Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·2gGwd9…x8PmSummary
Badger DAO is a decentralized autonomous organization and DeFi protocol launched in December 2020 focused on generating yield on Bitcoin-backed assets via Ethereum-based vaults. In December 2021, a front-end attack exploiting a compromised Cloudflare API key resulted in approximately $120–130 million in user funds being drained across roughly 500 wallets. As of 2025, the protocol has seen significant decline: its flagship eBTC product was sunset, BADGER was delisted from Binance, and total value locked has fallen to low single-digit millions.
Connected Entities
1 entities- + 7 more
Timeline(17 events)
September 2020
Badger DAO founded by Chris Spadafora, Ameer Rosic, Albert Castellana, and Alberto Cevallos.
December 2020
Badger DAO publicly launches with BADGER token fair distribution and Sett Vaults product.
August 2021
Alleged: Three unauthorized accounts created and granted Cloudflare API keys without authorization, exploiting a flaw in Cloudflare's email verification process.
15 September 2021
Badger team unknowingly completes account creation for one of the pre-seeded compromised Cloudflare accounts.
10 November 2021
Attacker begins periodically injecting malicious JavaScript via Cloudflare Workers into BadgerDAO's web application routes.
20 November 2021
Attacker obtains the first successful unauthorized ERC-20 approval from a user wallet.
December 2021
Largest single victim — a wallet alleged to be associated with Celsius Network — approves attacker access to 896 Wrapped Bitcoin (~$50 million). Attacker begins mass withdrawal of funds across all accumulated approvals.
2 December 2021
BadgerDAO detects the exploit and freezes all smart contract transferFrom calls, halting further theft. PeckShield estimates losses of approximately 2,100 BTC and 151 ETH (~$120 million).
3 December 2021
Celsius Network publicly confirms it suffered losses in the BadgerDAO exploit.
10 December 2021
BadgerDAO publishes post-incident disclosure attributing the breach to a compromised Cloudflare API key and maliciously injected script.
16 December 2021
Governance proposals BIP-76, BIP-77, and BIP-78 introduced to authorize seizure of ~$9.2 million in recoverable attacker-held vault tokens and begin restitution.
2022
Protocol relaunches after third-party audits of web2 and web3 infrastructure are completed.
July 2022
Celsius Network files for bankruptcy. Subsequent reporting reveals Celsius forfeited ~$22 million in BadgerDAO restitution entitlements due to an administrative error in its claims process.
16 April 2025
Binance delists BADGER following a community vote-to-delist, citing low trading volume and development activity.
11 June 2025
BadgerDAO Treasury Council announces sunset of the eBTC protocol, citing failure to achieve product-market fit and insufficient TVL to sustain revenue.
17 June 2025
Crypto.com delists BADGER token.
25 July 2025
OKX announces delisting of BADGER/USDT perpetual contracts.
Decision Log
- hash: HDmkvyYASoNNsxJX9USHE4Fnnj4ZApRXUAqSKmp9Sar9
This investigation is cryptographically anchored to the Solana blockchain (1 event). 23 of 26 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-5
generated: 5/4/2026, 2:54:52 AM
last updated: 9/16/2026, 12:50:17 AM
4 viewsavoid.net — verified advice for a post-truth world