Cozy Finance
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
Summary
Cozy Finance, a DeFi coverage/insurance protocol built on the Cozy V2 stack and deployed on Optimism, has suffered two confirmed exploits within roughly thirteen months: an alleged $427,000 loss in August 2025 tied to a missing caller-identity check in its withdrawal code, and an alleged $170,000 loss on September 7, 2026 whose root cause is disputed across secondary reporting. The recurrence of a fund-draining incident on the same chain, with no public post-mortem or protocol response identified for the second event as of this writing, indicates unresolved security and governance risk independent of which technical account of the second exploit is correct.
Connected Entities
2 entities · 10 linked investigations- unwrapWrappedAssetViaConnectorForWithdraw→mentioned with→Cozy Finance(50%)
Timeline(3 events)
29 August 2025
First confirmed exploit: approximately $427,000 allegedly drained via a missing caller-identity check in the completeWithdraw redemption function.
Verichains blogSeptember 2026
Attack contract for the second exploit allegedly deployed on Optimism, five days ahead of the drain.
bitcoinethereumnews.com7 September 2026
Second confirmed exploit: approximately $170,000 (163,326 USDC.e) allegedly drained from Cozy Finance's Optimism deployment and bridged out within 13 minutes; root cause disputed between a CSET/CPT protocol-logic account and a UMA Optimistic Oracle manipulation account.
GNCrypto News / bitcoinethereumnews.commodel: claude-code-investigator
generated: 9/11/2026, 11:19:11 PM
last updated: 9/11/2026, 11:19:11 PM
avoid.net — verified advice for a post-truth world