‼️Closing FAQ

General

Why shut down? 577 ETH was stolen and new $1M debt was raised to restore operations. Although we were successful in restoring operations, difficulty in fundraising and market conditions made continuing impossible. We’re shutting down responsibly to protect users and creditors.

What happens to trading? We’ve pulled DEX liquidity and notified CEXs. Users provided liquidity in Uniswap will remain until users withdraw their liquidity. Was Kinto L2 hacked? No. The exploit hit the legacy $K token proxy on Arbitrum via the CPIMP proxy vector. Kinto L2, wallets, user assets on the Kinto network and core infra were never breached. https://dedaub.com/blog/the-cpimp-attack-an-insanely-far-reaching-vulnerability-successfully-mitigated/

Assets & Withdrawals

How do I withdraw? Use the Kinto UI/Bridge/Wallets before Sep 30. A guide for withdrawals can be found in our docs here: https://docs.kinto.xyz/kinto-the-modular-exchange/user-guides/kinto-withdrawals

What if I forget to withdraw by Sep 30? We’ll convert remaining balances to USDC on Ethereum mainnet and deposit them into a perpetual claim contract you can claim anytime (contract address posted early Oct).

What about assets on Aave and Hyperliquid? You need to unwind the positions and withdraw your assets before Sep 30th.

Do I need to open a ticket to claim later? No. It’s an on-chain claim on mainnet from your wallet signer. Make sure you update your wallet signers. We will grab the first external signer that is set in your Kinto wallet.

Hack Victims (Morpho & Royco)

What do I receive? You will receive up to $1,000 per eligible address thanks to a founder good will grant ex-gratia. You will also receive any amount recovered from the hackers until every victim is covered.

Am I eligible? If your address appears in the datasets derived from:

  • Kinto (Morpho): 0x5A1E00cA7E14CcA18b7a6EAb0A586ed7801bAbd3

  • Arbitrum (Royco): 0xD9e3c29Af13638B1F610C1272eC3c1Ad14d08f1A …you’ll see your admitted amount in the portal.

You can see the full spreadsheet here. If you believe you should be on this list as a Kinto Morpho and/or Royco supplier please connect with through our discord server and open a ticket. We are also available at contact(at)kinto.xyz

What do I claim on October 1st?

  • Founder Goodwill Grant (personal funds): up to $1,000 per eligible address (ex-gratia; doesn’t reduce future recovery).

  • CVR: Opt in (by signing once) to receive 100% of any future net recoveries until you’re made whole.

Where do I claim? 👉 https://kinto.xyz/cvr-claim

Deadline? Please Accept & Claim by Nov 30, 23:59 UTC. Unclaimed provisional entries may be forfeited per the program terms.

Sanctions/AML? If your wallet is flagged, payments may be held until cleared.

Community Waterfall (only if excess)

Do holders/stakers get anything? Only if hacker recoveries exceed total victim amounts (100% repaid). Any excess is shared ex-gratia by snapshot:

  • Staked $KINTO = 1.3× weight

  • Unstaked $KINTO = 1.0× weight Snapshot block numbers will be posted in the portal.

Staking & Airdrops

What about the ERA airdrop? Still happening as promised on Ethereum mainnet (target Oct 15). We’ll share details/tx when it goes live.

Anything I need to do? Ensure your Kinto wallet signers are updated before Sep 30 so any future distributions (if any) can be recognized to your wallet. Make sure you update your wallet signers. The first external signer that is set in your Kinto wallet that is not the passkey will be set to claim the airdrop.

Phoenix Creditors

Where does the remaining treasury go? 100% of remaining protocol assets (~$850k) are dedicated to repay Phoenix creditors (concurrent, pro-rata). This does not affect victim claims on any future hacker recoveries.

Key Dates

  • Sep 30 — Last day to withdraw via Kinto UI/Bridge/Wallets; update EOA signers.

  • Oct 1st — Claim portal (CVR) for Morpho Victims and Kinto holders.

  • Early Oct — Mainnet USDC withdrawal contract live for any unwithdrawn user assets.

  • Oct 15 (target) — ERA airdrop on mainnet.

  • Sep 30, 23:59 UTC — Suggested deadline to Accept & Claim in CVR portal.

Need help?

Thank you for your patience and strength. We’re closing this chapter responsibly and will keep pursuing attacker recoveries for victims.

PreviousFAQNextSign Up Walkthrough

Last updated