Statement to the Opulous Community
Over the past month we have been dealing with the consequences of the Messina bridge incident that released a large portion of OPUL into the market.
After eight years building Opulous, this is not a message I ever expected to write, but the reality is that we now have to begin winding down the project.
What Actually Happened
The OPUL token contract itself was not hacked, and the Opulous platform and staking contracts were not compromised.
The failure occurred in the Messina bridge infrastructure, which was responsible for escrowing tokens and managing cross-chain transfers.
An attacker exploited the bridge relay contract on Arbitrum and triggered releases of OPUL from the bridge escrow using forged bridge messages. Tokens were released on Arbitrum even though no corresponding tokens were locked on the source chain.
This allowed hundreds of millions of OPUL to be withdrawn from the bridge escrow and rapidly sold across decentralized exchanges and other venues, collapsing the market.
What We Did Immediately
From the moment the exploit was detected we began investigating and attempting to contain it.
Our team conducted a full on-chain forensic investigation mapping the exploit and tracing attacker wallets across Arbitrum, Avalanche, Algorand and Ethereum.
We identified and documented dozens of attacker-controlled wallets and shared those wallet lists and forensic findings with multiple exchanges, including Gate.io, KuCoin and OKX, requesting monitoring and freezes of any incoming funds linked to those addresses.
We also contacted blockchain forensic firms including TRM Labs, filed a police report with the BVI Police, and repeatedly attempted to engage the bridge provider responsible for the infrastructure (Messina / UCT) to obtain technical answers and coordinate containment.
Despite the attack being fully traceable on-chain, the attacker has continued selling tokens primarily through decentralized exchanges where no centralized party has the ability to intervene.
The Reality We Encountered
One of the hardest parts of this situation is that everything is visible on public blockchains. The wallets involved, the flows of tokens, and the proceeds from sales can all be traced.
But visibility does not mean control.
Exchanges generally require formal legal orders before freezing funds. Law enforcement processes operate across jurisdictions and move slowly. At the same time, the attacker has been selling primarily through decentralized exchanges where no centralized party can intervene.
In practice this means that, despite the exploit being documented and traced, the liquidation of stolen tokens has continued.
Why Recovery Is No Longer Possible
Because of the scale of the exploit and the ongoing selling pressure, the OPUL token market has been irreparably damaged.
Our market-making reserves have been exhausted trying to stabilize the situation, and a large portion of compromised supply is now distributed across wallets and markets.
We examined the possibility of a token migration or relaunch. Unfortunately that is not a viable solution.
The compromised supply still exists and continues to circulate. The token architecture does not allow us to freeze or claw back tokens. Any migration would also require exchange support, liquidity, market-maker backing and restored market confidence while the original token continues trading.
Launching a new token under these conditions would not solve the underlying problem.
For that reason, we cannot responsibly pursue a relaunch.
What Happens Next
Opulous will begin an orderly wind-down.
As part of that process:
- All remaining tokens under team control, including my own allocation, will be sent to a provably inaccessible address and permanently removed from circulation
- Documentation relating to the incident and our investigation will remain publicly available
- We will cooperate with any ongoing investigations relating to the exploit
Full details on what this means for OVAULT depositors, MFT holders, stakers, and token holders are in the What Happens Now section.
A Personal Note
For eight years I dedicated my life to building Opulous.
I did not take a salary and I never sold my tokens. We continued building through extremely difficult market conditions because we believed in the project and because our community believed in it.
Seeing the project end this way is devastating.
Many of the people who supported Opulous were not just investors. They were long-time supporters of the idea we were trying to build. Many of these are people that I can now call friends.
I am deeply sorry that this is how the journey ends.
Thank you to everyone who supported Opulous over the years.
Lee Parsons
Founder, Opulous