Monkey OdinFun

Meme coin on ODIN•FUN 🐒 | telegram : | token:

[Monkey OdinFun @monkeyodinfun]

Haha, no worries. Whatever @Odin_GodOfRunes @BobBodily is cooking, I just hope it's good for everyone.

#ODINFUN #ODINFUN_NEVER_DIES

[Monkey OdinFun @monkeyodinfun]

$MONKEY Communities 👇
https://t.co/h0NZ3SUqA9

#Odinfun $MONKEY

[Monkey OdinFun @monkeyodinfun]

@Nikola_kingo OdinDog🔥 @Odin_GodOfRunes

[ODIN•FUN @Odin_GodOfRunes]

Week 26 dev update at https://t.co/EQMge9ENAj

179 commits, 62 PRs

TL;DR: A security-forward week dominated by one thing: two-factor authentication shipped end to end across the entire platform. Around it, the staking rewards API came online, Communities reached a complete creation flow, and the observability stack moved to production. Here's what landed.

🔐 2FA is live: TOTP authenticator apps and WebAuthn passkeys are now supported. Every sensitive action (withdraw, transfer, staking deposit, trade, and token creation) is now gated behind a step-up verification. You can also lock your account so no action can happen without a second factor.

💰 Staking rewards API: a full rewards read surface launched this week, global rewards, per-creator rewards, and per-token pool breakdowns. The data layer is ready; the UI surface is next.

🏘️ Communities: the creation flow is now complete with connect-to-create for logged-out users, required banner and description fields, and an automatic redirect to your community page after creation.

🌍 i18n parity enforced: CI now blocks any merge that ships English copy without a matching Chinese translation. The localization layer stays complete automatically.

🔒 Authorize popup redesigned: the delegation popup got a full redesign with a cleaner permissions list and layout, and is now locked to ICRC-28 trusted origins only.

⚡ CI & test hardening: path-filtered workflows, cached browsers, auto-cancelled stale runs, and Bruno API test coverage now across 50+ endpoints (auth + admin phases).

📡 Observability prod cluster: the monitoring stack is now running on a production GKE cluster with its own Terraform, Helm values, and deploy pipeline.

Building in public, one week at a time.

[Monkey OdinFun @monkeyodinfun]

...

[ODIN•FUN @Odin_GodOfRunes]

Communities are now live on Odin 👀

A new way to organize, trade, and grow together as community, directly inside the platform

Here's everything you need to know 🧵

[Monkey OdinFun @monkeyodinfun]

@janbtc Yeahh

[ODIN•FUN @Odin_GodOfRunes]

Week 24 dev update 🧵

API v2 is now live. The indexer is hardened. Monitoring is complete. (sharing our dev updates with a 1-week delay)

Here's what shipped last week at @odin_fun 👇

[Monkey OdinFun @monkeyodinfun]

To support and revive OdinFun with V2, I re-created $MONKEY in V2 👉 https://t.co/KyUlHBxKNd
This token is pure meme and is meant for fun and to revive OdinFun🍻🔥

[Monkey OdinFun @monkeyodinfun]

@BobBodily Come back stronger💪

[Bob Bodily, PhD @BobBodily]

📢 Big announcement! 📢

Odin Fun V2 is LIVE! 🎉🎉🎉

We deployed V2 to our regular domain (odin dot fun) and we moved the V1 deployment to legacy dot odin dot fun.

V2 is a new, fresh version of Odin Fun where user funds are fully secured and backed 1:1 with the Bitcoin in the protocol. This means users can freely deposit, trade, and withdraw as they desire.

We have some exciting new features coming soon (that you all have wanted for a very long time). It will be fun to finally get these out for all of you. I think you are going to love them.

For more context about what this means and why this happened, read on below:

1. We reopened Odin Fun after collaboration with our Chinese communities, being fully transparent about the deficit in user funds. We increased fees (0.5% -> 1%) and committed to using all profits to pay down the deficit. We were all hopeful that liquidity could stabilize and we could continue to grow.

2. Unfortunately, things didn't work out as expected, and over a few weeks the liquidity in the platform slowly dropped to zero. This means users could still trade in the platform, but they couldn't withdraw without another user depositing funds into the protocol first.

3. This wasn't good for anyone. So we've been hard at work over the last 2 weeks and we finally have a good solution. We've redeployed Odin Fun as a new fresh protocol and we are calling it Odin Fun V2. Because it is a fresh deployment of the protocol, it means user funds are fully backed 1:1 and users can deposit, trade, and withdraw as they desire. User balances don't carry about from V1 to V2 and tokens launched won't carry over either.

4. We've deployed V2 to odin dot fun and we've moved V1 Odin Fun to legacy dot odin dot fun. So you can still go to legacy dot odin dot fun and login to view your previous balances. And then you will have to deposit new funds to V2 to trade.

5. Our goal in deploying Odin Fun V2 is to start to build liquidity, traction, and trading in Odin Fun again so that we can (1) work together to build an incredible Bitcoin trading platform, and (2) to use all V2 profits to pay down the user funds deficit in the V1 platform.

6. We will continue using V2 profits to pay down the V1 deficits, but in the meantime we are working with various Odin Fun communities to find an interim solution. For example, maybe a community could raise enough funds to port a token, user balances, and liquidity over from V1 to V2. Please let me know if you have ideas to help.

7. As part of this process if you have comments, questions, concerns, or feedback, please submit a ticket within Odin Fun and we will do our best to accommodate you.

Thank you!

- Bob

[Monkey OdinFun @monkeyodinfun]

@theonlyposted GM 🧡

[Monkey OdinFun @monkeyodinfun]

@Odin_GodOfRunes

[Monkey OdinFun @monkeyodinfun]

Back on air! Back to shine🔥👏

Our token 👉 https://t.co/RnkwGx7hjm

#ODINFUN

[Bob Bodily, PhD @BobBodily]

Odin Fun is LIVE! 🎉

Thanks again for the incredible support from our community.

Happy trading!

[Monkey OdinFun @monkeyodinfun]

Tomorrow @Odin_GodOfRunes open trading again🔥👏
#Odinfun

[Bob Bodily, PhD @BobBodily]

Great news everyone! Odin Fun trading will go live again in 24 hours!

All user balances returned
We are rolling back all transactions to just prior to the hack. This means all user balances will be returned to exactly what they were prior to the attack. This includes BTC and tokens. Known hacker addresses have been frozen.

Cryptoburg token
Trading, deposits, add/remove LP, transfers, and withdrawals will go live for all tokens except for Cryptoburg. Cryptoburg has a secondary marketplace (the Gate exchange) which makes their token a bit complicated to deal with. Some users bought for cheap on Odin Fun and sold on Gate. Some bought for cheap on Gate and have deposited to Odin Fun to sell one we roll back. To protect the Cryptoburg community we have worked with the Cryptoburg team, and with their direction, have decided to fork the Cryptoburg token and airdrop the new token to all holders (except for the ones who purchased low market cap tokens after the hack). They have already announced this to their community and we will help them with the airdrop. Because of this, the Cryptoburg token will continue to be locked after we open for trading until we finish the airdrop.

Odin Fun BTC
We are actively pursuing the hacker from all legal angles, but as of right now we have not recovered the funds. This means there isn’t enough BTC in the platform to cover all user deposits. We’ve discussed this at great length with our Chinese community supporters, and with their support and direction, we have decided on the following plan:

1. Open the platform now, and in the meantime, continue to attempt to recover user funds

2. Increase fees (0.5% to 1%) and use all platform profit to restore missing funds in the platform

3. We don’t take this decision lightly. But based on the overwhelming support we’ve seen from our Chinese communities, we believe the platform can open in its current state and continue to thrive.

Post Mortem
The vulnerability occurred in the SIWB smart contract on ICP. This was a smart contract that was widely used across the ecosystem by 10+ teams, so this vulnerability didn’t just affect Odin Fun (there were multiple platforms that lost user funds). This smart contract had also been reviewed by multiple teams, so it wasn’t an obvious issue either. We identified the vulnerability and fixed it. We also thoroughly audited the SIWB smart contract (as well as our other smart contracts to be extra sure) and we are ready to go live again.

Moving Forward
Thank you to our incredible community. We wouldn’t be here without you. We appreciate your support and we are excited to continue to work together to grow Odin Fun.

- Bob

[Bob Bodily, PhD @BobBodily]

Great news everyone! Odin Fun trading will go live again in 24 hours!

All user balances returned
We are rolling back all transactions to just prior to the hack. This means all user balances will be returned to exactly what they were prior to the attack. This includes BTC and tokens. Known hacker addresses have been frozen.

Cryptoburg token
Trading, deposits, add/remove LP, transfers, and withdrawals will go live for all tokens except for Cryptoburg. Cryptoburg has a secondary marketplace (the Gate exchange) which makes their token a bit complicated to deal with. Some users bought for cheap on Odin Fun and sold on Gate. Some bought for cheap on Gate and have deposited to Odin Fun to sell one we roll back. To protect the Cryptoburg community we have worked with the Cryptoburg team, and with their direction, have decided to fork the Cryptoburg token and airdrop the new token to all holders (except for the ones who purchased low market cap tokens after the hack). They have already announced this to their community and we will help them with the airdrop. Because of this, the Cryptoburg token will continue to be locked after we open for trading until we finish the airdrop.

Odin Fun BTC
We are actively pursuing the hacker from all legal angles, but as of right now we have not recovered the funds. This means there isn’t enough BTC in the platform to cover all user deposits. We’ve discussed this at great length with our Chinese community supporters, and with their support and direction, we have decided on the following plan:

1. Open the platform now, and in the meantime, continue to attempt to recover user funds

2. Increase fees (0.5% to 1%) and use all platform profit to restore missing funds in the platform

3. We don’t take this decision lightly. But based on the overwhelming support we’ve seen from our Chinese communities, we believe the platform can open in its current state and continue to thrive.

Post Mortem
The vulnerability occurred in the SIWB smart contract on ICP. This was a smart contract that was widely used across the ecosystem by 10+ teams, so this vulnerability didn’t just affect Odin Fun (there were multiple platforms that lost user funds). This smart contract had also been reviewed by multiple teams, so it wasn’t an obvious issue either. We identified the vulnerability and fixed it. We also thoroughly audited the SIWB smart contract (as well as our other smart contracts to be extra sure) and we are ready to go live again.

Moving Forward
Thank you to our incredible community. We wouldn’t be here without you. We appreciate your support and we are excited to continue to work together to grow Odin Fun.

- Bob

[Monkey OdinFun @monkeyodinfun]

Bob is coming to you… you’re done, bro💀

[Monkey OdinFun @monkeyodinfun]

Looks like Odin just faced an exploit. tough moment for the team. Full support to Bob and the @Odin_GodOfRunes crew. Stay strong and come back stronger. builders always rebuild💪
#Odinfun

[Bob Bodily, PhD @BobBodily]

Odin Fun incident update #2:

We've now contained the issue and isolated what was affected. Most user funds are safe, but an attacker was able to withdraw some funds from the platform.

We've kept the platform offline as a precaution while we finish fixes and double check everything.

We're already in contact with law enforcement and have shared the initial data we have. We're also coordinating with exchanges.

We've identified the attacker wallet and are tracking it in real time.

To the attacker:

We're open to a white-hat resolution. If funds are returned, we're willing to offer a meaningful bounty and close this without further action.

You can reach me directly on Telegram, Discord, or Twitter @BobBodily.

If funds start moving, we'll treat that as a refusal and proceed accordingly.

Our team is still working through this. We'll keep you all updated.

[Bob Bodily, PhD @BobBodily]

Odin Fun incident update:

5:35pm - A few users sold off the majority of their tokens on some of the largest tokens on Odin Fun. Most of the impact here was across less than 30 tokens. So not widespread. Not across all users. Not across the entire site. For the two most affected tokens, the main sell off occurred from a single user account (for the BURRITO token) and across 10 user accounts (for the CRYPTOBURG) token. The sell offs occurred within the same minute, so potentially coordinated or malicious.

6:00pm - Chinese users and community leaders start waking up and pinging us asking us what is going on.

6:05pm - In-depth investigation starts by Odin Fun team.

6:15pm - Users start reporting issues with their personal accounts. Mostly reporting weird things regarding their BTC balances and their tokens.

6:24pm - We found enough evidence to suggest something might be going on, so we locked down withdrawals. We continued investigating (triaging with our team).

7:06pm - We found additional evidence suggesting a potential exploit (maybe an external service was compromised, maybe an internal issue, maybe a user-specific issue). So we locked down trading / transferring / etc.

7:22pm - Bob starts writing public announcement on Twitter to keep everyone in the loop.

Our entire team is working on this to figure out what is going on. I will keep you updated on what we find.

Thank you for your patience!

[Monkey OdinFun @monkeyodinfun]

That is $MONKEY super candle🐒🚀

👉 https://t.co/RnkwGx7hjm

#ODINFUN $MONKEY