation services, in what multiple crypto news outlets characterized as a rug pull. The incident is widely cited as the first major rug pull on the Solana blockchain.

CryptoZoo was a blockchain-based NFT game co-founded by YouTuber Logan Paul that launched in September 2021 promising players would earn money by breeding virtual animals using the $ZOO token; the game's core gameplay mechanics were never delivered, leading to investor losses, a prominent investigative YouTube series by Coffeezilla, class-action litigation, and an eventual partial refund program. A class-action lawsuit was dismissed with prejudice in October 2025 on the grounds that Paul's promotional statements constituted non-actionable 'puffery', while Paul's own defamation lawsuit against Coffeezilla was proceeding toward a May 2026 jury trial as of the most recent available public records.

Karatbars International GmbH is a Stuttgart-based multi-level marketing company founded in 2011 by Harald Seiz that sold small gold bars through an affiliate network before launching the KaratGold Coin (KBC) in a 2018 ICO that allegedly raised $100 million. Regulatory authorities in Namibia, Germany (BaFin), South Africa, Canada, New Zealand, and the United States (Florida) issued warnings or enforcement actions against the company between 2014 and 2020, with Namibia's central bank formally declaring it a pyramid scheme in May 2019. By late 2020 the company had rebranded as Freebay after the KBC token collapsed; its founder Harald Seiz relocated to Thailand and a German court issued an arrest warrant against him in 2023.

HashOcean (hashocean.com) was a cloud-mining platform that operated from approximately 2014 to 2016, claiming to run data centers in San Francisco, New York, Nuremberg, and Singapore and offering free hashrate to new signups. The site disappeared on or after June 25, 2016, affecting an alleged 700,000 users worldwide. Independent analysis and community assessments characterized it as a Ponzi scheme; no verified law enforcement action or identified operators have been publicly confirmed.

HEX is an ERC-20 token launched in December 2019 by Richard Heart (legal name Richard Schueler), marketed as a blockchain-based certificate of deposit with high staking yields. The U.S. Securities and Exchange Commission filed suit in July 2023 alleging Heart raised over $1 billion through unregistered securities offerings across HEX, PulseChain, and PulseX, and misappropriated at least $12 million for personal luxury purchases; a federal judge dismissed the case in February 2025 on jurisdictional grounds, and the SEC declined to refile. Separate from the U.S. action, Finnish authorities are pursuing Heart on charges of aggravated tax fraud and assault, and Interpol issued a Red Notice for his arrest in December 2024.

GraceToken is an ambiguous name shared by at least two unrelated cryptocurrency projects. The first (ticker: GRCE, Ethereum) was a 2017 charity-fundraising ICO that officially announced its shutdown in January 2018, citing resource exhaustion and inability to gain traction; its team identities were never publicly disclosed. The second (ticker: GRC, BNB Smart Chain) is a separate 2022 community-oriented meme token that reached an all-time high of approximately $0.87 in April 2022 before collapsing to near-zero, with no remaining liquidity or active trading; no Tier 1 or Tier 2 source has confirmed a deliberate rug pull for either project.

Gemcoin was a fraudulent cryptocurrency launched in September 2014 by Steve Chen through his company US Fine Investment Arts (USFIA), operating out of Arcadia, California. The scheme falsely claimed that Gemcoin tokens were backed by billions of dollars in amber and gemstone mine holdings in the Dominican Republic, Argentina, Mexico, and the United States; those mines did not exist. The SEC filed fraud charges and obtained asset freezes in September 2015 when at least $32 million had been raised; a subsequent court-appointed receiver and DOJ criminal prosecution ultimately established total investor losses of approximately $147 million from around 70,000 victims, predominantly Chinese and Chinese-American investors. Steve Chen pleaded guilty in 2020 to conspiracy to commit wire fraud and tax evasion, was sentenced to ten years in federal prison in January 2021, and died in custody on November 19, 2022.

GainBitcoin was an alleged cryptocurrency Ponzi scheme launched in 2015 by Amit Bhardwaj and associates through Singapore-registered Variabletech Pte. Ltd., promising investors 10% monthly returns in Bitcoin over 18 months via purported cloud mining contracts. Indian authorities estimate the scheme defrauded tens of thousands of investors of approximately 80,000 bitcoins valued at roughly Rs 6,600 crore (approximately $790 million), with some estimates placing total losses significantly higher. Bhardwaj was arrested in 2018, died on bail in January 2022, and the Central Bureau of Investigation (CBI) continues to pursue co-accused, securing its first custodial arrest in March 2026.

Forsage (forsage.io) was a smart-contract-based MLM platform launched in January 2020 on Ethereum, Tron, and Binance Smart Chain that operated as a pyramid and Ponzi scheme, raising approximately $300–340 million from retail investors worldwide. The U.S. SEC filed civil charges against eleven individuals in August 2022, and a federal grand jury in Oregon indicted four founders in February 2023 on conspiracy to commit wire fraud; approximately 88% of participating addresses lost money. As of May 2026, one founder has been extradited and pleaded not guilty while three remain at large.

Finiko was a Russia-based cryptocurrency Ponzi scheme that operated from late 2019 until its collapse in July 2021. Founded by Kirill Doronin and several associates in Kazan, Russia, the scheme accepted Bitcoin and Tether from investors while promising monthly returns of up to 30 percent, and issued a proprietary FNK token. According to Chainalysis, Finiko received over $1.5 billion worth of Bitcoin across more than 800,000 deposits during its 19-month operation, netting an estimated $1.1 billion from victims; Russian authorities officially recorded over 7,700 victims and losses exceeding 5 billion rubles. Doronin was arrested in July 2021, several co-founders were subsequently apprehended through Interpol cooperation with the UAE, and the scheme was identified by U.S. Treasury's FinCEN as one of the top counterparties of sanctioned exchange Bitzlato.

Save the Kids ($KIDS) was a BEP-20 token launched on June 5, 2021, on Binance Smart Chain and traded on PancakeSwap, marketed as a charity token that would donate 1% of transaction fees to children's causes. The token collapsed approximately 70% within hours of launch following coordinated selling by pre-sale insiders, including FaZe Clan members who had promoted it to their predominantly teenage audiences. YouTuber-investigator Stephen 'Coffeezilla' Findeisen subsequently established through on-chain analysis and Discord evidence that the token's anti-whale protection had been secretly modified before launch to enable rapid insider dumps, and that FaZe Clan member Frazier 'Kay' Khattri and YouTube personality Sam Pepper were among the primary architects of the scheme.

FCoin was a cryptocurrency exchange launched in May 2018 by Zhang Jian, former CTO of Huobi, which pioneered the controversial 'trans-fee mining' model that briefly propelled it to claim the highest trading volume of any exchange globally. In February 2020, Zhang Jian publicly admitted the exchange was insolvent, citing an undetected system error that had over-issued mining rewards since mid-2018, leaving a shortfall estimated at 7,000–13,000 BTC (approximately $125–130 million). No credible compensation has materialized as of available records, and on-chain analysis firms raised allegations of a deliberate exit, though no definitive legal finding has been made.

DeFi100 (ticker: D100) was a synthetic index fund and elastic-supply rebase token launched on Binance Smart Chain in February 2021 by an anonymous developer group operating under the name Wrapp3d. On May 22, 2021, the project's website displayed a profane message claiming to have scammed investors, which the team attributed to a website hack rather than an intentional exit; the widely cited $32 million loss figure originated from an unverified Twitter claim and is contradicted by the project's own market-cap data, which placed its peak capitalization below $2 million. The project is effectively abandoned, and its token has lost more than 99% of its all-time-high value.

DavorCoin (DAV) was a cryptocurrency lending platform launched in late 2017 that operated a structure regulators characterized as a Ponzi scheme, promising investors returns of up to 48% per month through a lending program. On February 2, 2018, the Texas State Securities Board issued an Emergency Cease and Desist Order against DavorCoin for selling unregistered securities and making materially misleading statements. The platform shut down its lending program on approximately February 8, 2018, repaying investors in near-worthless DAV tokens rather than the Bitcoin they deposited.

Centra Tech was a Miami-based cryptocurrency startup that conducted a fraudulent initial coin offering (ICO) in mid-2017, raising over $32 million from thousands of investors through an extensive web of fabricated executives, fake partnerships with Visa and Mastercard, and undisclosed celebrity endorsements from Floyd Mayweather Jr. and DJ Khaled. All three co-founders — Sohrab Sharma, Robert Farkas, and Raymond Trapani — pleaded guilty to federal securities fraud, wire fraud, and mail fraud charges; Sharma was sentenced to eight years in federal prison. The case remains one of the most significant ICO enforcement actions in U.S. history.

Bitfinex is a cryptocurrency exchange and Tether (USDT) is the world's largest stablecoin by market capitalization, both operated under the parent company iFinex Inc., incorporated in the British Virgin Islands. The two entities have faced multiple significant regulatory actions, including an $18.5 million settlement with the New York Attorney General over alleged concealment of an $850 million loss, a $42.5 million CFTC fine for misrepresenting USDT reserve backing, and an ongoing DOJ bank-fraud investigation. Tether's USDT reached approximately $188 billion in circulation as of May 2026, and the company engaged KPMG for its first full reserve audit in March 2026.

BitClave PTE Ltd. was a Singapore-incorporated, San Jose-based blockchain startup that raised approximately $25.5 million in 32 seconds through the sale of Consumer Activity Tokens (CAT) during its November 2017 ICO. In May 2020, the U.S. Securities and Exchange Commission charged BitClave with conducting an unregistered securities offering, resulting in a settlement requiring disgorgement of $25.5 million, prejudgment interest of $3.44 million, and a $400,000 civil penalty. The promised BitClave Active Search Ecosystem platform was never delivered, the company ceased operations, and as of 2026 only a fraction of the settlement obligation had been distributed to investors through a SEC-administered Fair Fund.

BitClub Network was a fraudulent cryptocurrency mining investment scheme that operated from April 2014 through December 2019, raising at least $722 million from investors worldwide by falsely promising returns from shared bitcoin mining pools. Five individuals were indicted by a US federal grand jury in December 2019; multiple co-defendants have pleaded guilty while principal operator Matthew Brent Goettsche rejected a plea deal and awaits trial as of mid-2026.

Bidao (BID) is a DeFi project that conducted a year-long ICO from September 2019 to September 2020, raising an alleged ~$18 million to build a collateral-backed stablecoin (BAI) and governance token (BID) on Binance Chain. Despite a hard cap of approximately $19.5 million and the 2020 token listing, the promised stablecoin infrastructure was never delivered; the BID token subsequently lost over 99% of its all-time-high value. The project's operator, Bastian Aigner, later pivoted to launch a separate ERC-20 token called Bidao Smart Chain (BISC) in March 2023, while the original BID token and its obligations to investors remained unfulfilled, prompting multiple community petitions alleging fraud and misuse of ICO funds.

Bernard L. Madoff (1938–2021) was an American financier and former NASDAQ chairman who operated the largest Ponzi scheme in recorded history through his firm Bernard L. Madoff Investment Securities LLC (BLMIS), defrauding approximately 4,800 client accounts of an estimated $64.8 billion over several decades before his arrest in December 2008. Madoff pleaded guilty to 11 federal felonies in 2009 and died in federal prison in 2021 while serving a 150-year sentence. His name is widely invoked in the cryptocurrency industry as the archetypal benchmark for large-scale Ponzi fraud, with figures including Sam Bankman-Fried, Do Kwon, and Ruja Ignatova frequently compared to Madoff by regulators, prosecutors, and commentators.

Baller Ape Club was a Solana-based NFT project that launched on October 1, 2021, and immediately executed a rug pull, stealing approximately $2.6 million from investors. The project's operator, Le Anh Tuan, a 26-year-old Vietnamese national, was charged by the U.S. Department of Justice on June 30, 2022, with conspiracy to commit wire fraud and conspiracy to commit international money laundering — representing the largest NFT fraud case charged by federal prosecutors at the time.

In December 2021, BadgerDAO suffered one of the largest DeFi exploits of that year when an attacker used a compromised Cloudflare API key to inject malicious scripts into the protocol's front-end, tricking users into granting unlimited ERC-20 token approvals. Approximately $120–130 million in Bitcoin-pegged and other tokens were drained from roughly 500 user wallets, with Celsius Network reportedly the single largest victim at approximately $50–55 million. BadgerDAO subsequently engaged Mandiant and Chainalysis for forensic investigation, coordinated with U.S. and Canadian law enforcement, and initiated a multi-tranche governance-driven restitution plan that remained ongoing as of 2025.

Pond0x is a decentralized exchange and token ecosystem launched in July 2023 by Jeremy Cahen, known online as Pauly0x. The project's initial token launch (PNDX) resulted in more than $2.2 million in investor losses due to a smart contract vulnerability that allowed any user to transfer tokens from another wallet without authorization; critics alleged this was intentional. The founder has an extensive record of legal and regulatory entanglements including a $9 million trademark judgment from Yuga Labs (later vacated on appeal and settled), court-documented allegations of evading asset seizure, and a February 2025 listing on San Juan, Puerto Rico's Top 10 Most Wanted list for alleged aggravated assault.

The SpaceX brand has been systematically exploited by unaffiliated third-party scammers to promote fraudulent cryptocurrency schemes since at least 2020. SpaceX (the aerospace company founded by Elon Musk) has no official cryptocurrency, token, or digital asset. Documented fraud typologies include fake token presales with rug pulls on Uniswap, fake crypto giveaway and doubling scams, AI deepfake livestreams on YouTube and social media, and wallet-draining airdrop phishing sites — collectively responsible for tens of millions of dollars in documented victim losses.

The Solana address FQ1tyso61AH1tzodyJfSwmzsD3GToybbRNoZxUBz21p8 is the token mint for Dasha (ticker: VVAIFU), the native token of vvaifu.fun — a no-code AI agent launchpad on Solana launched via Pump.fun on October 19, 2024. The token reached an all-time high of approximately $0.21 in November 2024, driven by speculative hype around the AI agent narrative, but has since collapsed approximately 99.9% to under $0.0003 as of mid-2026. The team behind vvaifu.fun operates pseudonymously, no formal audits have been disclosed, and CoinMarketCap lists a CertiK security score of 3.5 out of 10.

In June 2023, Atomic Wallet — an Estonian non-custodial cryptocurrency wallet with approximately five million users — suffered a major security breach in which attackers drained funds from an estimated 5,500 user wallets. Blockchain analytics firms Elliptic and on-chain investigators attributed the attack to North Korea's Lazarus Group with high confidence, and the FBI later confirmed this attribution. The total loss figure is disputed, with Elliptic placing it above $100 million and independent researcher Taylor Monahan estimating a minimum of $115 million; the underlying attack vector was never publicly confirmed by Atomic Wallet.

"Africoin" is a name that has been used by at least five unrelated cryptocurrency projects and schemes operating across Africa since approximately 2013. The most widely documented uses involve a Nigeria/Ghana-based pseudo-cryptocurrency launched around 2016–2017, alleged to be a Ponzi scheme with anonymous or pseudonymous operators, and a separate South African entity sometimes confused with it called Africrypt (unrelated). A more recent entity also named Africoin — a Rwanda-headquartered real-world asset tokenization platform led by Vinod Khatumal — was admitted to Ghana's SEC regulatory sandbox in 2026 and represents a distinct, separately regulated operation. Because multiple operators have shared the same name, investigators must clearly disambiguate which entity is under review.

zkSync Era is an EVM-compatible ZK rollup Layer 2 network on Ethereum, developed by Matter Labs and governed through the ZK Nation framework. The network launched its ZK token in June 2024 to significant community controversy over airdrop eligibility and alleged Sybil-farming failures. In April 2025, an admin private-key compromise allowed an attacker to mint 111 million unclaimed ZK tokens worth approximately $5 million from airdrop contracts, though 90% of funds were later recovered via a bounty agreement.

XRP is a cryptocurrency native to the XRP Ledger (XRPL), a public blockchain co-designed in 2011–2012 by Jed McCaleb, David Schwartz, and Arthur Britto. Ripple Labs, Inc. is the San Francisco-based company that co-developed the ledger and has historically used XRP sales to finance operations, accumulating approximately 80 billion of the fixed 100 billion token supply at launch. A landmark U.S. Securities and Exchange Commission lawsuit filed in December 2020 — alleging over $1.3 billion in unregistered securities offerings — concluded in August 2025 when both parties dropped their appeals, cementing a $125 million civil penalty and a permanent injunction against further unregistered institutional XRP sales in the U.S.

USD Coin (USDC) is a fiat-backed stablecoin issued by Circle Internet Group, pegged 1:1 to the US dollar and backed by cash and short-dated US Treasury instruments held in a regulated money market fund. First launched in September 2018 via the Centre Consortium (a joint venture with Coinbase), USDC is among the largest and most regulated stablecoins globally, with approximately $75.8 billion in circulation as of May 2026. The stablecoin has maintained a generally stable peg but experienced a significant temporary depeg to $0.87 in March 2023 following Circle's disclosure of $3.3 billion in deposits held at the failed Silicon Valley Bank.

Synthetix is an Ethereum-based decentralized derivatives liquidity protocol originally launched in 2017 as Havven by Australian entrepreneur Kain Warwick, rebranding in 2018 to enable the creation of synthetic assets tracking real-world prices. The protocol reached a peak total value locked during the 2021 DeFi bull market and has been a pioneer in on-chain derivatives, but has faced recurring issues including a critical oracle exploit in 2019, persistent front-running vulnerabilities, a contentious DWF Labs market-maker arrangement, and a prolonged sUSD stablecoin depeg crisis beginning in 2025 triggered by the SIP-420 protocol overhaul.

Starknet is a permissionless ZK-rollup Layer 2 network on Ethereum, developed by Israeli cryptography firm StarkWare Industries. It uses STARK-based validity proofs and the Cairo programming language to scale Ethereum throughput. The project launched its STRK token in February 2024 and reached L2Beat Stage 1 decentralization in May 2025, but has faced significant community criticism over its airdrop eligibility criteria and an early, aggressive token unlock schedule for investors and early contributors.

Spark Protocol is a decentralized lending and capital allocation platform incubated within the MakerDAO (now Sky) ecosystem, built by the core contributor team Phoenix Labs. Launched on Ethereum in May 2023, it operates SparkLend (a money market), Spark Savings (sUSDS yield vault), and a cross-chain Spark Liquidity Layer, reaching over $8 billion in combined TVL by mid-2025. The protocol issued its SPK governance token via airdrop in June 2025 and has faced community criticism over geographic access restrictions, VPN blocking, centralization concerns inherited from Sky's governance structure, and post-airdrop token price volatility.

Scroll is an Ethereum Layer 2 ZK rollup that launched its mainnet in October 2023, offering bytecode-level EVM compatibility via zero-knowledge proofs. The project raised $83 million in venture funding and launched its SCR governance token in October 2024, but faced significant community backlash over airdrop distribution mechanics, concentrated whale allocations, and a 32% same-day price decline. By early 2026, Scroll's TVL had collapsed approximately 96% from its peak and the project triggered further controversy by proposing to dissolve its Security Council and reduce DAO contributor roles.

Rocket Pool is a decentralized, non-custodial Ethereum liquid staking protocol founded in 2016 by David Rugendyke and launched on mainnet in November 2021. It issues two tokens: rETH (a liquid staking derivative) and RPL (a governance and collateral token). As of mid-2026, the protocol holds approximately $924 million in total value locked, making it the second-largest decentralized Ethereum staking provider by TVL, behind Lido Finance.

Robinhood Crypto, LLC is the cryptocurrency trading subsidiary of publicly-traded Robinhood Markets, Inc. (NASDAQ: HOOD), offering retail crypto trading in the United States and Europe. The entity has accumulated over $170 million in regulatory fines and settlements across multiple U.S. jurisdictions since 2020 related to AML deficiencies, misleading disclosures, customer asset restrictions, and cybersecurity failures, though it remains a licensed and operational platform with growing global ambitions including the $200 million acquisition of Bitstamp completed in June 2025.

Optimism is an Ethereum Layer 2 optimistic rollup network operated by OP Labs PBC, with ecosystem governance stewarded by the Optimism Foundation. Launched on mainnet in January 2021, it issues the OP governance token and anchors the Superchain — a shared framework that powers Base, Zora, Mode, and more than two dozen other OP Stack-based chains. The network has a credible technical pedigree and documented decentralization progress, but retains meaningful centralization in its sequencer and upgrade-key infrastructure, and has experienced several notable security incidents.

Linea is a zkEVM Layer 2 rollup built by Consensys that launched on Ethereum mainnet in July–August 2023 and uses a proprietary zk-SNARK proving library called gnark. The network is classified as Stage 0 by L2BEAT, operates a single centralized sequencer with no permissionless fallback, and demonstrated this centralization risk in June 2024 when it unilaterally halted block production during the Velocore DEX hack. The LINEA token launched in September 2025 and suffered a 93% price collapse within hours amid a delayed community airdrop contract, sequencer outage, and allegations of treasury wallet selling pressure.

Gemini is a New York-based cryptocurrency exchange and custodian bank founded in 2015 by Cameron and Tyler Winklevoss, regulated under a NYDFS Limited Purpose Trust Charter. The exchange gained significant notoriety following the collapse of its Gemini Earn lending program in late 2022, which left approximately 340,000 users with roughly $900 million in frozen assets; subsequent SEC and NYDFS enforcement actions were resolved by early 2024 and 2026 respectively with full customer restitution. Gemini went public on the Nasdaq in September 2025 under the ticker GEMI, but its stock has since declined more than 80% amid deepening losses, executive departures, mass layoffs, and a contested post-IPO strategic pivot to prediction markets.

Gate.io (rebranded to Gate.com in May 2025) is a major global cryptocurrency exchange founded in 2013 as Bter.com by Lin Han, currently incorporated in the Cayman Islands and serving over 52 million users across more than 4,600 assets. The exchange has faced significant scrutiny including an alleged undisclosed $230 million hack in 2018 attributed to North Korean state actors, a 2025 public notice from the Cayman Islands Monetary Authority (CIMA) confirming it has never been licensed in its ostensible home jurisdiction, and a pattern of user complaints regarding account freezes, withdrawal blocks, and a disputed $LA futures incident in 2025. The exchange publishes monthly proof-of-reserves reports audited by Hacken and holds licenses in several jurisdictions including Malta (MiCA), Dubai (VARA), Cyprus (CySEC), and Australia (AUSTRAC).

Frax Finance is a decentralized stablecoin protocol launched in December 2020, originally pioneering a fractional-algorithmic design for its FRAX stablecoin. Following the collapse of algorithmic stablecoins in 2022, the protocol voted in 2023 to move to full collateralization, and has since expanded into a broader DeFi ecosystem including liquid staking (frxETH), a lending market (Fraxlend), a Layer 2 blockchain (Fraxtal), and a fully-backed institutional stablecoin (frxUSD) collateralized by BlackRock's BUIDL fund. The protocol faces documented concerns about historical centralization via a core-team-controlled multisig, an unresolved bug bounty attribution dispute, and prior security incidents including a DNS domain hijacking and an X account compromise.

Ethena is a synthetic-dollar protocol launched on Ethereum in 2023, issuing USDe — a delta-neutral synthetic dollar backed by crypto spot collateral and offsetting short perpetual futures positions rather than fiat bank deposits. The protocol also issues a governance token (ENA) and a yield-bearing staked variant (sUSDe) marketed as an 'Internet Bond.' While it achieved a peak supply exceeding $14 billion in 2025, it has faced regulatory enforcement in Germany under MiCAR, a localized depeg event on Binance in October 2025, ongoing counterparty and negative-funding-rate risk critiques, and comparisons — contested by the founding team — to the failed Terra/UST model.

MYX Finance is a Singapore-based decentralized perpetual futures exchange founded in 2023 by Mark Zhang (Yihao Zhang), a former Huobi futures executive. The protocol raised $10 million across two funding rounds and launched its MYX token via airdrop in May 2025. Following a 1,400% token price surge in September 2025, on-chain analytics firm Bubblemaps alleged the largest Sybil airdrop attack in crypto history — tracing approximately $170 million in token claims across ~100 coordinated wallets back to a wallet linked to the project's creator — and on-chain investigator ZachXBT subsequently identified MYX among a cluster of tokens exhibiting a common supply-control manipulation pattern attributed to an unknown market maker operating through Asian centralized exchanges.

SKYAI is a BNB Smart Chain BEP-20 token marketed as an AI data infrastructure protocol using the Model Context Protocol (MCP). The token experienced a roughly 4,100% price surge from late April through early May 2026, driven in part by a Bitget exchange listing, before collapsing approximately 79% from its all-time high of ~$0.85. On-chain investigators ZachXBT and SpecterAnalyst have alleged SKYAI belongs to a recurring supply-control manipulation playbook — attributed to an unknown market maker operating through Chinese exchanges — that has also been observed in RIVER, RAVE, SIREN, MYX, and LAB tokens, with HSBG (Heisenberg Guru) separately identified as a Hong Kong entity potentially connected to this broader network. The project team has not made its identity public.

Álvaro Romillo Castillo, a Spanish cryptocurrency influencer operating publicly as 'CryptoSpain,' was arrested on November 6, 2025, by Spain's Civil Guard under Operation PONEI on charges of large-scale fraud, money laundering, and criminal organization in connection with the Madeira Invest Club (MIC), an alleged Ponzi scheme that authorities say defrauded over 3,000 investors of approximately €260 million (roughly $300 million USD) between early 2023 and September 2024. A Spanish National Court judge ordered Romillo held without bail citing flight risk, and the case has acquired a political dimension following revelations of an alleged undisclosed €100,000 cash transfer from Romillo to far-right MEP Luis 'Alvise' Pérez Fernández days before the June 2024 European elections. Romillo faces up to 18 years in prison if charges are classified as mass offenses.

Convex Finance is a decentralized finance yield-optimization protocol launched in May 2021 on Ethereum, designed to boost rewards for Curve Finance liquidity providers and CRV stakers by aggregating veCRV voting power. The protocol rapidly became one of the largest DeFi platforms by total value locked, peaking near $21 billion in January 2022, and accumulated controlling influence over Curve governance by holding approximately 47–50% of all veCRV supply at peak. The team has remained anonymous since launch, and the protocol experienced a critical multi-signature vulnerability in December 2021 — discovered and disclosed by OpenZeppelin — which was patched without any loss of user funds.

Celestia is a modular blockchain network that provides a dedicated data availability (DA) and consensus layer for rollups and application-specific chains, using data availability sampling to allow light nodes to verify block data without downloading full blocks. Developed by Celestia Labs and launched on mainnet on October 31, 2023, the project raised $155 million from prominent venture capital firms including Bain Capital Crypto and Polychain Capital. The project has faced significant controversy over its tokenomics, alleged insider token selling, and a 95%+ decline in the TIA token from its June 2024 all-time high of approximately $20.91.

Blast is an Ethereum Layer 2 optimistic rollup that launched in November 2023, distinguished by its 'native yield' mechanism routing bridged ETH and stablecoins through Lido and MakerDAO respectively. Founded by Tieshun Roquerre ('Pacman'), the creator of the Blur NFT marketplace, Blast raised $20 million from Paradigm and others, attracted over $2 billion in TVL before its February 2024 mainnet launch, and airdropped the BLAST token in June 2024. The network has since experienced a dramatic decline, losing approximately 97% of its peak TVL and facing persistent criticism over centralization, lack of fraud proofs, a controversial airdrop distribution, and multiple high-profile exploits on ecosystem applications.

Bitstamp is a Luxembourg-headquartered cryptocurrency exchange founded in 2011 by Nejc Kodric and Damijan Merlak, widely regarded as the world's longest-running active crypto exchange. It was acquired by Robinhood Markets for approximately $200 million in June 2025 and holds over 50 active licenses and registrations globally, including an EU MiCA CASP license and a MiFID MTF license. The exchange has maintained a strong regulatory compliance posture for most of its history, though it suffered a significant $5.3 million hack in 2015 and a 2025 French court found it civilly liable for a period of unregistered operation in France.

Berachain is an EVM-identical Layer 1 blockchain launched on February 6, 2025, built around a novel 'Proof of Liquidity' (PoL) consensus mechanism designed to align validators, applications, and users around on-chain economic activity. The project raised $142 million across two funding rounds, achieved a peak TVL of over $3.3 billion at mainnet launch, and distributed approximately 79 million BERA tokens via airdrop. Since launch, the project has faced significant controversies including alleged insider token selling by a co-founder, a preferential refund arrangement for institutional investor Brevan Howard, a $12.8 million BEX exploit requiring an emergency hard fork in November 2025, and a prolonged token price decline of over 97% from its all-time high.

Aerodrome Finance is a decentralized exchange (DEX) and automated market maker (AMM) launched on August 28, 2023 on Coinbase's Base Layer-2 network. It operates a ve(3,3) tokenomics model inherited from Velodrome Finance and has grown to become the dominant DEX on Base by total value locked and trading volume. The protocol has no history of smart contract exploits but suffered a significant DNS hijacking attack in November 2025 that resulted in approximately $700,000 to $1 million in user losses.

Forsage was a smart-contract-based pyramid and Ponzi scheme launched in January 2020 that raised approximately $340 million from investors worldwide across the Ethereum, Tron, and Binance Smart Chain networks. Four founders — including Ukrainian national Olena Oblamska (known online as 'Lola Ferrari') and Russian national Vladimir Okhotnikov (known as 'Lado') — were indicted by the U.S. DOJ in February 2023 on conspiracy to commit wire fraud charges. As of May 2026, Oblamska has been extradited from Thailand and has pleaded not guilty, with a jury trial scheduled for July 14, 2026; the remaining three co-founders are believed to be at large.

SIGMA is a multi-chain Telegram trading bot operating at sigma.win that supports Ethereum, BSC, Base, Solana, Avalanche, and other networks. On May 11, 2026, a crypto trader known as Unihax0r suffered a private key compromise draining over $200,000 across Ethereum, Base, and BSC, with both affected wallets traceable exclusively to SIGMA's wallet generation infrastructure. SIGMA has published no post-mortem, security advisory, or public statement in response to the incident as of late May 2026.

Álvaro Romillo Castillo, a Spanish crypto influencer operating under the alias 'CryptoSpain,' was arrested on November 6, 2025, and detained without bail by Spain's National Court on charges of fraud, money laundering, and participation in a criminal organization. Romillo is alleged to have operated Madeira Invest Club (MIC), a Ponzi scheme that Spanish authorities say defrauded over 3,000 investors of approximately €260 million (roughly $300 million) between early 2023 and September 2024 by falsely promising annual returns of up to 53% through purported investments in luxury assets and cryptocurrencies. The case, conducted under Operation PONEI with support from Europol and law enforcement agencies in the US, Singapore, Malaysia, and Thailand, is considered Spain's largest crypto influencer fraud.