SOY FINANCE BRIDGE INCIDENT ANNOUNCEMENTOn November 30, 2025, at approximately 20:10 UTC, an “unknown individual” with access to the address 0x41ce6DD45c79ac587cbb319e01480b7eF5146ba6 refueled gas for the following three addresses on the
Binance Smart Chain network:
1. 0x794e7B72cD1aa580039294cA7D3D401108037939
2. 0x8C48a585EBD56515F8a6a70a2A059c7387f644Ba
3. 0x82C806a6cB2A9B055C69c1860D968A9F932477df
All three addresses are founder addresses (with voting rights) that participate in governing the
Soy Finance Bridge contract (
https://bridge.sloth.finance).
Afterward, these addresses, through a call to the transferOwnership function, transferred ownership rights of the bridge contract to 0x41ce6DD45c79ac587cbb319e01480b7eF5146ba6. Following this, the mentioned address set the oracle voting threshold to one vote (previously three ) and emptied the bridge contract on the
Binance Smart Chain,
Ethereum Classic, and
Ethereum sides, subsequently transferring and exchanging all stolen funds.
The addresses that voted in favor of stealing the funds belong to the following individuals:
1. 0x794e7...37939 – Karel Filner (CE,
@jakkary)
2. 0x8C48a...644Ba – Laurent Riche (CE, a.k.a. Tonton Benz,
@TontonBenz)
3. 0x82C80...477df – Vladimir Vencalek (CE,
@cReepass)
The authority used to claim (i.e. steal) users' funds from the bridge contract (0xBE440Ec92F6caEa554560dc5C5d6f6F0B0Eb984B) is controlled by
@TontonBenz.
These facts give us,
the Callisto DAO, full grounds to assert the culpability of the former Callisto Enterprise team—now operating as
@FushumaChain—in the theft of user funds from the bridge contract.
⚠️ At this moment, all tokens that were transferred to the Callisto network via the bridge are unbacked. We ask users to refrain from using them until further guidance from the DAO.
