Tracing the gas trail back to the genesis block of SOLAI Limited's corporate charter, I found a line item that would make any DeFi auditor's stomach turn: 100 billion authorized shares against a mere 4.41 million outstanding. That's a 2268x multiplier. In the world of smart contracts, we call that an infinite mint vulnerability. Here, it's called "shareholder approval." But the difference is cosmetic. The economic impact is the same: the potential to dilute existing holders into irrelevance.
This is not a technical exploit. It's a governance exploit. And it's happening inside a company that brands itself as a "Solana treasury company." The irony is thick. Code is law until the reentrancy attack. But here, the corporate law is the code, and the reentrancy is the authorized share expansion.
Let me set the context. SOLAI Limited, formerly BIT Mining, was a bitcoin mining operation that pivoted to become a holder of Solana assets. The narrative is compelling: a public company that acts as a treasury for the Solana ecosystem. But the reality is far less elegant. On August 17, 2024, the company announced a capital restructuring approved by shareholders. The key points: a 700-for-1 reverse stock split, and an increase in authorized shares from 384 billion (pre-split) to 100 billion (post-split). The company also delisted from NYSE after its market cap fell below $15 million, and now trades on OTC Pink under ticker SLAIY.
Based on my experience auditing the 0x Protocol v2 smart contracts in 2018, I learned to read the raw data first. The raw data here is the share count. The pre-split authorized shares were 384 billion. After the 700:1 reverse split, that's equivalent to 548.6 million authorized shares. But the company didn't stop there. They increased the authorized count to 100 billion post-split. That's a 1823x increase over the effective pre-split authorization. And relative to the actual outstanding shares of 4.41 million, it's a 2268x buffer. This is not a routine adjustment. This is a structural change that enables near-unlimited dilution.
In my 2020 Uniswap V2 audit, I discovered a subtle arithmetic overflow in a custom fee distribution logic. The fix was straightforward. Here, the overflow is in the authorized share count relative to the economic value of the company. The fix is not straightforward because the shareholders approved it. But did they understand the implications? The process was complex: first increase authorized to 70 trillion, then reverse split, then set to 100 billion. This arithmetic shell game obscures the true magnitude. Ordinary shareholders, especially those who bought on OTC, likely didn't grasp that their voting rights and economic stake could be diluted to near zero.
Let me break down the core technical analysis. The capital structure of a company is analogous to a token contract. The outstanding shares are the circulating supply. The authorized shares are the maximum supply. The treasury shares are the company's own holdings. Here, the authorized-to-outstanding ratio is 2268x. In the crypto world, a token with a 2268x max supply vs circulating supply would be considered a scam. Why should this be different? Because it's a public company? Because the SEC regulates it? The SEC's oversight is limited, especially after the company moved to OTC Pink, which has minimal disclosure requirements.
The company's disclosure is abysmal. The 8-K filing does not specify the purpose of the authorized shares. It does not explain how the ADS ratio will work after the reverse split. It does not disclose the company's Solana holdings. This is like a smart contract with no comments, no documentation, and a hidden mint function. The only difference is that the smart contract is transparent on-chain; the corporate charter is opaque in Delaware.
I recall my analysis of EigenLayer's restaking architecture in 2024. I modeled economic security thresholds and found that the slashing conditions were too loose. Here, the slashing condition for shareholders is the dilution itself. The bond — the shareholder's equity — is at risk of being slashed by new issuances. And there is no mathematical guarantee against it. The only protection is the fiduciary duty of the board, which is weak in practice.
Let's run the numbers on the potential impact. Suppose SOLAI holds $10 million in SOL as its treasury. With 4.41 million shares outstanding, the per-share SOL backing is approximately $2.27. If the company issues the full 100 billion authorized shares, the backing per share collapses to $0.0001. That's a 99.996% dilution. The "Solana treasury" narrative becomes a hollow shell when the per-share value is ground to dust.
The ADS ratio issue adds another layer of confusion. The company did not disclose the new ADS ratio after the reverse split. For holders of American Depositary Shares, this means they cannot determine how many ordinary shares each ADS represents. This is a critical operational risk. In my 0x Protocol audit, a missing bit in the signature verification led to edge cases. Here, a missing number in the ADS ratio leads to investor uncertainty. Smart contracts don't leave out critical parameters. Why should a public company?
Now, the contrarian angle. Some might argue that the authorized share expansion is necessary for future acquisitions or to raise capital for Solana treasury operations. They might say that the reverse split is a standard move to regain compliance. But the facts contradict this. The company did not appeal the NYSE delisting, indicating a lack of confidence in meeting listing standards. The authorized share expansion is not for a specific purpose; it's a blank check. And the company's history of issuing 1.16 billion shares as acquisition consideration in June 2024 suggests a pattern of using equity as currency.
The real blind spot is the information asymmetry. The company's management and insiders know the plan. The market does not. In the OTC Pink market, there is no requirement for timely disclosure. This creates a perfect environment for insider trading and value extraction. The "Solana treasury" narrative is a marketing tool to attract naive investors who see Solana's price appreciation and want a leveraged play. But the leverage is not on Solana's price; it's on the dilution risk.
Entropy increases, but the invariant holds. The invariant here is that the total value of the company should equal the sum of its assets minus liabilities. But if the company issues new shares, the value per share decreases. The authorized share buffer is a direct threat to that invariant. Smart contracts don't lie about their total supply. But corporate charters can be amended.
Takeaway: The single most important signal to watch is the first issuance of new shares. If the company issues a large block of shares to a private investor or a related party, the dilution game begins. The authorized share pool is the ammunition. The trigger is the board's decision. For current shareholders, the only rational response is to demand a full disclosure of the company's intentions and a commitment to limit dilution. In the absence of that, the risk of a governance reentrancy attack is high.
I've seen this before in the mid-2020s boom-and-bust cycles. Companies with weak fundamentals use complex capital structures to buy time. But time is a luxury when the market is sideways. The current market is chop, and positioning is everything. For SOLAI, the position is precarious. The code is law, but the law is weak. Verify everything twice.