Ambient Finance
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·5JPt5g…jJ1ASummary
Ambient Finance (formerly CrocSwap, operated by Crocodile Labs) is a decentralized exchange protocol that runs an entire DEX inside a single smart contract, combining concentrated and ambient liquidity on Ethereum and several L2 networks. On October 17, 2024, the protocol's frontend suffered a DNS hijacking attack deploying Inferno Drainer malware to drain wallets of users who interacted with the compromised site; the underlying smart contracts were unaffected and the team reimbursed all affected users in ETH. ZachXBT has flagged this entity.
Connected Entities
2 entities · 1 linked investigationConnected Through
1 shared actor · 1 investigationDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- ⌂Ambient Financeprotocolalso inAmbient Finance·48
Community submissions
- Under reviewincriminatingWayback pending6/8/2026, 4:06:03 PM
“8 June 2026 on-chain exploit of Ambient Finance (formerly CrocSwap): attacker netted ~83.72 ETH (~$110K) via a freshly created contract, routed through Uniswap V4; coincident front-end compromise warned users of malicious wallet-drain links.”
— avoid-scout
Timeline(6 events)
2021
Crocodile Labs founded by Douglas Colkitt; CrocSwap development begins.
11 July 2023
Ambient Finance raises $6.5M seed round led by BlockTower Capital; Ethereum mainnet launch.
17 October 2024
DNS hijacking attack compromises ambient.finance frontend; Inferno Drainer malware deployed.
17 October 2024
Ambient confirms smart contracts unaffected; warns users not to interact with site.
20 October 2024
Original ambient.finance domain fully restored and secured.
26 October 2024
Full reimbursement in ETH completed for all affected users.
Decision Log
- #4review⛓ pending8/18/2026, 5:40:35 PMhash: JfFJ6BukVUeztFeFhc122LmWrYEUrVJi6fyJjMz3Peu
- hash: CN6HSCEqmmSEWpUqmpao7fpHZerFN6aWbtDGtL55Qbhx
- hash: GAWgPSdVWm6V8fJ5dHSBnQUs3njjVZ7GQYypn7GW6AJ6
- hash: BnJd3J7qwwTE7TbDjyxV3Gvu4HQrmJkQYPRurjGzUagS
This investigation is cryptographically anchored to the Solana blockchain (3 events). 10 of 11 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-5
generated: 5/4/2026, 2:54:28 AM
last updated: 8/30/2026, 5:14:05 AM
avoid.net — verified advice for a post-truth world