Skip to main content
Sign in

Bungee

avoid.net/bungee→42/100·72% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·5x1gia…D2Er

Summary

Bungee Exchange is a cross-chain bridge aggregator and liquidity routing protocol developed by Socket (formerly SocketDotTech), founded in 2021 by Vaibhav Chellani and Rishabh Khurana. On January 16, 2024, the underlying Socket infrastructure was exploited via an inadequately validated smart contract route, resulting in approximately $3.3 million stolen from roughly 700 wallets with infinite token approvals. The protocol recovered approximately $2.23 million of the stolen funds one week later and resumed operations; it remains active as of 2026.

Connected Entities

1 entities
Organizations
□Bungee
Relationships
    Have evidence about Bungee?

    Timeline(8 events)

    2021

    Socket Protocol founded by Vaibhav Chellani and Rishabh Khurana, previously from Biconomy.

    2022

    Socket raises seed/pre-seed funding from Coinbase Ventures, Lightspeed Venture Partners, Framework Ventures, Nascent, and others, reportedly totalling $5–12 million across rounds.

    13 January 2024

    Socket admin deploys a new bridging route to the SocketGateway contract containing an unvalidated .call() vulnerability.

    16 January 2024

    Exploit executed: attacker drains approximately $3.3 million from ~700 wallets with infinite token approvals to SocketGateway. @speekaway first flags attack at 18:20 UTC; PeckShield reports at 14:26 ET; Socket confirms and pauses contracts.

    17 January 2024

    Socket and Bungee restart bridging operations after patching the vulnerable route. Compensation plan for victims announced.

    23 January 2024

    Socket announces recovery of 1,032 ETH (~$2.23 million) of stolen funds; victim claim process initiated via on-chain message signing.

    2024

    CertiK publishes post-incident technical analysis confirming incomplete input validation as root cause.

    27 April 2026

    Bungee Exchange reports all services fully operational per its public status page.

    Provenance & Audit Trail
    Anchored on SolanaVerify on-chain13 Wayback Archivessrc:defillama

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain (1 event). 13 of 16 cited source URLs have an Internet Archive snapshot.

    full audit log →version history →

    model: claude-sonnet-4-6

    generated: 5/4/2026, 2:54:35 AM

    last updated: 8/30/2026, 5:14:08 AM

    avoid.net — verified advice for a post-truth world