Audit log

Every state-changing event for Alpha Finance Lab: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-22 04:05:31Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 421,342,900

   sig

   3P5vQwkm3aFp…Gxgw6YuScopyexplorer ↗

   hash

   HwtZvgXT6jnF…WhDLEkgccopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (7264 B) ▸

   {"actor":"system:backfill","investigation_id":"876abe1a-d84c-4e4d-a26d-a8f1b014cb63","kind":"publish","page_slug":"alpha-finance","published_at":"2026-05-22T04:05:31.546Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Alpha Finance Lab","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/markets/2021/02/13/defi-protocols-cream-finance-alpha-exploited-in-flash-loan-attack-375m-lost","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-alpha-homora-defi-hack-feb-2021","type":"other","url":""},{"credibility":3,"name":"https://rekt.news/alpha-finance-rekt","type":"other","url":""},{"credibility":3,"name":"https://blog.alphaventuredao.io/alpha-homora-v2-post-mortem/","type":"other","url":""},{"credibility":3,"name":"https://medium.com/cream-finance/alpha-homora-v2-exploit-post-mortem-344d277bdea6","type":"other","url":""},{"credibility":3,"name":"https://slowmist.medium.com/slowmist-an-analysis-of-the-attack-on-alpha-finance-cream-exploit-723c536c36b8","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/alpha-homora-loses-37-million-following-iron-bank-exploit","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://rekt.news/alpha-finance-rekt","type":"other","url":""},{"credibility":3,"name":"https://nodesblock.com/news/review-of-the-37-5-million-theft-of-alpha-finance-hackers-have-inside-information/","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/markets/2021/02/13/defi-protocols-cream-finance-alpha-exploited-in-flash-loan-attack-375m-lost","type":"other","url":""},{"credibility":3,"name":"https://blog.alphaventuredao.io/alpha-homora-v2-post-mortem/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://rekt.news/iron-alpha","type":"other","url":""},{"credibility":3,"name":"https://medium.com/cream-finance/joint-announcement-on-funds-repayment-a7d63870f7d6","type":"other","url":""},{"credibility":3,"name":"https://blog.alphaventuredao.io/joint-announcement-on-funds-repayment/","type":"other","url":""},{"credibility":3,"name":"https://www.theblock.co/post/216536/iron-bank-freezes-alpha-homora-lending-accounts-over-bad-debt-dispute","type":"other","url":""},{"credibility":3,"name":"https://www.theblock.co/post/216832/iron-bank-tells-alpha-homora-to-take-ownership-of-its-bad-debt","type":"other","url":""},{"credibility":3,"name":"https://www.dlnews.com/articles/defi/defi-partners-clash-over-32m-bad-debt-iron-bank-alpha-homora/","type":"other","url":""},{"credibility":3,"name":"https://blog.alphaventuredao.io/an-open-letter-to-iron-bank/","type":"other","url":""},{"credibility":3,"name":"https://thedefiant.io/news/defi/alpha-homora-cedes-32m-user-funds-iron-bank","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.openzeppelin.com/news/alpha-homora-v2","type":"other","url":""},{"credibility":3,"name":"https://blog.alphaventuredao.io/alpha-homora-v2-has-been-audited-by-openzeppelin/","type":"other","url":""},{"credibility":3,"name":"https://blog.alphaventuredao.io/alpha-finance-lab-bug-bounty-live-on-immunefi-with-additional-bounty-from-armor/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://invezz.com/news/2022/03/31/alpha-finance-lab-rebrands-to-alpha-venture-dao-to-support-decentralised-web3-innovation/","type":"other","url":""},{"credibility":3,"name":"https://blog.alphaventuredao.io/alpha-finance-lab-rebrands-expands-into-alpha-venture-dao-to-disrupt-web3-ecosystem/","type":"other","url":""},{"credibility":3,"name":"https://www.kucoin.com/news/en-kucoin-supports-the-alpha-finance-lab-alpha-rebranding-20230608","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/currencies/alpha-finance-lab/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.binance.com/en/blog/all/Binance-Launchpad-Alpha-Finance-Lab-Sale-Results-421499824684901080","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/currencies/alpha-finance-lab/","type":"other","url":""},{"credibility":3,"name":"https://walletinvestor.com/forecast/alpha-finance-lab-prediction","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[]}],"sources_used":[],"summary":"Alpha Finance Lab (later rebranded to Alpha Venture DAO, then Stella) is a DeFi protocol best known for its leveraged yield farming product Alpha Homora. On February 13, 2021, Alpha Homora V2 was exploited for approximately $37.5 million via a sophisticated attack that required insider knowledge of an unannounced smart contract, draining funds from its Iron Bank (Cream Finance) integration. By March 2023, the protocol had repaid less than 2% of the resulting $32 million debt to Iron Bank despite a formal repayment agreement, triggering a second crisis in which user funds were frozen.","timeline":[{"date":"2020-10-08","event":"ALPHA token launches on Binance Launchpad at $0.02, raising $2M USD from 8,736 winners.","source":""},{"date":"2021-01-01","event":"Iron Bank (protocol-to-protocol lending) is established as a spin-off of Cream Finance, enabling undercollateralized borrowing for whitelisted protocols including Alpha Homora.","source":""},{"date":"2021-02-13","event":"Alpha Homora V2 is exploited for approximately $37.5 million via nine transactions chaining four smart contract vulnerabilities, including an unannounced sUSD pool. Funds drained from Cream Finance's Iron Bank.","source":""},{"date":"2021-02-13","event":"Alpha Finance states they have 'a prime suspect' and 'already' know the likely identity of the attacker. No name is ever publicly disclosed.","source":""},{"date":"2021-02-14","event":"Joint repayment agreement announced: Alpha Homora commits to 20% of protocol fee reserves monthly toward Iron Bank debt; 50M ALPHA tokens locked as 2x collateral in time-locked escrow.","source":""},{"date":"2021-04-09","event":"OpenZeppelin completes post-remediation audit of Alpha Homora V2, finding zero critical and one high-severity issue.","source":""},{"date":"2022-03-31","event":"Alpha Finance Lab rebrands to Alpha Venture DAO, repositioning as a Web3 builder and decentralized venture DAO.","source":""},{"date":"2023-03-01","event":"Iron Bank freezes Alpha Homora user lending accounts after Alpha has repaid only ~$481K of $32.4M debt over two years. ALPHA token collateral worth approximately $6M against $32M debt.","source":""},{"date":"2023-03-02","event":"Outstanding Alpha Homora debt to Iron Bank confirmed at $31,947,429.","source":""},{"date":"2023-03-05","event":"Iron Bank deadline passes without resolution. Alpha Homora proposes Iron Bank retain ~$32M in user funds and return ~$8.7M excess.","source":""},{"date":"2023-06-01","event":"Alpha Venture DAO depositors vote to stop negotiating with Iron Bank and pursue legal action. Project rebrands again to Stella, launching on Arbitrum.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 356c8865-bf29-4f37-b644-7defcd4e045fcopy
2. #2rescoreby systemsystem

   2026-10-10 18:41:34Z
   Score: 18 → 39 (+21)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 18 → 39. Problems weighed by who is responsible: the subject's own conduct −16, incidents the subject suffered −6.4, concerns that are not fraud −6.4, problems around the subject, caused by others −0.8; legitimacy credit long-running +4.
   anchoranchored

   chain

   ●mainnet-betaslot 455,360,674

   sig

   3ijwErX9mYJL…15hNPoDMcopyexplorer ↗

   hash

   8k7dUosbetRL…gpYYumsJcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (675 B) ▸

   {"actor":"system","decided_at":"2026-10-10T18:41:34.843Z","decision":"rescore","investigation_id":"876abe1a-d84c-4e4d-a26d-a8f1b014cb63","new_score":39,"page_slug":"alpha-finance","prev_score":18,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 18 → 39. Problems weighed by who is responsible: the subject's own conduct −16, incidents the subject suffered −6.4, concerns that are not fraud −6.4, problems around the subject, caused by others −0.8; legitimacy credit long-running +4.","score_delta":21,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision c18ebbe0-1d96-4427-be21-ebdb229a4bb4copy
3. #3rescoreby systemsystem

   2026-11-02 04:44:08Z
   Score: 39 → 59 (+20)
   Re-read and rescored after the page was re-researched (2026-11-02). Rescored under Scoring v2, the published formula (avoid.net/scoring): 39 → 59. Problems weighed by who is responsible: incidents the subject suffered −10, concerns that are not fraud −6, problems around the subject, caused by others −4.4; legitimacy credit long-running +4.
   anchoranchored

   chain

   ●mainnet-betaslot 464,365,393

   sig

   2VdHjdzVDgKA…SspS975Tcopyexplorer ↗

   hash

   4tkfkqRUXuoH…kbudFrDHcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (709 B) ▸

   {"actor":"system","decided_at":"2026-11-02T04:44:07.818Z","decision":"rescore","investigation_id":"876abe1a-d84c-4e4d-a26d-a8f1b014cb63","new_score":59,"page_slug":"alpha-finance","prev_score":39,"reason":"Re-read and rescored after the page was re-researched (2026-11-02). Rescored under Scoring v2, the published formula (avoid.net/scoring): 39 → 59. Problems weighed by who is responsible: incidents the subject suffered −10, concerns that are not fraud −6, problems around the subject, caused by others −4.4; legitimacy credit long-running +4.","score_delta":20,"score_model":"v2","sequence_num":3,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision fd06bb57-9ca8-4bd2-99e8-f4b648517fb9copy
4. #4reviewby reviewerreviewer

   2026-11-02 04:45:51Z
   Score: 59 → 59 (no score change)
   The core narrative holds: the Feb 13, 2021 exploit date and $37.5M amount, the repayment terms and the May 2023 goodwill fund match primary or credible sources. The page labels the attacker's 1,000 ETH payments as a return of funds to the Alpha and Cream deployers, but Cointelegraph describes a tip to the Alpha and Iron Bank deployers. The claim that two audits were completed about a month before the exploit is not supported by what I read. The repayment figure could not be located. I found no shutdown, sanction or new exploit, but could not confirm the current rebrand or delisting status.
   anchoranchored

   chain

   ●mainnet-betaslot 464,365,841

   sig

   3CmbctdYy36V…ZNp5XuKGcopyexplorer ↗

   hash

   Bv3Ns7GU5KvR…T8DfqMvAcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1410 B) ▸

   {"actor":"reviewer","artifact_identity":"0c49cf63ac7f38357d2a7ff314e484ca","decided_at":"2026-11-02T04:45:51.158Z","decision":"review","disputed_pct":0.2857,"findings_hash":"7ma6AVPCuEk5oYvUiiBYzis79z4US5Spsc3vxb7NUuHT","investigation_id":"876abe1a-d84c-4e4d-a26d-a8f1b014cb63","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":59,"page_content_hash":"aef418d7fd5aeb4691f7a62d4f8a0f4ec916d6d1a452f4e55af46da74446e4a0","page_slug":"alpha-finance","prev_score":59,"reason":"The core narrative holds: the Feb 13, 2021 exploit date and $37.5M amount, the repayment terms and the May 2023 goodwill fund match primary or credible sources. The page labels the attacker's 1,000 ETH payments as a return of funds to the Alpha and Cream deployers, but Cointelegraph describes a tip to the Alpha and Iron Bank deployers. The claim that two audits were completed about a month before the exploit is not supported by what I read. The repayment figure could not be located. I found no shutdown, sanction or new exploit, but could not confirm the current rebrand or delisting status.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"sequence_num":4,"subject_status":"unknown","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 93cc9a9a-6560-4f5f-a609-e8b613608e73copy
5. #5review reviseby judgejudge

   2026-11-02 04:45:51Z
   Score: 59 → 59 (no score change)
   Of 7 claims checked, 3 were confirmed, none were disputed outright, and 2 could not be verified against the sources read (claim_findings[2], claim_findings[6]), giving about 29% unverified. One further claim was only partially supported: claim_findings[1] describes the attacker's 1,000 ETH payments as a return of funds to Alpha and Cream, but Cointelegraph describes a tip to the Alpha and Iron Bank deployers. The core allegations (the Feb 2021 exploit date and amount, the repayment terms and the 2023 goodwill fund) were confirmed, and no omissions or contradicting shutdown or sanction were found. The reviewer's confidence was low (0.5) and several sources were not fetched, so the penalty is kept at the mild end of the minor band.
   anchoranchored

   chain

   ●mainnet-betaslot 464,365,847

   sig

   4efRLJ2ow53B…8Mg5DXSjcopyexplorer ↗

   hash

   FFZS44c9gcPk…YqCytF8wcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1386 B) ▸

   {"actor":"judge","artifact_identity":"0c49cf63ac7f38357d2a7ff314e484ca","band_override":null,"decided_at":"2026-11-02T04:45:51.158Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.2857,"investigation_id":"876abe1a-d84c-4e4d-a26d-a8f1b014cb63","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":59,"page_slug":"alpha-finance","prev_score":59,"reason":"Of 7 claims checked, 3 were confirmed, none were disputed outright, and 2 could not be verified against the sources read (claim_findings[2], claim_findings[6]), giving about 29% unverified. One further claim was only partially supported: claim_findings[1] describes the attacker's 1,000 ETH payments as a return of funds to Alpha and Cream, but Cointelegraph describes a tip to the Alpha and Iron Bank deployers. The core allegations (the Feb 2021 exploit date and amount, the repayment terms and the 2023 goodwill fund) were confirmed, and no omissions or contradicting shutdown or sanction were found. The reviewer's confidence was low (0.5) and several sources were not fetched, so the penalty is kept at the mild end of the minor band.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"sequence_num":5,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision a3ff47b6-7a97-40f5-949a-53ff40c9865fcopy