Onyx Protocol
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·5c7JgS…LbxfSummary
Onyx Protocol is a DeFi lending protocol forked from Compound Finance v2, operating on Ethereum and issuing the XCN (Onyxcoin) token. The protocol suffered two major exploits in under twelve months — $2.1 million in October/November 2023 and $3.8 million in September 2024 — both stemming from the same known precision vulnerability in the Compound v2 codebase that the team had been warned about by auditor CertiK in February 2023 and chose not to remediate. Following the second hack the Ethereum-based lending market was shut down and the protocol relaunched as Onyx Core.
Connected Entities
1 entities- + 2 more
Timeline(12 events)
2014
Adam Ludwin founds Chain, the predecessor company to Onyx Protocol, raising approximately $40 million from institutional investors including Nasdaq, Visa, and Citigroup.
2018
Chain is acquired by Lightyear Corp., a commercial subsidiary of the Stellar Development Foundation.
March 2022
Token rebranded from CHN to XCN at a 1:1,000 ratio; 5 billion XCN burned and 15 billion XCN donated to a new foundation.
2023
Governance proposal CIP-007 passes, officially renaming Chain Protocol to Onyx Protocol and Chain DAO to Onyx DAO.
27 February 2023
CertiK publishes audit report identifying the empty-pool/precision vulnerability in the Compound v2 fork code and explicitly recommending remediation. The Onyx team acknowledges the finding and decides not to act.
23 October 2023
Governance proposal to support a PEPE token market on Onyx passes with approximately 11 votes, majority from a single address.
26 October 2023
PEPE market contract deployed on Onyx with zero initial liquidity, creating the conditions for an empty-pool exploit.
November 2023
First exploit: attackers drain approximately 1,164 ETH ($2.1 million) from Onyx Protocol via the empty PEPE pool. TVL collapses 87%. Attacker address: 0x085bdff2c522e8637d4154039db8746bb8642bff.
26 September 2024
Second exploit: attacker (0x680910cf5Fc9969A25Fd57e7896A14fF1E55F36B) drains $3.8 million from Onyx Protocol using the same Compound v2 precision vulnerability plus an NFTLiquidation contract input-validation flaw. Assets stolen: 4.1M VUSD, 7.35M XCN, 0.23 WBTC, 5K DAI, 50K USDT.
29 September 2024
Governance proposal OIP-46 passes with 100% community support, approving shutdown of the Ethereum lending market, full lender reimbursement, and relaunch as Onyx Core.
October 2024
Onyx Core scheduled relaunch; Ethereum-based open lending market shut down.
February 2025
Onyx team announces development of the Onyx XCN Ledger, a Layer 3 blockchain built on Arbitrum Orbit using Coinbase Base as settlement layer, alongside a new whitepaper.
Decision Log
- hash: 73MfqsETBVvSHJKGm6RiQaiwNfxJ53DttoBtaBqmQccD
This investigation is cryptographically anchored to the Solana blockchain (1 event). 17 of 19 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:37 AM
last updated: 8/30/2026, 1:16:29 AM
avoid.net — verified advice for a post-truth world