CryptoReal
CASE FILE — Jan 2, 2025

How Alpha Finance's Rebrands Left $32M in Iron Bank Deposits Frozen

Roughly $32 million remains locked inside smart contracts as Alpha Finance cycles through corporate identities. A rename to Stella did nothing to erase the $32 million in disputed debt tied to the project, and a second rebrand — this time to LitLayer — has left depositors watching balances that are fully visible on-chain yet completely unreachable.

At the center of the standoff, Iron Bank continues to hold user deposits in exchange for repayment on a debt stemming from a 2021 hack — the origin point of a conflict that has now dragged on for years. Alpha Finance's team has reportedly blocked whistleblowers, stopped responding to creditors, and moved on to new ventures while the original protocol sits in disrepair.

01Origins: The 2021 Alpha Homora Hack

In February 2021, an anonymous attacker drained $37.5 million from Alpha Finance by targeting a pool contract that hadn't yet been publicly announced — a detail that strongly suggested the attacker had access to non-public information.

Andre Cronje subsequently brokered a resolution between the two sides. Under the resulting plan, Alpha Finance agreed to direct 20% of its protocol fees toward repayment and to post $109 million in ALPHA tokens as collateral. Notably, the on-chain agreement was never formally signed by either party — an oversight that later became significant. Iron Bank's side of the bargain proved to be a weak one too: it could not liquidate the pledged collateral without Alpha's consent.

From there, repayments trickled in at just $5,000 a month, even as the ALPHA token's price fell roughly 90%. Throughout this period, Alpha's team continued to have their personal token allocations vest on the original schedule, with no restrictions placed on selling despite the outstanding debt.

02The Break: 2023

By early 2023, Iron Bank asked for additional collateral. Alpha's response was two weeks of silence, a single request to delay discussion, and then the launch of its own competing lending market — effectively signaling it had no intention of settling on Iron Bank's terms.

Sums referenced in this case file

That move exhausted Iron Bank's patience. Without a governance vote or any community input, Iron Bank unilaterally modified its own smart contract code. Alpha Finance received just two days' notice — barely enough time to warn users before deposits were frozen outright.

The fallout extended well beyond the original debt dispute: ordinary user deposits, unrelated to Alpha's obligations, became collateral damage locked inside Iron Bank's vaults. What began as a partnership between two protocols turned into what amounts to a hostage situation for depositors caught in the middle.

03The Rebrands

Rather than negotiate directly with users or creditors, Alpha Finance chose a different path — reinvention. The team relaunched as Stella, promoting new yield farms while support requests from the old platform went unanswered. The rebrand lasted months under a new name and logo, with the same team but no added accountability, before that identity too began to fade.

Meanwhile, the original 2021 hacker resurfaced. In August 2024, on-chain activity showed the attacker moving again after a long dormancy, sending 500 ETH through Tornado Cash. The official response amounted to a single tweet from an account with roughly 11,000 followers that had otherwise gone quiet. By November 2024, the same hacker had moved another 250 ETH through Tornado Cash.

At the same time, the Stella brand announced plans to transition into LitLayer — yet another name change. Users trapped in the frozen deposits are left choosing between waiting indefinitely for an uncertain repayment or accepting a 10% haircut for early access to their funds.

04Where Things Stand

Iron Bank's own website is no longer functioning, and the protocol's total value locked has shrunk to $19 million, with no clear plan to unlock the user funds still caught in the dispute. Depositors are left holding ibTokens that function as claims on claims — layered IOUs with no clear path to redemption.

The broader pattern here is stark: smart contracts meant to guarantee trustless finance instead became a mechanism for trapping user funds indefinitely, while the founders involved moved on to new branding without facing formal consequences. Iron Bank altered its own code unilaterally; Alpha Finance walked away from its user base entirely — neither outcome reflects well on either party.

Notably, no regulatory body has intervened and no public investigation has followed. Observers have also noted that team members were seen socializing with industry figures at Token2049 even as the platforms tied to the frozen funds went dark. A rebrand, in this context, functions as a slower, more polished version of a rug pull — new logos and fresh announcements standing in for accountability, while the underlying obligations to users go unresolved. The affected community continues to watch and wait, with no clear enforcement mechanism in sight, as attention in the industry moves on to the next project.

Alpha FinanceIron BankRug
Investigation alerts

Get new scam files the moment we publish them — usually 2–3 emails a week.

Enter a valid email address.

No spam, unsubscribe anytime. We never sell your data. Crypto assets are volatile and high-risk; nothing here is financial advice.

You're on the list. Watch your inbox for the next scam file.