Audit log

Every state-changing event for ALEX Lab: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-28 04:23:28Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 422,646,733

   sig

   23SSWpWvmRWe…KCT6TCctcopyexplorer ↗

   hash

   sFCwp6QB1svC…PUApgFLbcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (6211 B) ▸

   {"actor":"system:backfill","investigation_id":"de5ce8c2-e704-4380-9344-7a58d9ebba45","kind":"publish","page_slug":"alex","published_at":"2026-05-28T04:23:28.566Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"ALEX Lab","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.businesswire.com/news/home/20220117005119/en/Full-Service-Bitcoin-DeFi-Platform-ALEX-Launches-Mainnet-on-Stacks","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/86082/stacks-based-crypto-project-alex-raises-5-8m-build-defi-bitcoin","type":"other","url":""},{"credibility":3,"name":"https://whitestarcapital.com/companies/alex/","type":"other","url":""},{"credibility":3,"name":"https://www.gate.io/learn/articles/what-you-should-know-about-alex-lab/3416","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/business/2024/05/15/bitcoin-defi-tool-alex-lab-loses-43m-in-hack-offers-10-bounty-for-stolen-funds","type":"other","url":""},{"credibility":3,"name":"https://www.certik.com/resources/blog/alex","type":"other","url":""},{"credibility":3,"name":"https://rekt.news/alexlab-rekt","type":"other","url":""},{"credibility":3,"name":"https://coinfomania.com/alex-labs-confirms-major-security-breach-suspends-platform-operations-and-launches-full-investigation-into-multi-asset-hack","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/alex-labs-freezes-3-9-million-exploited-funds-cexs-after-hack","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://cryptonews.com/news/alex-lab-links-4m-exploit-to-north-korea-backed-lazarus-group/","type":"other","url":""},{"credibility":3,"name":"https://cryptoslate.com/bitcoin-defi-app-alex-lab-links-4-million-exploit-to-lazarus-group/","type":"other","url":""},{"credibility":3,"name":"https://www.cryptotimes.io/2024/06/25/alex-lab-uncovers-lazarus-groups-role-in-4-million-exploit/","type":"other","url":""},{"credibility":3,"name":"https://invezz.com/news/2024/06/25/defi-protocol-alex-labs-suspects-lazarus-groups-involvement-in-4m-hack/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-alex-protocol-hack-june-2025","type":"other","url":""},{"credibility":3,"name":"https://www.cryptotimes.io/2025/06/07/alex-protocol-loses-8-37m-in-hack-due-to-security-flaw/","type":"other","url":""},{"credibility":3,"name":"https://negg.blog/en/alex-protocol-loses-83-million-in-defi-bitcoin-exploit-on-stacks/","type":"other","url":""},{"credibility":3,"name":"https://www.guardrail.ai/blog/alex-protocol-hack-june-2025","type":"other","url":""},{"credibility":3,"name":"https://unchainedcrypto.com/alex-lab-to-reimburse-users-after-8-3m-exploit/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.theblock.co/post/357368/stacks-based-alex-lab-to-reimburse-users-after-8-3-million-exploit-as-token-drops-45","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/alex-protocol-announces-reimbursement-plan-for-users-hit-by-8m-exploit/","type":"other","url":""},{"credibility":3,"name":"https://medium.com/alexgobtc/distribution-of-alex-protocol-revenue-and-recovered-stx-35c8e359b874","type":"other","url":""},{"credibility":3,"name":"https://unchainedcrypto.com/alex-lab-to-reimburse-users-after-8-3m-exploit/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://coinmarketcap.com/currencies/alex-lab/","type":"other","url":""},{"credibility":3,"name":"https://www.coingecko.com/en/coins/alex-lab","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.certik.com/resources/blog/alex","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-alex-protocol-hack-june-2025","type":"other","url":""},{"credibility":3,"name":"https://rekt.news/alexlab-rekt","type":"other","url":""}]}],"sources_used":[],"summary":"ALEX (Automated Liquidity Exchange) is a decentralized finance protocol built on the Stacks blockchain, designed to bring DeFi capabilities to Bitcoin. The protocol has suffered two major security exploits: a $4.3 million hack in May 2024 attributed to North Korea's Lazarus Group via a private key compromise of its XLink bridge, and an $8.3 million exploit in June 2025 caused by a smart contract access control vulnerability. In both cases, ALEX Lab Foundation pledged full user reimbursement, though partial recovery of 2024 stolen funds remained ongoing as of mid-2025, and the native ALEX token has declined approximately 99.9% from its all-time high.","timeline":[{"date":"2021-11-15","event":"ALEX raises $5.8 million in funding round led by White Star Capital","source":""},{"date":"2022-01-17","event":"ALEX launches mainnet on the Stacks blockchain","source":""},{"date":"2024-05-14","event":"XLink bridge private key compromised via alleged phishing attack; CertiK detects suspicious transaction","source":""},{"date":"2024-05-15","event":"ALEX Lab confirms $4.3 million exploit; offers 10% bounty for return of 90% of stolen funds; files Singapore Police report","source":""},{"date":"2024-05-18","event":"10% bounty deadline passes; ALEX Lab reports $3.9 million frozen at centralized exchanges","source":""},{"date":"2024-06-25","event":"ALEX Lab attributes May 2024 exploit to North Korea's Lazarus Group, citing ZachXBT's on-chain forensic investigation","source":""},{"date":"2025-06-06","event":"Second major exploit: $8.3 million drained via smart contract access control vulnerability in self-listing logic; ALEX token drops ~45%","source":""},{"date":"2025-06-17","event":"ALEX Lab Foundation announces completion of Treasury Grant Program; claims 100% USDC reimbursement to all affected users","source":""},{"date":"2025-07-01","event":"Farming resumed on ALEX protocol following security review","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 7094f6fe-71e4-4ba6-a540-8d57c7545e53copy
2. #2rescoreby systemsystem

   2026-10-10 18:47:41Z
   Score: 28 → 56 (+28)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 28 → 56. Problems weighed by who is responsible: incidents the subject suffered −9.6, concerns that are not fraud −3.2, problems around the subject, caused by others −2.4; legitimacy credit long-running +6.
   anchoranchored

   chain

   ●mainnet-betaslot 455,367,649

   sig

   5vhQ8cBmh1N9…4zJ43JpTcopyexplorer ↗

   hash

   pVvEQ2BU7wrg…gptiDDSZcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (635 B) ▸

   {"actor":"system","decided_at":"2026-10-10T18:47:41.553Z","decision":"rescore","investigation_id":"de5ce8c2-e704-4380-9344-7a58d9ebba45","new_score":56,"page_slug":"alex","prev_score":28,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 28 → 56. Problems weighed by who is responsible: incidents the subject suffered −9.6, concerns that are not fraud −3.2, problems around the subject, caused by others −2.4; legitimacy credit long-running +6.","score_delta":28,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 0fce7b42-8d04-4361-86e2-76bd33c50da6copy
3. #3reviewby reviewerreviewer

   2026-10-27 19:25:55Z
   Score: 56 → 56 (no score change)
   The claims I could check hold up: the $4.3M figure and bounty terms from CoinDesk, the $3.9M freeze from Cointelegraph, and the June 2025 root cause, $16.18M estimate and audit-scope gap from Halborn. The page hedges the Lazarus attribution appropriately and flags the source discrepancies it found. I could not verify the exchange list, the Lazarus attribution details or the TVL figures. Two timeline entries have no source. I found no disputed claims and no status change that the page omits.
   anchoranchored

   chain

   ●mainnet-betaslot 462,188,404

   sig

   CPm3dvr9V8e6…THWB5jyQcopyexplorer ↗

   hash

   8mGgpqFS3R4N…8eWSuCcFcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1337 B) ▸

   {"actor":"reviewer","artifact_identity":"5503684f7d6601eec0acf2619015192b","blocked_count":2,"decided_at":"2026-10-27T19:25:54.930Z","decision":"review","disputed_pct":0.2857,"findings_hash":"8zpYMTiio474oqJa94FX569QvFJ6QfUuD1q5VSoKxB2","investigation_id":"de5ce8c2-e704-4380-9344-7a58d9ebba45","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":56,"page_content_hash":"2bca6b6b7f5716668e4e124f7fb93610fc6eab2f7ec1e78cefe70489c07b641f","page_slug":"alex","prev_score":56,"reason":"The claims I could check hold up: the $4.3M figure and bounty terms from CoinDesk, the $3.9M freeze from Cointelegraph, and the June 2025 root cause, $16.18M estimate and audit-scope gap from Halborn. The page hedges the Lazarus attribution appropriately and flags the source discrepancies it found. I could not verify the exchange list, the Lazarus attribution details or the TVL figures. Two timeline entries have no source. I found no disputed claims and no status change that the page omits.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":7,"sequence_num":3,"subject_status":"operating","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 19742ece-f6f0-43f5-bdbf-016e1a94a9f4copy
4. #4review reviseby judgejudge

   2026-10-27 19:25:55Z
   Score: 56 → 56 (no score change)
   Of 9 claims checked, 2 could not be verified because the source blocked the reviewer (claim_findings[4], [8]) and were left out of the count. Of the remaining 7, none were disputed and 2 were unverifiable (claim_findings[3] exchange list, claim_findings[7] unsourced timeline entries), giving about 29%, the minor-issues band. The core figures ($4.3M, bounty terms, $3.9M freeze, June 2025 root cause) were confirmed by Tier 1 and Tier 2 sources, and no omission or status contradiction was found, so the penalty is kept at the light end given the reviewer's low confidence.
   anchoranchored

   chain

   ●mainnet-betaslot 462,188,410

   sig

   mMx8zy18vpXb…16fRZTq5copyexplorer ↗

   hash

   9HUp4vgqy8zn…KZkT1UMZcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1248 B) ▸

   {"actor":"judge","artifact_identity":"5503684f7d6601eec0acf2619015192b","band_override":null,"blocked_count":2,"decided_at":"2026-10-27T19:25:54.930Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.2857,"investigation_id":"de5ce8c2-e704-4380-9344-7a58d9ebba45","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":56,"page_slug":"alex","prev_score":56,"reason":"Of 9 claims checked, 2 could not be verified because the source blocked the reviewer (claim_findings[4], [8]) and were left out of the count. Of the remaining 7, none were disputed and 2 were unverifiable (claim_findings[3] exchange list, claim_findings[7] unsourced timeline entries), giving about 29%, the minor-issues band. The core figures ($4.3M, bounty terms, $3.9M freeze, June 2025 root cause) were confirmed by Tier 1 and Tier 2 sources, and no omission or status contradiction was found, so the penalty is kept at the light end given the reviewer's low confidence.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":7,"sequence_num":4,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 10ec37cb-b174-4720-991d-ac2aa38f1370copy