Skip to main content
AVOID.NET
← AnubisDAO3 decisions on this page

Audit log

Every state-changing event for AnubisDAO: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

  1. #1publishby system:backfill
    2026-05-21 03:21:11Z
    Score: ? → ? (no score change)
    anchoranchored
    chain
    ●mainnet-betaslot 421,119,833
    sig
    3EYMxRjLJQzC…RoW31A5Pexplorer ↗
    hash
    EYwqn8zBjZmQ…CXnzefWXsha256 → base58
    verifying row…full verify ↗
    canonical bytes (8605 B) ▸
    {"actor":"system:backfill","investigation_id":"14f590e2-8d66-4af0-a96f-2f8b300fef26","kind":"publish","page_slug":"anubisdao","published_at":"2026-05-21T03:21:11.057Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"AnubisDAO","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://decrypt.co/84924/anubisdao-investors-lose-60-million-in-alleged-rug-pull","type":"other","url":""},{"credibility":3,"name":"https://protos.com/crypto-investors-anubisdao-lose-60-million-rug-pull-phishing-attack/","type":"other","url":""},{"credibility":3,"name":"https://medium.com/@fjordfoundry/a-statement-from-the-copper-team-regarding-the-anubisdao-token-launch-on-copper-f78be774d9ec","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/@fjordfoundry/a-statement-from-the-copper-team-regarding-the-anubisdao-token-launch-on-copper-f78be774d9ec","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/84924/anubisdao-investors-lose-60-million-in-alleged-rug-pull","type":"other","url":""},{"credibility":3,"name":"https://protos.com/crypto-investors-anubisdao-lose-60-million-rug-pull-phishing-attack/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://protos.com/crypto-investors-anubisdao-lose-60-million-rug-pull-phishing-attack/","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/84924/anubisdao-investors-lose-60-million-in-alleged-rug-pull","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/investors-rug-pulled-after-pouring-57m-into-dog-themed-olympusdao-fork","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://protos.com/crypto-investors-anubisdao-lose-60-million-rug-pull-phishing-attack/","type":"other","url":""},{"credibility":3,"name":"https://medium.com/@fjordfoundry/a-statement-from-the-copper-team-regarding-the-anubisdao-token-launch-on-copper-f78be774d9ec","type":"other","url":""},{"credibility":3,"name":"https://www.cryptopolitan.com/anubisdao-rug-pulls-investors/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://threadreaderapp.com/thread/1682047031420829696.html","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/possible-identities-of-anubisdao-rug-pull-suspects-revealed/","type":"other","url":""},{"credibility":3,"name":"https://cryptonews.net/news/security/21342116/","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/anubis-dao-rug-pull-money-washes-away-on-tornado-cash","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://cointelegraph.com/news/opensea-kevin-pawlak-sisyphus-accused-rug-pull","type":"other","url":""},{"credibility":3,"name":"https://protos.com/from-60m-failure-to-crypto-scam-cop-the-reinvention-of-0xsisyphus/","type":"other","url":""},{"credibility":3,"name":"https://nftnewstoday.com/2023/10/10/former-opensea-executive-accused-of-links-to-anubisdao-rug-pull/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://cryptoslate.com/police-forces-jump-into-anubisdao-saga-after-60-million-rug/","type":"other","url":""},{"credibility":3,"name":"https://www.cryptotimes.io/2021/11/02/police-force-investigating-anubisdaos-rug-pull-incident/","type":"other","url":""},{"credibility":3,"name":"https://protos.com/crypto-investors-anubisdao-lose-60-million-rug-pull-phishing-attack/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.theblock.co/post/154004/anubisdao-funds-move-for-the-first-time-eight-months-after-rug-pull","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/anubis-dao-rug-pull-money-washes-away-on-tornado-cash","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/anubisdao-funds-move-rug-pull-1018-eth-tornado-cash/","type":"other","url":""},{"credibility":3,"name":"https://www.fxstreet.com/cryptocurrencies/news/crypto-markets-bleed-as-anubisdaos-55-million-worth-of-stolen-ethereum-eth-on-the-move-202304082253","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://protos.com/from-60m-failure-to-crypto-scam-cop-the-reinvention-of-0xsisyphus/","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/opensea-kevin-pawlak-sisyphus-accused-rug-pull","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://decrypt.co/84924/anubisdao-investors-lose-60-million-in-alleged-rug-pull","type":"other","url":""},{"credibility":3,"name":"https://protos.com/crypto-investors-anubisdao-lose-60-million-rug-pull-phishing-attack/","type":"other","url":""},{"credibility":3,"name":"https://blinagency.medium.com/anubis-dao-rug-pull-report-fd92f8b211ee","type":"other","url":""}]}],"sources_used":[],"summary":"AnubisDAO was an OlympusDAO fork that launched on October 28, 2021, and raised approximately 13,556 WETH (roughly $60 million) in under 20 hours through a Copper Liquidity Bootstrapping Pool. Before the sale concluded, the entire pool was drained to an external wallet, wiping investors to zero; on-chain investigator ZachXBT later identified two pseudonymous actors — Beerus and Ersan — as the likely perpetrators, and traced the stolen funds through Tornado Cash in 2023. No criminal charges have been publicly confirmed, no investor recovery has occurred, and the ANKH token is worthless.","timeline":[{"date":"2021-03-18","event":"Beerus posts the receiving wallet address (0x9fc53c75046900d1f58209f50f534852ae9f912a) on Twitter — months before AnubisDAO's launch — later cited as evidence of premeditation.","source":""},{"date":"2021-10-28","event":"AnubisDAO launches a 24-hour Liquidity Bootstrapping Pool on Copper, raising 13,556 WETH (~$60M) from retail investors with no website, white paper, or audited contracts.","source":""},{"date":"2021-10-29","event":"Approximately four hours before the LBP close, all 13,556 WETH is drained from the pool and transferred to the pre-registered external wallet, rendering ANKH tokens worthless.","source":""},{"date":"2021-10-29","event":"0xSisyphus publicly accuses Beerus of being a rogue team member; Beerus claims the wallet was compromised via a phishing email. Copper confirms its platform was not exploited.","source":""},{"date":"2021-10-30","event":"0xSisyphus announces a 1,000 ETH reward for information leading to fund recovery and states that multiple U.S. law enforcement agencies have been notified.","source":""},{"date":"2021-10-31","event":"Beerus files a police report with Hong Kong authorities and surrenders a personal computer as evidence.","source":""},{"date":"2021-11-02","event":"The Crypto Times reports that law enforcement in multiple jurisdictions, including the U.S. and Hong Kong, has begun preliminary investigation into the incident.","source":""},{"date":"2022-06-01","event":"AnubisDAO stolen funds move for the first time — approximately eight months after the rug pull — with 1,018 ETH sent via Tornado Cash mixer.","source":""},{"date":"2023-04-01","event":"Continued Tornado Cash laundering activity: batches worth approximately $5.5M and $5.9M are moved and bridged to Polygon.","source":""},{"date":"2023-07-15","event":"Large-scale Tornado Cash laundering resumes; the 13,556 ETH (then worth ~$26M) is moved in 100 ETH increments, making AnubisDAO's exploiter the largest ETH depositor to Tornado Cash in 2023.","source":""},{"date":"2023-07-20","event":"ZachXBT publishes on-chain analysis thread identifying Beerus (bsl.eth) and Ersan (0x51da686c7a2f973ad11fafed6ce9a3ffc020349f) as the most likely fund recipients, and linking Ersan to CSGORoll scam operations.","source":""},{"date":"2023-10-06","event":"Pseudonymous investigator NFT Ethics alleges that 0xSisyphus is Kevin Pawlak, former Head of Ventures at OpenSea, claiming premeditation and PEPE laundering. OpenSea denies knowledge of any involvement.","source":""},{"date":"2023-10-10","event":"ZachXBT disputes the NFT Ethics thread as lacking on-chain evidence, reiterating that Beerus and Ersan are the primary suspects; OpenSea issues formal denial of any Pawlak connection to the incident.","source":""}]},"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision 229e6b5f-38a1-4985-adcc-218c808b259b
  2. #2reviewby reviewerreviewer
    2026-10-27 06:44:49Z
    Score: 2 → 2 (no score change)
    The core narrative (about $60M raised, pool drained about 20 hours in, competing phishing and rogue-developer accounts, ZachXBT's attribution to Beerus and Ersan, no charges) is supported by the sources checked. The main error is a conflation of the June 2022 1,018 ETH laundering with the July 15-16, 2023 100 ETH batches, which creates a false 'reports differ' discrepancy and a misdated timeline entry. The Tornado Cash sanctions framing is stale after the March 2025 delisting. Several claims, including the 9,500 ETH and 'largest depositor' figures and Sisyphus quotes, were not verified against the cited sources.
    anchoranchored
    chain
    ●mainnet-betaslot 461,973,748
    sig
    2egVwpbwpM9Z…RR4UCFbJexplorer ↗
    hash
    FuP2X59t1eES…yDwja3Pvsha256 → base58
    verifying row…full verify ↗
    canonical bytes (1463 B) ▸
    {"actor":"reviewer","artifact_identity":"c52e06e164c4868fa3e49e417e891717","decided_at":"2026-10-27T06:44:49.343Z","decision":"review","disputed_pct":0.4,"findings_hash":"ANYqHthxxK1h2dvPAPyCqqrFSmdkk4MjAkMfbHsLi5fH","investigation_id":"14f590e2-8d66-4af0-a96f-2f8b300fef26","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":2,"omissions":{"material":0,"total":1},"page_content_hash":"b305fd79a5550e25e5bc9f6b39797d429ede304510975039449eec75678d6e99","page_slug":"anubisdao","prev_score":2,"reason":"The core narrative (about $60M raised, pool drained about 20 hours in, competing phishing and rogue-developer accounts, ZachXBT's attribution to Beerus and Ersan, no charges) is supported by the sources checked. The main error is a conflation of the June 2022 1,018 ETH laundering with the July 15-16, 2023 100 ETH batches, which creates a false 'reports differ' discrepancy and a misdated timeline entry. The Tornado Cash sanctions framing is stale after the March 2025 delisting. Several claims, including the 9,500 ETH and 'largest depositor' figures and Sisyphus quotes, were not verified against the cited sources.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"sequence_num":2,"subject_status":"shut_down","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision 2db860fe-7397-497e-85e1-12a7707b3861
  3. #3review reviseby judgejudge
    2026-10-27 06:44:49Z
    Score: 2 → 0 (-15)
    Of 10 claims checked, 3 were disputed and 1 could not be verified, giving a disputed share of 40%, which falls in the significant-issues band. The three disputed findings (claim_findings[0], [1], [2]) are one error: the page merges the June 2022 laundering of 1,018 ETH with the separate July 15-16, 2023 batches of 100 ETH, creating a false 'reports differ' discrepancy and a misdated timeline entry. The Tornado Cash sanctions framing is out of date because Treasury lifted them in March 2025 (claim_findings[3]), though the review rates that omission as minor. The core account (about $60M raised, pool drained, competing narratives, ZachXBT's attribution, no charges) was supported, so the penalty sits at the low end of the band.
    anchoranchored
    chain
    ●mainnet-betaslot 461,973,756
    sig
    2YdkunhjUhJm…ov9d8hDRexplorer ↗
    hash
    G5JMLQfJDMaQ…e7Zxheq2sha256 → base58
    verifying row…full verify ↗
    canonical bytes (1374 B) ▸
    {"actor":"judge","artifact_identity":"c52e06e164c4868fa3e49e417e891717","band_override":null,"decided_at":"2026-10-27T06:44:49.343Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.4,"investigation_id":"14f590e2-8d66-4af0-a96f-2f8b300fef26","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":0,"page_slug":"anubisdao","prev_score":2,"reason":"Of 10 claims checked, 3 were disputed and 1 could not be verified, giving a disputed share of 40%, which falls in the significant-issues band. The three disputed findings (claim_findings[0], [1], [2]) are one error: the page merges the June 2022 laundering of 1,018 ETH with the separate July 15-16, 2023 batches of 100 ETH, creating a false 'reports differ' discrepancy and a misdated timeline entry. The Tornado Cash sanctions framing is out of date because Treasury lifted them in March 2025 (claim_findings[3]), though the review rates that omission as minor. The core account (about $60M raised, pool drained, competing narratives, ZachXBT's attribution, no charges) was supported, so the penalty sits at the low end of the band.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":-15,"sequence_num":3,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision b9ab8ce6-6e56-4cff-8ec4-c1cfdfa77a01
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine — python -m src.verify_decision <event_id>.