RIADeFi
Refusal file · other

Why Ketju rejected B² Buzz

Memo v1Published by Ketju Research

A registry memo, published verbatim and versioned. Superseded versions are recorded, never edited away. A rejection is a judgment for Ketju's client base and thesis, not a universal safety claim. Not investment, legal, tax, or compliance advice.

The memo

REJECTED ON THE CLEAREST GROUNDS OF ANY BITCOIN-BRIDGE ENTITY IN THIS BACKLOG: NO DISCLOSED CUSTODY, NO WORKING EXIT, AND A RECENT PARENT-ORGANIZATION EXPLOIT WITH AN INSIDER-ACCESS RED FLAG. B² Buzz is a staking and points event on B² Network (BSquared), the Bitcoin Layer 2 that UniRouter, already rejected in this registry, is built on top of. B²'s own bridge documentation names no custody architecture and states plainly that "the withdraw function is not yet available" — deposit-only, with no disclosed path back to native BTC at all. In July 2026, weeks before this review, B² Network was exploited for about $3.86M when an attacker used privileged upgrade authority over a token staking contract; the wallet that executed the drain had held that authority since 2025, with access revoked only after the theft, a pattern independent analysts read as a credible insider-access concern the team has not refuted.

What would reopen the file

  • A withdrawal or redemption function is implemented, documented, and demonstrated to work at proposed size
  • Custody architecture and named signing parties are publicly disclosed
  • An independent post-mortem of the July 2026 exploit is published, confirming whether the privileged access was insider-originated, with remediation verified
  • Twelve consecutive months with no further token-contract or bridge-contract privileged-access incident, counted from the July 2026 exploit

Facts on file

Verdict
Rejected
Exposure
other
Chains examined
Ethereum
Memo version
v1
Reviewed
Next review

← All published refusals