$20 000 000 USD

SEPTEMBER 2025

GLOBAL

UNKNOWN

DESCRIPTION OF EVENTS

From the description by Bruce Lee, the smart contract was a UUPS proxy implementation.

 

Unfortunately, due to botching the upgrade, the developers lost their Admin and Upgrade roles.

 

A potential explanation of the issue:

 

"ig the problem is that they used a individual "FundPool" contract for the funding (user send funds?)

 

but then they upgraded to a proxy, didnt know that the storage dont upgrade too and now the admin roles link to empty storages"

 

Losses are widely reported as $20m.

 

The initial desperate request on Telegram:

 

"Hey Guys I meet some problem

 

My contacts fund cannot be withdrawn

 

About 22m"

 

There does not appear to be any recovery possible.

An issue arose from a botched upgrade of a UUPS proxy smart contract, where developers lost their Admin and Upgrade roles. The problem likely stemmed from using an individual "FundPool" contract for funding, which was then upgraded to a proxy without realizing that the storage would not be upgraded along with it, causing the admin roles to link to empty storage. As a result, $20 million in funds are reportedly lost, and recovery seems impossible. The problem was first flagged in a Telegram message about difficulties withdrawing funds.

Sources And Further Reading

 For questions or enquiries, email info@quadrigainitiative.com.

Get Social

  • email
  • reddit
  • telegram
  • Twitter

© 2019 - 2025 Quadriga Initiative. Your use of this site/service accepts the Terms of Use and Privacy Policy. This site is not associated with Ernst & Young, Miller Thompson, or the Official Committee of Affected Users. Hosted in Canada by HosterBox.