PaintSwap
Summary
PaintSwap is a decentralized NFT marketplace and DeFi protocol originally launched on the Fantom Opera blockchain in May 2021, which migrated to the Sonic chain (formerly Fantom) in late 2024. The platform operates an open NFT marketplace, an AMM DEX, yield farming, and an on-chain idle MMORPG called Estfor Kingdom, all powered by its native BRUSH token. No confirmed rug pull, hack, or regulatory action has been identified; the primary documented incident is a domain hijacking by a third-party registrar in October 2025.
No evidence submitted yet — be the first.
Editorial decisions, corrections, and updates are anchored on Solana.
Overview and Background
PaintSwap launched in May 2021 on the Fantom Opera network, initially as a yield farming and AMM DEX, before opening Fantom's first multi-standard secondary NFT marketplace in September 2021. The platform supports ERC-721 and ERC-1155 NFTs and introduced version 2 of its marketplace in October 2021, shifting the primary trading currency from BRUSH to FTM. Version 3 launched in July-August 2022, adding batch minting, bulk transfers, checkout cart functionality, and NFT vaults. In December 2024, PaintSwap migrated to the Sonic chain (a rebrand of Fantom Labs), releasing a redesigned marketplace UI and halting further BRUSH token emissions. The team is pseudonymous, known publicly by handles: Arod (digital marketing lead), SamWitch (lead backend developer and smart contracts), CheeseKnight (UI lead), Paintoshi (lead frontend developer), Dyeharder (software development), and N0rm (designer). The Fantom Foundation has featured PaintSwap as a notable ecosystem project.
Token Economics and BRUSH Price Decline
BRUSH is PaintSwap's native ERC-20 governance and utility token. Its original maximum supply was planned at 450 million, but following the Sonic migration in late 2024, the team halted all further BRUSH emissions, capping effective circulating supply at approximately 407 million tokens. The token reached an all-time high of approximately $0.2491 on January 16, 2022, and has since declined approximately 99.7% to around $0.0006 as of early 2026, giving it a market capitalization of roughly $264,000. The all-time low was recorded on February 6, 2026 at approximately $0.0005399. PaintSwap applies deflationary mechanisms: 50% of marketplace and launchpad fees are used to buy back and burn BRUSH. The token concentration identified in a 2021 audit showed the top five holders controlling approximately 28.87% of total supply, with 26.73% held in the Decorator contract. The owner address retained the ability to mint unlimited tokens at the time of the initial audit, though this risk was partially mitigated by a 24-hour Timelock contract on the Decorator. It is not confirmed whether mint authority has since been renounced.
- [1]MEDPaintswap (BRUSH) price today — CoinMarketCapresearch
- [2]MED$BRUSH Tokenomics — PaintSwap Documentationofficial
- [3]MEDPaintSwap Smart Contract Audit — SourceHatresearch
Smart Contract Security and Audit
PaintSwap underwent a smart contract audit conducted by SourceHat (formerly Solidity Finance) on November 1, 2021. The audit covered the BRUSH token, Decorator, Timelock, Factory, Router, and Multicall contracts deployed on Fantom mainnet. The overall result was a pass, with no critical or high severity vulnerabilities identified and no external attack vectors found across 14 vulnerability categories including arbitrary storage writes, integer overflow/underflow, ether or token theft, and unchecked return values. The primary risks flagged were governance and operational rather than technical: the owner held centralized control with the ability to mint unlimited tokens to any address, adjust withdrawal fees, and modify emission rates without restriction. Ownership of the Decorator contract was assigned to a 24-hour Timelock contract, providing a minimal delay before administrative changes could take effect. Token concentration was flagged, with the top five holders controlling 28.87% of supply. No subsequent public audit has been identified for contracts deployed after the Sonic migration. The Estfor Kingdom smart contracts are open-source and available on GitHub.
- [1]MEDPaintSwap Smart Contract Audit — SourceHatresearch
- [2]MEDPaintSwap Estfor Kingdom Contracts — GitHubon chain
Domain Hijacking Incident (October 2025)
On October 10, 2025, all PaintSwap-owned domains hosted through the privacy registrar Njalla were taken offline when Njalla reset the domain name servers without prior notice. The root cause was a deprecated application at paintswap.live, hosted on GitHub Pages, which had been flagged by a small number of vendors on VirusTotal. Njalla suspended PaintSwap's entire account — affecting the domains estfor.com, estforkingdom.com, paintswap.io, paintswap.finance, and paintswap.live — based on this low-detection-rate flag without contacting the project first. Support correspondence over October 10-12 revealed minimal explanation from Njalla. Domain transfers were approved on October 12, 2025, with a mandatory seven-day waiting period; all domains except paintswap.live were transferred to a new registrar by October 17, 2025. Smart contract infrastructure was unaffected throughout the incident, and no user funds were reported lost. PaintSwap publicly advised users to avoid Njalla or similar privacy-focused proxy registrars that own domains on behalf of customers, and recommended distributing critical domains across multiple providers. This incident is classified as an operational security failure at the infrastructure level, not a protocol exploit.
Impersonation and Phishing Risk
A domain airdrop.paintswap.pro was identified as a low-risk crypto drainer phishing threat by at least one security vendor on VirusTotal, as reported in April 2026. The domain is not operated by PaintSwap and appears to be a third-party impersonation site. The site reportedly displayed a page designed to impersonate an airdrop offering. The domain was flagged as offline at the time of identification. This type of scam domain targeting PaintSwap users is consistent with broader patterns of airdrop phishing observed across DeFi ecosystems and does not reflect on PaintSwap's own security practices. Users should verify all PaintSwap domain activity through the official paintswap.io or paintswap.finance domains.
- [1]MEDairdrop.paintswap.pro — Scam or Legit? Domain Security Report (PhishDestroy)community report
Team Anonymity and Transparency
PaintSwap's core team operates under pseudonymous handles — Arod, SamWitch, CheeseKnight, Paintoshi, Dyeharder, and N0rm — and no verified legal identities have been publicly disclosed. The Fantom Foundation has published a team profile describing combined experience of 70 or more years across crypto, finance, and software development, with individual members cited as having 5 to 26 years of industry experience. The team has maintained an active public presence through Medium blog posts, AMAs, and official social media since May 2021. Pseudonymous operation is common among DeFi projects but does present an accountability risk: in the event of disputes or fund mismanagement, legal recourse against identifiable individuals is limited. No evidence of exit intent, insider dumping, or abandonment has been documented in public sources.
Regulatory and Legal Status
No regulatory actions, SEC or CFTC enforcement actions, court filings, or government investigations involving PaintSwap or its operators have been identified in publicly available sources as of May 2026. The BRUSH token has not been publicly classified as a security by any regulator. PaintSwap operates as an open decentralized protocol without a centralized corporate entity publicly identified in regulatory filings. The project does not appear to have sought or disclosed any money transmitter licenses or formal regulatory approvals. The absence of identified regulatory action does not confirm regulatory compliance, particularly given evolving international rules around NFT marketplaces and DeFi protocols.
- [1]MEDPaintswap (BRUSH) — CoinMarketCap listingother
Market Position and Ecosystem Activity
PaintSwap was the leading NFT marketplace on the Fantom Opera chain from 2021 through 2024. Following the migration to Sonic in December 2024, it rebranded to operate as the primary NFT marketplace and launchpad on that network. The platform also hosts Estfor Kingdom, a fully on-chain free-to-play idle MMORPG in which all items are ERC-1155 NFTs, and which uses BRUSH as its in-game currency. As of early 2026, BRUSH has a market cap of approximately $264,000 and sits outside the top 6,000 tokens by market capitalization on CoinMarketCap, reflecting the overall decline of the Fantom DeFi ecosystem relative to its 2021-2022 peak. GitHub activity is publicly available under the PaintSwap organization, and the Estfor Kingdom contracts are open-source. No venture capital funding rounds, institutional backing, or external investment has been publicly disclosed.
- [1]MEDPaintswap — The Future of Web3 (Official site)official
- [2]MEDPaintswap (BRUSH) — CoinGeckoresearch
- [3]MEDPaintswap · GitHubon chain
- [4]LOWEstfor Kingdom browser RPG review — JuiceNewsnews article
Timeline
2021-05-10
PaintSwap launches on Fantom Opera with yield farming and staking; BRUSH token introduced.
PaintSwap Medium (Arod)2021-09-03
PaintSwap opens Fantom's first multi-standard open NFT marketplace supporting ERC-721 and ERC-1155 tokens.
PaintSwap Medium (Arod)2021-10
NFT Marketplace v2 launched after more than 1 million FTM traded; primary currency switched from BRUSH to FTM.
PaintSwap Medium (Arod)2021-11-01
SourceHat publishes smart contract audit of PaintSwap. No critical or high severity vulnerabilities identified; centralized mint authority flagged as governance risk.
SourceHat Audit Report2022-07
NFT Marketplace v3.0 launched with batch minting, bulk transfers, checkout cart, NFT vaults, and one-click liquidation.
PaintSwap Medium (Arod)2024-12
BRUSH token and liquidity pools migrated from Fantom Opera to Sonic chain; redesigned Sonic-native marketplace UI released.
PaintSwap Medium (Arod)2025-10-10
Njalla domain registrar suspends PaintSwap's entire account without notice, taking all platform domains offline. Root cause: low-detection-rate VirusTotal flag on a deprecated subdomain.
Paintswap Medium (Paintoshi)2025-10-17
Domain transfers to a new registrar completed; all primary PaintSwap domains restored except paintswap.live.
Paintswap Medium (Paintoshi)model: claude-code-investigator
generated: 5/7/2026, 11:39:35 PM
last updated: 5/7/2026, 11:39:34 PM
avoid.net — verified advice for a post-truth world