Skip to main content
AVOID.NET

Ionic Protocol

avoid.net/ionic-protocol18/100·82% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·5kB1QN…qdWf

Summary

Ionic Protocol (also known as Ionic Money) is a decentralized non-custodial lending and borrowing protocol deployed on the Mode Network (OP Superchain). It is a rebrand of Midas Capital, which suffered two separate exploits in 2023 totaling approximately $1.26 million. In February 2025, Ionic itself was exploited via a social engineering attack involving a counterfeit LBTC token, resulting in losses estimated between $8.6 million and $12.3 million; funds were partially laundered through Tornado Cash and have not been recovered.

Connected Entities

1 entities
Protocols
Ionic Protocol
Relationships
    Have evidence about Ionic Protocol?

    Timeline(10 events)

    November 2021

    Midas Capital founded with a vision of multichain isolated-pool lending.

    15 January 2023

    Midas Capital first exploit: approximately $660,000 drained via read-only reentrancy vulnerability in Curve LP collateral on Polygon.

    17 June 2023

    Midas Capital second exploit: approximately $600,000 drained via rounding error in Compound V2-derived code on BNB Chain.

    2023

    Midas Capital sunsetted; team begins rebrand to Ionic Protocol on Mode Network.

    12 December 2024

    Alleged attacker begins interacting with Ionic Protocol, impersonating Lombard Finance team in BD discussions.

    9 January 2025

    Attacker deploys counterfeit LBTC smart contract (0x964dd444e3192f636322229080a576077b06fba3).

    4 February 2025

    Ionic Money exploit begins: attacker mints 250 fake LBTC, deposits as collateral, and borrows approximately $8.6–$12.3 million in real assets.

    4 February 2025

    Attacker bridges ~1,204 ETH ($3.2 million) from Mode Network to Ethereum and launders funds through Tornado Cash.

    8 February 2025

    Ionic team publishes official post-mortem; states the incident was not a code-based breach and pledges to work with law enforcement.

    4 February 2025

    ZachXBT publicly flags the exploit and states 'Ionic is just Midas wearing a carnival mask,' referencing two prior 2023 hacks.

    Provenance & Audit Trail

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain (1 event). 15 of 20 cited source URLs have an Internet Archive snapshot.

    model: claude-sonnet-4-6

    generated: 5/4/2026, 2:54:25 AM

    last updated: 9/12/2026, 10:51:24 AM

    5 views

    avoid.net — verified advice for a post-truth world