{"id":86609,"date":"2023-11-04T20:09:30","date_gmt":"2023-11-04T18:09:30","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=86609"},"modified":"2025-09-13T06:42:01","modified_gmt":"2025-09-13T03:42:01","slug":"defi-digest-onyx-protocol-lost-2-1-million-as-safemoon-founders-face-multi-million-dollar-scam-charges","status":"publish","type":"post","link":"https:\/\/forklog.com\/en\/defi-digest-onyx-protocol-lost-2-1-million-as-safemoon-founders-face-multi-million-dollar-scam-charges\/","title":{"rendered":"DeFi Digest: Onyx Protocol Lost $2.1 Million as SafeMoon Founders Face Multi-Million Dollar Scam Charges"},"content":{"rendered":"<p>The decentralized finance (DeFi) sector continues to attract heightened attention from cryptocurrency investors. ForkLog has gathered the most important events and news of the past weeks in this digest.<\/p>\n<h2 class=\"wp-block-heading\"><strong>Key metrics of the DeFi segment<\/strong><\/h2>\n<p>The total value locked (TVL) in DeFi protocols rose to $42.9 billion. Led by Lido with $16.43 billion, the second and third places are held by Maker ($8 billion) and JustLend ($5.74 billion), respectively.<\/p>\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"582\" src=\"https:\/\/forklog.com\/wp-content\/uploads\/Snimok-ekrana-2023-11-04-v-17.21.48-1024x582.png\" alt=\"Snimok-ekrana-2023-11-04-v-17.21.48\" class=\"wp-image-219394\" srcset=\"https:\/\/forklog.com\/wp-content\/uploads\/Snimok-ekrana-2023-11-04-v-17.21.48-1024x582.png 1024w, https:\/\/forklog.com\/wp-content\/uploads\/Snimok-ekrana-2023-11-04-v-17.21.48-300x170.png 300w, https:\/\/forklog.com\/wp-content\/uploads\/Snimok-ekrana-2023-11-04-v-17.21.48-768x436.png 768w, https:\/\/forklog.com\/wp-content\/uploads\/Snimok-ekrana-2023-11-04-v-17.21.48-1536x872.png 1536w, https:\/\/forklog.com\/wp-content\/uploads\/Snimok-ekrana-2023-11-04-v-17.21.48-2048x1163.png 2048w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\">Data: <a href=\"https:\/\/defillama.com\/\">DeFi Llama<\/a>.<\/figcaption><\/figure>\n<p>TVL in Ethereum apps <a href=\"https:\/\/defillama.com\/chain\/Ethereum?tvl=true\">rose<\/a> to $23.4 billion. Trading volume on decentralized exchanges (DEX) over the last 30 days <a href=\"https:\/\/dune.com\/hagaetc\/dex-metrics\">stood at<\/a> $66.8 billion.<\/p>\n<p>Uniswap continues to dominate the non-custodial exchange market \u2014 it accounts for 61% of total turnover. The second DEX by trading volume is PancakeSwap (15.6%), the third is Curve (5.2%).<\/p>\n<h2 class=\"wp-block-heading\"><strong>Hackers withdrew $2.1 million from Onyx Protocol<\/strong><\/h2>\n<p>The lending DeFi platform <a href=\"https:\/\/forklog.com\/en\/news\/hackers-drain-2-1-million-from-onyx-protocol\">lost approximately $2.1 million<\/a> as a result of an illiquid-market exploit deployed on October 27.<\/p>\n<p>According to PeckShield, the attackers exploited a known rounding issue in the popular Compound v2 fork underpinning Onyx&#8217;s architecture.<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>\n<cite>\u00abEssentially, the exploited oPEPE market was deployed five days ago with no liquidity. The pool was filled with borrowed funds, which were then repaid due to the rounding issue\u00bb,<\/cite><\/p><\/blockquote>\n<p>The attackers used <a href=\"https:\/\/forklog.com\/en\/news\/what-are-flash-loans\">instant loans<\/a> to marshal resources for the attack and manipulate exchange rates, said a BlockSec spokesperson.<\/p>\n<h2 class=\"wp-block-heading\"><strong>Two DeFi protocols on Solana blocked British users<\/strong><\/h2>\n<p>Marinade Finance, the largest DeFi protocol on the <a href=\"https:\/\/forklog.com\/en\/news\/what-is-solana-sol\">Solana<\/a> network, <a href=\"https:\/\/forklog.com\/en\/news\/two-solana-defi-protocols-block-british-users\">restricted access<\/a> to the platform for UK users due to &#8220;compliance issues&#8221; with the <span data-descr=\"UK Financial Conduct Authority\" class=\"old_tooltip\">FCA<\/span>.<\/p>\n<p>When attempting to access the DeFi protocol&#8217;s site from the corresponding IP, a warning message pops up.<\/p>\n<p>The developers said that &#8220;users can withdraw liquidity, close positions or delay withdrawal from staking via the <span data-descr=\"a set of developer tools\" class=\"old_tooltip\">SDK<\/span>.&#8221; For further information, project representatives asked to contact the project email.<\/p>\n<p>The largest DEX on Solana \u2014 Orca Finance \u2014 also introduced a geo-block for the United Kingdom. The site returns a message nearly identical to Marinade&#8217;s. To exit open positions and withdraw liquidity, the platform&#8217;s team created a dedicated tool.<\/p>\n<p>On October 8 a new crypto advertising regime began in the United Kingdom. The FCA began labeling companies that do not comply with the rules.<\/p>\n<p>Under the new rules, anyone wishing to promote digital assets must be &#8220;authorised or registered with the FCA, or their campaign must be approved by an authorised firm&#8221;.<\/p>\n<p>Non-compliance is treated as a criminal offense and is punishable by an &#8220;unlimited fine and\/or imprisonment for up to two years&#8221;.<\/p>\n<h2 class=\"wp-block-heading\"><strong>SafeMoon founders charged in a multi-million-dollar scam<\/strong><\/h2>\n<p>The Eastern District of New York prosecutors indicted the founders and executives of the DeFi project SafeMoon for fraud involving &#8220;millions of dollars&#8221;.<\/p>\n<p>Authorities allege that John Karoni, Kyle Nady and Thomas Smith deceived buyers of the SFM token issued on a public blockchain.<\/p>\n<p>Respondents claimed that the asset in liquidity pools was &#8220;blocked&#8221;. Instead, when the project&#8217;s capitalization reached $8 billion, the defendants withdrew &#8220;tokens worth millions of dollars&#8221; which they spent on personal consumption, prosecutors say.<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>\n<cite>\u00abThey intentionally misled investors and redirected funds to feed their fraudulent scheme and enrich themselves by purchasing a Porsche sports car, other luxury cars, and real estate\u00bb, said Prosecutor Breon Pis.<\/cite><\/p><\/blockquote>\n<p>According to investigators, SafeMoon LLC launched SFM in March 2021. The smart contract provided for a 10% transaction fee on the asset. Half of the commission was distributed among token holders, the other half went to the liquidity pool, where it allegedly was locked.<\/p>\n<p>Within a few months the number of investors surpassed a million, and the capitalization reached $8 billion.<\/p>\n<p>Authorities suspect that the defendants intentionally misled investors about the &#8220;blocked tokens&#8221;. The defendants not only withdrew funds from pools, but also traded assets, manipulating prices to their advantage.<\/p>\n<p>Publicly they denied owning and trading SFM, and hid the transactions through a complex routing system and anonymous exchange accounts, investigators say. The funds obtained were used to buy luxury cars and real estate in New Hampshire, Utah and Florida.<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>\n<cite>\u00abFor example, Smith, using controlled cryptocurrency addresses, sent 2,900 BNB totaling more than $860,000, which were tracked via the SFM liquidity pool to a third party to purchase a Porsche 911 sports car and a non-fungible token (NFT)\u00bb, the press release states.<\/cite><\/p><\/blockquote>\n<p>Karoni and Smith have been arrested, Nady remains at large. Prosecutors stressed that the defendants are presumed innocent until proven guilty.<\/p>\n<p>Also on ForkLog:<\/p>\n<ul class=\"wp-block-list\">\n<li>The dYdX developers launched their own L1 blockchain based on Cosmos.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>The decentralized finance (DeFi) sector continues to attract heightened attention from cryptocurrency investors. ForkLog has gathered the most important events and news of the past weeks in this digest.<\/p>\n","protected":false},"author":1,"featured_media":86610,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[1299,1233],"class_list":["post-86609","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-defi-bulletin","tag-industry-digests"],"aioseo_notices":[],"amp_enabled":true,"views":"20","promo_type":"1","layout_type":"1","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/86609","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/comments?post=86609"}],"version-history":[{"count":1,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/86609\/revisions"}],"predecessor-version":[{"id":86611,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/86609\/revisions\/86611"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media\/86610"}],"wp:attachment":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media?parent=86609"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/categories?post=86609"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/tags?post=86609"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}