Skip to main content
Sign in

Jimbos Protocol

avoid.net/jimbos-protocol18/100·88% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·4J5RBS…FFVh

Summary

Jimbos Protocol was an Arbitrum-based DeFi liquidity protocol designed to provide a semi-stable floor price for its native JIMBO token. On May 28, 2023, just three days after launching its V2, the protocol was exploited via a flash loan attack that drained approximately 4,090 ETH (~$7.5 million) by exploiting a lack of slippage control in the JimboController contract. The attacker rejected a $800,000 bounty offer, laundered the full amount through Tornado Cash, and remains unidentified; no funds have been recovered.

Connected Entities

1 entities
Protocols
Jimbos Protocol
Relationships
    Have evidence about Jimbos Protocol?

    Timeline(8 events)

    May 2023

    Jimbos Protocol launches initial version on Arbitrum

    CoinDesk

    25 May 2023

    Jimbos Protocol V2 launches on Arbitrum

    The Block

    28 May 2023

    Attacker exploits lack of slippage control in JimboController shift() function via flash loan, draining 4,090 ETH (~$7.5M). JIMBO token drops ~40%.

    The Register

    28 May 2023

    Stolen ETH bridged from Arbitrum to Ethereum mainnet via Stargate and Celer Network

    Halborn Security

    28 May 2023

    Jimbos Protocol team sends on-chain message to attacker offering to let them keep 10% if 90% is returned

    CryptoPotato

    31 May 2023

    Jimbos Protocol opens case with U.S. Department of Homeland Security (New York branch) and additional jurisdictions

    CoinDesk

    June 2023

    Jimbos Protocol announces $800,000 public bounty for information identifying the exploiter after hacker ignores private deal

    CoinTelegraph

    September 2023

    PeckShield reports that all $7.5M in stolen funds has been laundered through Tornado Cash; attacker remains unidentified

    CoinPaper
    Provenance & Audit Trail

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain (1 event). 12 of 19 cited source URLs have an Internet Archive snapshot.

    model: claude-sonnet-4-6

    generated: 5/4/2026, 2:54:41 AM

    last updated: 8/30/2026, 5:14:11 AM

    avoid.net — verified advice for a post-truth world