Neemo Finance 💿

Neemo Finance has been acquired by @zothdotio on agreed terms. Both teams were battle-tested—our comeback is security-first. Plugged into Zoth’s full-stack Stablecoin OS, our LST/LRT + Vault infra will power the next Atlas / ZeUSD. We’ll prove our resilience and keep shipping with the Zoth team.

Today, we’re proud to share: Zoth has acquired Neemo Finance. This marks a resilient comeback and ignites the next stage of growth - accelerating our path to a $1B market cap. Zoth is designed as the first full-stack Stablecoin OS, setting the foundation for the future of global finance. As part of our preparation for the TGE, this acquisition strengthens our infrastructure, expands our capabilities, and positions us to deliver even more value to our community.

To Neemo users: under the acquisition terms, a budget for further compensation has been allocated for the impacted users. We’ll publish a dedicated post once finalized. Thank you for standing with us!

Neemo Finance has been acquired by @zothdotio on agreed terms. Both teams were battle-tested—our comeback is security-first. Plugged into Zoth’s full-stack Stablecoin OS, our LST/LRT + Vault infra will power the next Atlas / ZeUSD. We’ll prove our resilience and keep shipping with the Zoth team.

Here is the audit report: beosin.com/audits/neemo-r…

We sincerely apologize for the long delay and thank you for your patience. The claim page for nsASTR / nrETH reimbursement is now live for everyone. Please claim from the following link: app.neemo.finance/withdraw/astar For DeFi users - Please withdraw your nsASTR / nrETH from DEX liquidity pools, lending and any Defi protocols. - Once in your wallet, you can proceed directly to the claim page and burn your tokens to receive ASTR or ETH immediately. Regarding UntitledBank - The UI of UntitledBank is currently closed. - You can still withdraw via Blockscout by interacting directly with the contract. 1. Go to the explorer and connect your wallet soneium.blockscout.com/address/0x2469… 2. For withdrawCollaterael, - enter ID 7 - set the asset to the amount of nsASTR you want to withdraw multiplied by 10^18 from the 10^18 button 3. Provide the address where you want to receive the nsASTR. ※ We are actively discussing mitigation measures for users who borrowed ASTR with the UntitledBank team. We know this process has taken longer than expected, and we are deeply sorry for the stress caused. Thank you again for standing with us through this difficult time. With your cooperation, the reimbursement process can now begin swiftly.

Snapshot model was rejected ‒ next up is the Asset-Linked Model referendum. On-chain vote: astar.subsquare.io/democracy/refe… Details: forum.astar.network/t/neemo-exploi… YES = • 204 M ASTR → nsASTR holders • 91.634 ETH → nrETH holders (via always-open burn-for-refund contracts)

As planned, we have initiated the On-chain Vote based on the results of the Off-chain Vote. Please visit Subsquare to review the proposal and cast your vote: astar.subsquare.io/democracy/refe… Details: forum.astar.network/t/neemo-exploi…

The community vote to select a compensation model is now open for the next 48 hours. Step 1 – Off-chain vote : narrows the four models to one Step 2 – On-chain vote: immediately afterward. Nothing is final until the on-chain vote passes. Please review the four options (Asset-Linked, Split, Unified Pool, Snapshot) and cast your vote here: astar.subsquare.io/posts/11 Forum Discussion: forum.astar.network/t/neemo-exploi…

Over the past week we gathered input from the Neemo and Astar communities, Main Council, Astar Collective, and DeFi protocols. Four compensation models are now on the ballot. Voting opens 25 Jul 07:00 UTC and closes 27 Jul 07:00 UTC (48 h). Options: Asset-linked, Split, Unified Pool (all burn models) and Snapshot. Ballot link will be posted at launch. Details: forum.astar.network/t/neemo-exploi…

We’ve finalized the reimbursement plan and submitted it to the Astar Forum. Your feedback is essential to help us move forward transparently and fairly. We’d truly appreciate your thoughts. forum.astar.network/t/neemo-exploi…

Our team are working on a proposed distribution plan and will share more information shortly.

We remain in a critical recovery phase following the Neemo exploit. However, 91.634 ETH (roughly 80 % of the funds linked to address 0xb750E3165de458EaE09904cC7Fad099632860B0f) has been voluntarily returned and is now secured in the Neemo Security Multisig. We acknowledge this good-faith gesture and note it publicly. The ETH transferred from 0x4ec65e4dbe6e53ee4938aef2b173b38763d3bc2b to Tornado Cash has not been returned. If the holder of this address is willing to cooperate, we extend the same white-hat offer:

To the individual responsible for the Neemo security incident: We recognize the skill required to identify this vulnerability. If 80 % of the funds are returned, we will award 20 % of the total amount and keep it as a white-hat bounty. • Please reply within 72 hours (no immediate repayment required). • Full anonymity and no legal action once cooperation is confirmed. ⚠️ NOTE: Our former key was compromised. Please return to the following addresses: Ethereum: 0x1671e4E1e610D4C5e693Fc83F567A9f802287212 Astar EVM: 0x50bc3992291c88477B10321C387000Cc47a87883 Contact: security@neemo.finance (Please prove ownership by signing a message from the exploit wallet.) The message is sent from the Neemo address. Block-signed at: 2025-07-13 UTC

Thank you for your support. This has been an incredibly difficult time, but thanks to your swift support, we were able to recover most of the staked ASTR. We’re deeply grateful — and we’re doing everything we can to move forward from here.

We are truly sorry for the incident caused by the security breach on our side. This referendum is a vital step toward safeguarding the remaining user funds and restoring trust in the system. We’re deeply grateful to the Astar team and community for acting swiftly and supporting the recovery efforts. To everyone affected - we are doing everything we can to make things right. Please support the referendum and help us move forward together.

[Security Notice] Revoke Approvals for nsASTR and nrETH Following the recent Neemo security incident, we recommend users revoke any existing token approvals for nsASTR and nrETH as a precautionary measure. - The Neemo frontend is no longer accessible now, and we will not reactivate the compromised contracts. - We have confirmed that DEX pairs and Lending that used nsASTR or nrETH have been drained or deactivated, meaning there are no accessible liquidity. Given that, while the current risk of further loss is quite low, we still recommend revoking approvals for the following reasons: - Another scam frontend interface may appear in the future, unintentionally exposing your approval. - You may interact with an old contract by mistake, or through another protocol that integrates it. - Revoking approvals is a general best practice to eliminate unnecessary exposure. You can check and revoke token approvals at: revoke.cash 1. Connect with Soneium 2. Select nsASTR, nrETH, and any positions where these tokens have been used. 3. Click revoke 4. If there are any unused or unfamiliar approvals even other than nsASTR/nrETH, we recommend revoking them as well We will relaunch new contracts, and users will be notified when those are ready.

dApp Staking operations on Astar is back online. ✅ Maintenance is complete and operations have resumed as normal. Thank you for your patience and continued support. 🌟

We have prepared a detailed post-mortem report outlining our actions and findings following the security breach impacting Neemo Finance. This report includes a breakdown of the incident, our immediate response, and our ongoing commitment to transparency, user protection, and the recovery of funds. We remain fully dedicated to restoring trust in Neemo and supporting every affected user. Details: @neemo_fi/neemo-post-mortem-report-76ff2bacb0b8" target="_blank" rel="nofollow noopener">medium.com/@neemo_fi/neem… We appreciate the support from our users and extend thanks to @AstarNetwork, Astar Main Council, @_SEAL_Org, @zeroshadow_io and @hackenclub.

🚨 Referendum Live – Help Resume dApp Staking 🚨 A fast-tracked governance proposal is now open for voting to:  – Disable maintenance mode and resume dApp Staking operations – Transfer unlocked Neemo dApp Staking funds to the on-chain Treasury wallet  – Update Neemo dApp ownership to the Treasury Vote here: astar.subsquare.io/democracy/refe… More context: forum.astar.network/t/dapp-staking… 🔐These are precautionary actions based on @neemofinance's request to help safeguard funds and restore staking operations. The Astar network and dApp Staking system remain fully secure. 👉 Vote now and check the forum post for full context

7/ We appreciate the support from the Astar team and leadership. More updates will follow regarding nsASTR, nrETH, and affected DeFi strategies. With sincere apologies, The Neemo Finance Team

6/ Execution plan: - Transfer Chunk 1 (26.7M ASTR) to treasury - Change dApp owner from compromised wallet - Submit second proposal for Chunk 2 (177.5M ASTR) - Verify and submit new secure wallet

1/ Official announcement from Neemo Finance. A critical security breach occurred. Several operational wallets, including contract ownership addresses, were compromised. We take full responsibility and are taking immediate actions.