Parallel Finance's Polkadot Parachain Falls to a Vigilante After Months of Hidden Manipulation

Parallel Finance launched with an enviable resume: a Stanford-dropout founder in Yubo Ruan, a headline investment from Sequoia Capital, and the kind of polished narrative that made it look like a sure thing. A well-tended Wikipedia entry and steady press coverage reinforced the image. Underneath that image, though, was a project whose assets were mismanaged, whose community was left without answers, and whose control over the chain was eventually taken away entirely — leaving millions of dollars in user funds unresolved as a governance dispute played out.

Background

Parallel secured one of the earlier parachain slots on Polkadot, pitched itself as an "omni-chain" project worth a billion dollars, and pointed to a long list of security audits — Trail of Bits, Halborn, and SlowMist among them — as proof of legitimacy, leaning on the auditors' reputations more than the substance of their findings. Coverage from outlets like Crypto News amplified talk of "revolutionary DeFi capabilities," and the marketing output regularly outpaced the actual product.

What Parallel actually shipped

Despite the "omni-chain" framing, Parallel's core offering amounted to liquid staking and crowdloans — standard DeFi fare dressed up as innovation. More concerning was how the team operated behind the scenes. They routed activity through batch calls, bundling multiple transactions into a single execution so that individual actions became difficult to trace — a structure that functioned less like sloppy documentation and more like deliberate obfuscation, keeping both users and outside auditors from seeing what was happening. Through this mechanism, the team is reported to have minted cDOT tokens without disclosure, burned user positions, and adjusted collateral ratios unilaterally — actions that diluted holders and pushed the protocol toward centralized control rather than the decentralized model it advertised.

The team's reach also extended past its own chain. It reportedly attempted to mint 140,000 xcGLMR on Moonbeam without backing, an action that put Moonbeam's cross-chain messaging (XCM) security at risk and forced an emergency response. Moonbeam's community pushed through Proposal 74 to secure 159,000 GLMR and shut down the relevant XCM channels to contain the fallout.

Decline and disappearance

From there, Parallel's chain was effectively abandoned. The team shifted its attention to an L2 product that drew little interest, while the $PARA token was pulled from exchanges and described only as "delisted for rebranding." A promised airdrop tied to a planned relaunch in March 2024 never materialized into the reset the team had advertised.

The takeover

In November 2024, a self-described white hat took control of Parallel's chain, pushing a runtime upgrade that installed a "sudo" pallet granting themselves administrative authority. At stake was roughly 200,000 DOT tied to the exposed treasury — 75,000 of which had already been bridged to Ethereum, with another 125,000 sitting in the unbonding queue. The Parallel team's response was to disable its own blockchain explorers rather than address the situation directly.

The community's countermeasure, Referendum 1322, asked for enough votes to represent roughly 100 million DOT — about seven percent of Polkadot's entire token supply — but carried little practical weight against what had already occurred. In surfacing the takeover, the attacker also brought renewed attention to the team's own prior conduct, including the attempted GLMR mint and the pattern of batch-call obfuscation, undercutting any claim that Parallel had been an innocent victim.

Aftermath

Parallel's parachain slot remains active on Polkadot, but now stands mostly as a case study in how credentials and funding do not guarantee execution. The governance dispute continues to play out even as DOT continues moving across chains under uncertain authority. The clearest account of what happened isn't found in the project's marketing or its founder's biography — it's in the on-chain transaction history that shows the mechanics of how the funds were actually handled.