Swan Treasury (STY Token)
Summary
Swan Treasury is a BNB Chain privacy-finance protocol offering anonymous identity, private transactions, dark pool liquidity, on-chain vaults, and a node network, with the STY token serving as its central ecosystem passkey. On July 30, 2026, the protocol suffered an estimated $625,000 loss after an attacker exploited a compromised off-chain signer private key that was hardcoded as the _signer address in the ZhaiquanBuy smart contract. As of August 20, 2026, Swan Treasury has not published a post-mortem or explained how the signer key was exposed, leaving users without clarity on the protocol's current security posture.
Connected Entities
1 entities · 10 linked investigationsTimeline(4 events)
2026-06-21
Swan Treasury publishes a launch announcement for its privacy-finance infrastructure on BNB Chain, with the STY token described as the central ecosystem passkey. No team members are identified.
KuCoin (MetaEra attribution)2026-07-30
Attacker exploits a compromised off-chain signer private key hardcoded in the ZhaiquanBuy contract. Using a PancakeSwap flash loan of approximately 19,700 USDT, the attacker forges discount signatures and purchases approximately 687,000 STY tokens at roughly 1/100th of intended price, then sells them into the STY/USDT pool for approximately $625,000 USDT profit.
crypto.news, cryptonews.net (citing Defimon Alerts)2026-07-31
Blockchain security firm Defimon Alerts publicly reports the exploit. crypto.news and cryptonews.net cover the incident. Swan Treasury has made no public statement.
crypto.news2026-08-20
As of this date, Swan Treasury has not published a post-mortem, explanation of how the signer key was exposed, or any remediation disclosure. The protocol's security posture remains unverified.
Absence of public disclosure — verified via web searchDecision Log
- #1publish⛓ pending8/20/2026, 5:03:03 PMhash: J9moGqUh6v98cHAJuMABGmpuuaKsgnTzGJ79iiqEa9Ca
3 of 4 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 8/20/2026, 5:02:56 PM
last updated: 8/20/2026, 5:57:26 PM
avoid.net — verified advice for a post-truth world