Opulous

After 8 years, we are winding down Opulous. This is an extremely hard tweet to write as I know how many people have spent not just money but time and energy on Opulous including of course the team, but more importantly the community members who we have worked so hard for. 1/ First, what actually happened. Opulous was not hacked. Our platform and staking contracts were never compromised. The failure happened entirely within Messina’s bridge infrastructure, a provider we trusted to manage cross-chain transfers, and who failed to carry out even a basic audit on their product. 2/ Their relay contract was exploited using forged bridge messages, releasing hundreds of millions of OPUL from escrow with nothing locked on the source chain. In simple terms: the attacker printed more than 2x the total token supply out of thin air and sold it. Messina have still not made a single public statement taking accountability for this. 3/ From the moment it happened, our thoughts were always with the community. We launched a full forensic investigation across every chain, traced every wallet, contacted every major exchange, engaged blockchain forensic firms, filed police reports and reached out to international police departments across multiple jurisdictions. We tried everything within our power. 4/ While other teams may have quickly sold their tokens, that was never our focus. The hack drained our current market making reserves as we tried to hold the price, and but we continued to support with personal funds because we knew what a collapsing token meant for the people holding it. I have personally helped to fund operations across 8 years, never took a salary, never sold a token. Every call we made under pressure was made with the community in mind. 5/ We looked at every possible path forward. A token migration was not viable. The inflated supply, more than 2x what should exist, is still circulating and cannot be frozen or recalled. Even if we launched a new token, no exchange would list it while the original continues to trade and the attacker still holds an inflated supply they can dump at any time. Without exchange support there is no liquidity, and without liquidity there is no market. On top of that, a relaunch announcement in crypto attracts bad actors looking to pump and dump. The community would simply be exposed to being hurt a second time. 6/ Every token I hold including my team allocation and the tokens I personally bought over the years and chose never to sell, even when I easily could have, will be sent to a permanently locked wallet. Not a single token from my side will ever reach the market. 7/ For OVAULT depositors: your funds are safe. USDC has already been airdropped directly to your wallets so check your wallet now, nothing more is needed. For MFT holders who purchased: we have liquidated the music catalog and proceeds are available as a USDC payout through the Rewards panel. For airdropped MFT holders: your MFTs remain onchain as collectibles but rewards distribution will stop. If you have unclaimed rewards, make sure you collect them before April 30. All claims must be made before April 30, 2026. After that date the platform goes offline. 8/ I can being to explain my frustrations for our community during this whole process. Crypto needs to change. Hacks have become a daily occurrence, but the market is so unregulated that governing authorities don’t even treat it as a crime. You can steal millions of dollars, more than double a project’s token supply, and face no meaningful consequence. We contacted the police and international police departments across multiple jurisdictions and there was zero interest in finding the criminals. This is not acceptable and it cannot keep being the norm. 9/ To everyone in the Opulous community, thank you. You were not just holders. You were part of everything we built. I wish more than anything that we could have carried on building and given this the outcome you put so much into. I am truly sorry we were robbed of that chance. Lee

After the recent exploit, we removed liquidity from the Messina bridge as a protective measure. This left some bridge transactions stuck and unable to complete. We've now sent all pending OPUL tokens back to the affected wallets on Arbitrum. If this affected you, check your wallet; your tokens are there. For any questions, reach out to us at support@opulous.org.

An update on the recent Messina Bridge hack. We have now received a report from Messina outlining the root cause of the exploit. Here is their summary: “The root cause of the Messina bridge exploit was a flaw in a feature called ‘Hop’, added to support the Plume chain before Wormhole officially supported it. This feature was not audited and contained critical missing checks. As a result, the system incorrectly treated internal routing actions as new transfers of funds even when no new tokens were deposited. This allowed an attacker to replay a single valid transaction multiple times, multiplying their tokens up to 143x. In simple terms: the bridge could not distinguish between a real transfer and an internal routing action, the same value could be reused multiple times, and important safety checks were missing.” We’ll be back next week with a full update on what comes next for Opulous.

Community Update – Bridge Incident We want to keep our everyone informed as this situation develops. Police reports have been filed. We are currently awaiting a final technical report from the Messina bridge team, which will inform our next steps. Once we have that report, we will share a full and transparent update with the community. We know you have questions so do we. We appreciate your patience and will communicate as soon as we are able to do so responsibly. The Opulous Team

Update on the Messina Bridge Incident We wanted to give you all an update on where things stand. The Messina bridge team is continuing to investigate the technical side of the exploit on their end while our team has been focused on tracking every wallet connected to the attacker. We are actively collaborating with MEXC, KuCoin, and OKX to identify and track wallets linked to the attacker. Some accounts have been flagged and we are working with authorities to obtain further evidence through the exchanges. Police reports have been filed and we are awaiting a response from authorities. We know this has been a frustrating and painful week. We are not stopping, and we are not going silent. We will keep pushing on every front and updating you as things develop. Thank you for sticking with us.

Update on the Messina Bridge Incident The last few days have been incredibly difficult for everyone. We want you to know we have been working around the clock since the moment this happened. Here is where we are: 1. We are working directly with multiple exchanges to identify and limit further damage. 2. The full attacker wallet network has been mapped across six chains and is being tracked in real time. 3. Police reports have been filed and we are coordinating with exchanges on law enforcement disclosure. 4. We are actively exploring all options to support the community and address the impact. 5. All Opulous platform contracts remain safe and unaffected. We'll continue updating as we can. Thank you for your patience.

Apologies for the delay in updating everyone. We filed police reports and did not want to alert the attackers while investigations were underway. To clarify: this was not an $OPUL hack. The breach occurred at Messina Bridge, which manages the token escrow. We are extremely disappointed that a service entrusted with securing these assets could experience this type of failure. Personally, I am devastated for our community. I have worked with this team since 2018 and have always done everything I can to support our holders. It is incredibly painful to see our community affected like this. We have identified the hacker's wallet addresses and are already in contact with exchanges and forensics firms regarding next steps. We are also actively exploring every possible option to support the community and will provide updates as we have more information.

We are aware of a security incident involving the pool bridge on messina. Our team is actively investigating and working to secure all affected infrastructure. We have identified the attacker's wallets and are coordinating with exchanges, forensics firms, and law enforcement. More details shortly.

The yield landscape in 2026: ⚫️ T-bills: 4-5% (TradFi) ⚫️ Crypto lending: 5-7%, backed by crypto borrowers ⚫️ Points farming: complicated, diluted, zero guarantees OVAULT: ⚫️ Stake USDC ⚫️ APY from real music catalog acquisitions + artist advances ⚫️ Pool grows with every payment. No restaking. No claiming Music generates $29.6B/year. It's grown every single year for a decade. Your yield source probably hasn't. opulous.org/ovault

@OndoFinance Incredible! Need to add some music catalogues next 🎵

Tokenized stocks are officially a $1B market. Ondo tokenized stocks represent 60% of it, with millions of trades executed onchain and tens of thousands of holders. Next stop: trillions.

OVAULT is opening music royalties to everyone. You don't need to be a fund or a label to own a piece of the revenue stream that just won't stop growing. → Fractional ownership of real music catalogs → Yield backed by actual streaming & sync income → Fully on-chain, fully transparent 🔗 opulous.org/ovault

RWA tokenization has brought Treasuries, real estate, and credit on-chain. Music royalties are the next frontier and the data backs it. The global music market is projected to hit $91 billion by 2034.

Music generated $29.6 billion in revenue last year. It's grown for 10 consecutive years straight. 752 million people pay for it monthly. And almost none of that income has ever been accessible to investors. That's changing. 🧵

We were tokenizing RWAs before it was cool Michael Jackson. Whitney Houston. Mariah Carey. Prince. Celine Dion. BTS. This is OVAULT. Music onchain earn up to 10% APY. 👇 opulous.org/ovault

Real music assets generating real yield, now on-chain. Stake Now: opulous.org/ovault

Here's how it works: Stake USDC → Your capital backs advances against music royalties → Catalogs repay with interest → Yield streams to your wallet No claiming, no restaking.

Music royalties are one of the most recession proof assets out there. OVAULT brings these catalogs on-chain and pays up to 10% APY from streaming revenue. But let's talk about where that yield actually comes from 🧵