Skip to main content
Sign in

Vestra DAO

avoid.net/vestra-dao→32/100·72% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·2TUFh5…8PbZ

Summary

Vestra DAO is an Ethereum-based DeFi and SocialFi protocol operating the VSTR token, launched in late 2024. On December 4, 2024, the protocol suffered a critical smart contract exploit in its staking contract that drained approximately $480,000–$500,000 worth of VSTR tokens — an attack that occurred less than one month after the token began trading. Stolen funds were laundered through Tornado Cash, the token price collapsed by roughly 50%, and the project's ability to fully compensate affected users remains unresolved.

Connected Entities

1 entities
Organizations
□Vestra DAO
Relationships
    Have evidence about Vestra DAO?

    Timeline(9 events)

    March 2023

    Vestra DAO project inception date per CertiK records.

    5 August 2024

    CertiK delivered second security audit; 14 findings identified including 3 major issues; no critical issues flagged.

    29 October 2024

    CertiK granted Vestra DAO a Gold team verification badge with 4 verified core team members.

    November 2024

    VSTR token begins trading on Uniswap V3 (approximate date, approximately one month before the exploit).

    4 November 2024

    Attacker stakes 500,000 VSTR in the locked staking contract, beginning a one-month preparation phase for the exploit.

    4 December 2024

    Exploit executed: attacker repeatedly called unStake() on an inactive staking position, draining approximately 73,720,000 VSTR (~$480,000–$500,000). VSTR price collapsed from ~$0.013 to ~$0.005.

    5 December 2024

    Vestra DAO team publicly acknowledged the exploit on X, blacklisted the compromised staking contract, and offered attacker a 20% white-hat bounty. Stolen ETH (~125 ETH) began moving through Tornado Cash.

    6 December 2024

    Multiple crypto news outlets report on the incident. Team announces removal of 755,631,188 VSTR from circulation to protect tokenomics. Bounty negotiations with attacker fail.

    April 2025

    Brolyz SocialFi platform open beta launch was scheduled per roadmap; independent verification of delivery is not available in public sources.

    Provenance & Audit Trail
    Anchored on SolanaVerify on-chain13 Wayback Archivessrc:defillama

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain (1 event). 13 of 16 cited source URLs have an Internet Archive snapshot.

    full audit log →version history →

    model: claude-sonnet-4-6

    generated: 5/4/2026, 2:54:27 AM

    last updated: 8/29/2026, 11:26:13 PM

    avoid.net — verified advice for a post-truth world