{"investigation":{"slug":"allbridge-core","entity_name":"Allbridge Core","trust_score":42,"severity_base":null,"score_modifier":0,"confidence":0.82,"status":"published","content_type":"investigation","summary":"Allbridge Core is a cross-chain stablecoin bridge protocol operating across EVM-compatible chains, Solana, Tron, and Stellar. On April 1-2, 2023, the protocol suffered a flash loan price-manipulation exploit on BNB Chain that drained approximately $570,000 from its BUSD and USDT liquidity pools. The attacker was subsequently identified via on-chain analysis by BNB Chain and AvengerDAO, and ultimately returned roughly $465,000 of the stolen funds after Allbridge offered a white hat bounty with immunity from legal action.","sections":[{"content":"Allbridge Core is a cross-chain bridge focused on stablecoin transfers, enabling users to move dollar-pegged assets across a broad range of blockchains including Ethereum, BNB Chain, Avalanche, Polygon, Solana, Tron, and Stellar. Unlike traditional bridges that issue wrapped tokens, Allbridge Core uses a virtual stablecoin (vUSD) model, where independent liquidity pools on each supported chain are connected via messaging protocols such as Wormhole and Allbridge's proprietary relay layer. The protocol is designed as non-custodial, with smart contracts on each chain holding pool liquidity directly. Allbridge Core is a distinct product from Allbridge Classic (the older multi-asset bridge) and was developed and maintained by the same team. Prior to the April 2023 exploit, the protocol had received security audits from Kudelski Security (completed December 2022) and subsequently from Quarkslab on its Stellar implementation.","heading":"Protocol Overview","sources":[{"url":"https://docs-core.allbridge.io","name":"What is Allbridge Core? — Official Documentation","type":"official","credibility":1},{"url":"https://www.quicknode.com/builders-guide/tools/allbridge-core-by-allbridge-core-team","name":"Allbridge Core — QuickNode Builders Guide","type":"other","credibility":2},{"url":"https://research.kudelskisecurity.com/2023/01/12/mitigating-risk-in-the-allbridge-core/","name":"Mitigating Risk in the Allbridge Core — Kudelski Security Research (January 2023)","type":"research","credibility":2},{"url":"https://blog.quarkslab.com/allbridge-core-stellar.html","name":"Audit of Allbridge Core — Quarkslab Blog","type":"research","credibility":2}],"severity":"low"},{"content":"On the night of April 1-2, 2023, Allbridge Core's BNB Chain liquidity pools were drained in a flash loan price-manipulation attack. The exploit was first publicly flagged by blockchain security firm PeckShield, which alerted Allbridge via Twitter that its BNB Chain pool swap price was being manipulated. The attacker's wallet address 0x2b3cff12c02625518deb0af14684999fb6e3e360 (with a secondary address 0xC578d755Cd56255d3fF6E92E1B6371bA945e3984) executed the attack in a single transaction (hash: 0x7ff1364c3b3b296b411965339ed956da5d17058f3164425ce800d64f1aef8210). The attacker flash-borrowed $7.5 million BUSD from PancakeSwap, used $5 million to manipulate the BUSD pool balance and $2 million to manipulate the USDT pool, then exploited the imbalanced pool state to swap approximately $40,000 of BUSD for roughly $790,000 in BSC-USD and withdraw approximately 1,995,193 USDT from the USDT pool. After converting proceeds to BUSD and repaying the flash loan, the attacker net-profited approximately $570,000 — specifically 282,889 BUSD and 290,868 USDT. A secondary attack is also alleged to have occurred around the same timeframe, bringing total estimated losses to approximately $650,000 before the bridge was locked.","heading":"April 2023 Flash Loan Exploit","sources":[{"url":"https://medium.com/coinmonks/decoding-allbridge-570k-flash-loan-exploit-quillaudits-8da8dccd729d","name":"Decoding AllBridge $570K Flash Loan Exploit — QuillAudits via CoinMonks","type":"research","credibility":2},{"url":"https://medium.com/neptune-mutual/how-was-allbridge-exploited-956a05f3cb58","name":"How Was Allbridge Exploited? — Neptune Mutual","type":"research","credibility":2},{"url":"https://cointelegraph.com/news/allbridge-offers-bounty-to-exploiter-who-stole-570k-in-flashloan-attack","name":"Allbridge offers bounty to exploiter who stole $573K in flash loan attack — CoinTelegraph","type":"news_article","credibility":2},{"url":"https://bitcoinist.com/allbridge-hack-570000-lost/","name":"Allbridge Hack: Cross-Chain Protocol Loses $570,000 To Exploiter — Bitcoinist","type":"news_article","credibility":2},{"url":"https://beincrypto.com/defi-allbridge-hack-570/","name":"DeFi Cross-Chain Solution Allbridge Exploited For $570,000 — BeInCrypto","type":"news_article","credibility":2}],"severity":"critical"},{"content":"Security analysts determined the root cause was a logic error in Allbridge Core's withdrawal and price-calculation mechanism. The protocol assumed that the same amount of vUSD would be minted on deposit and burned on withdrawal — an assumption that held in balanced pool conditions but broke down when pools became severely imbalanced. By acting simultaneously as a large liquidity provider (to create the imbalance) and as a swapper (to exploit the resulting mispricing), the attacker was able to withdraw significantly more liquidity than the LP tokens they burned entitled them to. Specifically, the exploit inflated the vUSD-to-USDT ratio within the pool, allowing the attacker to obtain $790,000 in BSC-USD using only approximately $40,000 of BUSD as the swap input. CertiK and PeckShield both independently confirmed the flash-loan vector as the attack mechanism. The flaw affected the BNB Chain deployment specifically because that chain hosted multiple stablecoin pools (BUSD and USDT), enabling the cross-pool imbalance manipulation that powered the attack.","heading":"Root Cause: Logic Flaw in Withdrawal Function","sources":[{"url":"https://medium.com/coinmonks/decoding-allbridge-570k-flash-loan-exploit-quillaudits-8da8dccd729d","name":"Decoding AllBridge $570K Flash Loan Exploit — QuillAudits via CoinMonks","type":"research","credibility":2},{"url":"https://medium.com/neptune-mutual/how-was-allbridge-exploited-956a05f3cb58","name":"How Was Allbridge Exploited? — Neptune Mutual","type":"research","credibility":2},{"url":"https://cryptonews.net/news/security/20754571/","name":"Allbridge Hack Response: Bridge Locked, White Hat Bounty, LPs Opened for Withdrawals — CryptoNews","type":"news_article","credibility":2}],"severity":"critical"},{"content":"BNB Chain announced via its official account that, thanks to AvengerDAO (a community-driven BNB Chain security initiative), it had identified the perpetrator of the Allbridge exploit through on-chain analysis. BscScan subsequently labeled the attacker's wallet as 'UF Dao Hacker,' linking the same address to a prior January 2023 exploit of the UF Dao protocol in which approximately $90,000 was stolen. HAPI Labs tracked the movement of stolen funds through multiple wallets, decentralized protocols, and centralized exchange hot wallets. A portion of the funds — approximately 507.3 BNB (roughly $159,000) — was routed to Tornado Cash in the days immediately following the attack. The attacker is also alleged to have sent a total of 1,700 BNB (including profits from prior attacks) through Tornado Cash. Several centralized exchanges are reported to have begun freezing accounts associated with the perpetrator following identification.","heading":"Attacker Identification and Fund Laundering","sources":[{"url":"https://www.theblock.co/post/224521/allbridge-exploiter-identified-bnb-chain","name":"BNB Chain claims to have identified Allbridge's $570,000 exploiter — The Block","type":"news_article","credibility":2},{"url":"https://beincrypto.com/allbridge-defi-recovers-stolen-crypto-hacker-bounty/","name":"Allbridge Hacker Returns 1,500 BNB, Keeps $100,000 as Bounty — BeInCrypto","type":"news_article","credibility":2},{"url":"https://medium.com/neptune-mutual/how-was-allbridge-exploited-956a05f3cb58","name":"How Was Allbridge Exploited? — Neptune Mutual","type":"research","credibility":2},{"url":"https://cryptonews.net/news/security/20754571/","name":"Allbridge Hack Response — CryptoNews","type":"news_article","credibility":2}],"severity":"high"},{"content":"On April 3, 2023, Allbridge sent an on-chain message to the attacker's wallet offering a white hat bounty — a 10% reward of recovered funds — in exchange for the return of stolen assets and a promise of no legal action. The attacker ultimately returned approximately 1,500 BNB (roughly $465,000–$466,000 at the time), with 1,400 BNB reportedly routed from Tornado Cash back to Allbridge's designated recovery address. The attacker retained the remainder — approximately $100,000–$108,000 — as the agreed-upon bounty. Allbridge converted the returned BNB to BUSD and used it to fund a recovery payment program for affected liquidity providers, who were required to submit application forms to claim compensation. The team also temporarily reopened liquidity pools in the days immediately after the attack to allow LPs to withdraw their remaining assets before the pools were re-secured for the relaunch.","heading":"Bounty Negotiation and Fund Recovery","sources":[{"url":"https://cointelegraph.com/news/allbridge-exploiter-returns-most-of-the-573k-stolen-in-attack","name":"Allbridge exploiter returns most of the $573K stolen in attack — CoinTelegraph","type":"news_article","credibility":2},{"url":"https://beincrypto.com/allbridge-defi-recovers-stolen-crypto-hacker-bounty/","name":"Allbridge Hacker Returns 1,500 BNB, Keeps $100,000 as Bounty — BeInCrypto","type":"news_article","credibility":2},{"url":"https://dailycoin.com/defi-project-allbridge-recovers-most-of-stolen-570k/","name":"DeFi Project Allbridge Recovers Most of Stolen $570K — DailyCoin","type":"news_article","credibility":2},{"url":"https://blockchain.news/news/allbridge-recovers-465-000-stolen-in-crypto-exploit","name":"Allbridge Recovers $465,000 Stolen in Crypto Exploit — Blockchain.news","type":"news_article","credibility":2},{"url":"https://crypto.news/allbridge-offers-bounty-to-exploiters-behind-573k-hack/","name":"Allbridge offers bounty to exploiters behind $573k hack — Crypto.news","type":"news_article","credibility":2}],"severity":"high"},{"content":"Following the exploit, Allbridge Core's team conducted a root-cause analysis and implemented a series of architectural changes before relaunching the protocol. The primary structural fix was consolidating to a single liquidity pool per blockchain, eliminating the multi-pool configuration that enabled the cross-pool flash-loan manipulation. The team stated this change makes it impossible to execute a profitable exploit within a single transaction, since any price manipulation would need to be unwound in the same transaction. Additional safeguards include an automatic pool shutdown mechanism triggered when a stablecoin in the pool loses its peg, selective emergency controls allowing the team to pause deposits, withdrawals, and swaps on individual pools without accessing funds, and a Rebalancer Authority role reserved for moving reserves between chains in emergencies. The team also published its updated smart contracts on GitHub for community review. A relaunch update article published May 30, 2023, indicated the team was still finalizing the relaunch at that time. Prior audits from Kudelski Security (December 2022) and subsequent Quarkslab audits of the Stellar implementation did not surface the BNB Chain vulnerability before the exploit occurred.","heading":"Post-Exploit Security Remediation and Relaunch","sources":[{"url":"https://allbridge.medium.com/allbridge-core-updates-following-the-relaunch-9f7716eeb5da","name":"Allbridge Core Updates Following the Relaunch — Allbridge Medium","type":"official","credibility":1},{"url":"https://docs-core.allbridge.io/product/security-audit","name":"Security Audit — Allbridge Core Docs","type":"official","credibility":1},{"url":"https://cryptonews.net/news/security/20754571/","name":"Allbridge Hack Response: Bridge Locked, White Hat Bounty, LPs Opened for Withdrawals — CryptoNews","type":"news_article","credibility":2},{"url":"https://allbridge.medium.com/kudelski-security-audit-completed-8483e6bc463e","name":"Kudelski Security Audit Completed — Allbridge Medium","type":"official","credibility":1}],"severity":"medium"},{"content":"ZachXBT, the pseudonymous on-chain investigator known for tracking DeFi exploits and theft across blockchain networks, flagged the Allbridge Core incident as part of his ongoing monitoring of cross-chain bridge exploits. A Twitter post attributed to ZachXBT (https://twitter.com/zachxbt/status/1652732324969172992) references the Allbridge incident in the context of wider exploit tracking. ZachXBT's broader investigative work at the time focused on tracing fund flows through Tornado Cash and linking exploit wallets across multiple incidents — methodology consistent with the HAPI Labs and AvengerDAO tracking described in this case. The incident was widely covered by crypto-native security research outlets including PeckShield (who first publicly flagged the live attack), CertiK (which confirmed the flash-loan mechanism), QuillAudits, and Neptune Mutual. No formal ZachXBT written investigation thread specifically dedicated to Allbridge Core was independently verified during research for this report; the flagging is treated as low-to-medium confidence based on a single social media reference.","heading":"ZachXBT Flagging and Community Coverage","sources":[{"url":"https://twitter.com/zachxbt/status/1652732324969172992","name":"ZachXBT — Twitter/X post referencing Allbridge","type":"social_media","credibility":3},{"url":"https://en.wikipedia.org/wiki/ZachXBT","name":"ZachXBT — Wikipedia","type":"other","credibility":2},{"url":"https://onekey.so/blog/ecosystem/zachxbt-the-on-chain-investigator-exposing-scams-across-the-crypto-world/","name":"ZachXBT: The On-Chain Investigator Exposing Scams Across the Crypto World — OneKey Blog","type":"other","credibility":2}],"severity":"medium"}],"timeline":[{"date":"2022-07-10","event":"Kudelski Security completes a security audit of Allbridge Core, finding no significant issues.","source":"Kudelski Security Audit Completed — Allbridge Medium","source_url":"https://allbridge.medium.com/kudelski-security-audit-completed-8483e6bc463e"},{"date":"2023-01-12","event":"Kudelski Security publishes a public blog post on mitigating risks in Allbridge Core based on its December 2022 assessment.","source":"Mitigating Risk in the Allbridge Core — Kudelski Security Research","source_url":"https://research.kudelskisecurity.com/2023/01/12/mitigating-risk-in-the-allbridge-core/"},{"date":"2023","event":"The same wallet later identified as the Allbridge exploiter (labeled 'UF Dao Hacker' on BscScan) allegedly steals approximately $90,000 from the UF Dao protocol in a separate attack.","source":"BNB Chain claims to have identified Allbridge's $570,000 exploiter — The Block","source_url":"https://www.theblock.co/post/224521/allbridge-exploiter-identified-bnb-chain","date_original":"2023-01-01"},{"date":"2023-04","event":"PeckShield publicly alerts Allbridge via Twitter that an address is actively manipulating the swap price of its BNB Chain liquidity pools, acting simultaneously as a liquidity provider and swapper to drain BUSD and USDT pools.","source":"DeFi Cross-Chain Solution Allbridge Exploited For $570,000 — BeInCrypto","source_url":"https://beincrypto.com/defi-allbridge-hack-570/","date_original":"2023-04-01"},{"date":"2023-04-02","event":"Allbridge Core confirms the exploit. Approximately $570,000 is drained from BNB Chain pools (282,889 BUSD and 290,868 USDT). Total losses including a secondary attack are estimated at approximately $650,000. Allbridge immediately locks the bridge.","source":"Decoding AllBridge $570K Flash Loan Exploit — QuillAudits","source_url":"https://medium.com/coinmonks/decoding-allbridge-570k-flash-loan-exploit-quillaudits-8da8dccd729d"},{"date":"2023-04-02","event":"Allbridge reopens liquidity pools temporarily to allow liquidity providers to withdraw remaining assets. The team engages security partners PeckShield, Hacken, and HAPI Labs.","source":"Allbridge Hack Response: Bridge Locked, White Hat Bounty, LPs Opened for Withdrawals — CryptoNews","source_url":"https://cryptonews.net/news/security/20754571/"},{"date":"2023-04-03","event":"BNB Chain and AvengerDAO announce they have identified the exploiter through on-chain analysis. The wallet is linked to the prior UF Dao hack. Centralized exchanges begin freezing associated accounts.","source":"BNB Chain claims to have identified Allbridge's $570,000 exploiter — The Block","source_url":"https://www.theblock.co/post/224521/allbridge-exploiter-identified-bnb-chain"},{"date":"2023-04-03","event":"Allbridge sends an on-chain message to the attacker offering a 10% white hat bounty and immunity from legal action in exchange for return of stolen funds.","source":"Allbridge offers bounty to exploiter who stole $573K in flash loan attack — CoinTelegraph","source_url":"https://cointelegraph.com/news/allbridge-offers-bounty-to-exploiter-who-stole-570k-in-flashloan-attack"},{"date":"2023-04-04","event":"The attacker returns approximately 1,500 BNB (roughly $465,000–$466,000), routed through Tornado Cash, to Allbridge's recovery address. Approximately $100,000–$108,000 is retained by the attacker as the bounty. Approximately 507.3 BNB had previously been sent to Tornado Cash in the days after the attack.","source":"Allbridge Hacker Returns 1,500 BNB, Keeps $100,000 as Bounty — BeInCrypto","source_url":"https://beincrypto.com/allbridge-defi-recovers-stolen-crypto-hacker-bounty/"},{"date":"2023-04-04","event":"Allbridge converts returned BNB to BUSD and launches a compensation program for affected liquidity providers, requiring them to submit application forms.","source":"DeFi Project Allbridge Recovers Most of Stolen $570K — DailyCoin","source_url":"https://dailycoin.com/defi-project-allbridge-recovers-most-of-stolen-570k/"},{"date":"2023-05-30","event":"Allbridge publishes a relaunch update post describing security fixes implemented: single pool per chain, automatic pool shutdown on depeg, emergency pause controls, and open-sourced contracts on GitHub.","source":"Allbridge Core Updates Following the Relaunch — Allbridge Medium","source_url":"https://allbridge.medium.com/allbridge-core-updates-following-the-relaunch-9f7716eeb5da"}],"sources_used":[{"url":"https://medium.com/coinmonks/decoding-allbridge-570k-flash-loan-exploit-quillaudits-8da8dccd729d","name":"Decoding AllBridge $570K Flash Loan Exploit — QuillAudits via CoinMonks","type":"research","archive_url":"http://web.archive.org/web/20251126142142/https://medium.com/coinmonks/decoding-allbridge-570k-flash-loan-exploit-quillaudits-8da8dccd729d","credibility":2,"archive_timestamp":"2025-11-26T14:21:42+00:00"},{"url":"https://medium.com/neptune-mutual/how-was-allbridge-exploited-956a05f3cb58","name":"How Was Allbridge Exploited? — Neptune Mutual","type":"research","archive_url":"https://web.archive.org/web/20260726033153/https://medium.com/neptune-mutual/how-was-allbridge-exploited-956a05f3cb58","credibility":2,"archive_timestamp":"2026-07-26T03:31:53+00:00"},{"url":"https://allbridge.medium.com/allbridge-core-updates-following-the-relaunch-9f7716eeb5da","name":"Allbridge Core Updates Following the Relaunch — Allbridge Medium","type":"official","archive_url":"http://web.archive.org/web/20260322055924/https://allbridge.medium.com/allbridge-core-updates-following-the-relaunch-9f7716eeb5da","credibility":1,"archive_timestamp":"2026-03-22T05:59:24+00:00"},{"url":"https://cointelegraph.com/news/allbridge-offers-bounty-to-exploiter-who-stole-570k-in-flashloan-attack","name":"Allbridge offers bounty to exploiter who stole $573K in flash loan attack — CoinTelegraph","type":"news_article","archive_url":"http://web.archive.org/web/20260421043748/https://cointelegraph.com/news/allbridge-offers-bounty-to-exploiter-who-stole-570k-in-flashloan-attack","credibility":2,"archive_timestamp":"2026-04-21T04:37:48+00:00"},{"url":"https://www.theblock.co/post/224521/allbridge-exploiter-identified-bnb-chain","name":"BNB Chain claims to have identified Allbridge's $570,000 exploiter — The Block","type":"news_article","archive_url":null,"credibility":2,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://beincrypto.com/allbridge-defi-recovers-stolen-crypto-hacker-bounty/","name":"Allbridge Hacker Returns 1,500 BNB, Keeps $100,000 as Bounty — BeInCrypto","type":"news_article","archive_url":null,"credibility":2,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://cryptonews.net/news/security/20754571/","name":"Allbridge Hack Response: Bridge Locked, White Hat Bounty, LPs Opened for Withdrawals — CryptoNews","type":"news_article","archive_url":"http://web.archive.org/web/20260724163646/https://cryptonews.net/news/security/20754571/","credibility":2,"archive_timestamp":"2026-07-24T16:36:46+00:00"},{"url":"https://beincrypto.com/defi-allbridge-hack-570/","name":"DeFi Cross-Chain Solution Allbridge Exploited For $570,000 — BeInCrypto","type":"news_article","archive_url":null,"credibility":2,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://crypto.news/allbridge-offers-bounty-to-exploiters-behind-573k-hack/","name":"Allbridge offers bounty to exploiters behind $573k hack — Crypto.news","type":"news_article","archive_url":"http://web.archive.org/web/20251010130238/https://crypto.news/allbridge-offers-bounty-to-exploiters-behind-573k-hack/","credibility":2,"archive_timestamp":"2025-10-10T13:02:38+00:00"},{"url":"https://dailycoin.com/defi-project-allbridge-recovers-most-of-stolen-570k/","name":"DeFi Project Allbridge Recovers Most of Stolen $570K — DailyCoin","type":"news_article","archive_url":"http://web.archive.org/web/20260724170946/https://dailycoin.com/defi-project-allbridge-recovers-most-of-stolen-570k/","credibility":2,"archive_timestamp":"2026-07-24T17:09:46+00:00"},{"url":"https://blockchain.news/news/allbridge-recovers-465-000-stolen-in-crypto-exploit","name":"Allbridge Recovers $465,000 Stolen in Crypto Exploit — Blockchain.news","type":"news_article","archive_url":"http://web.archive.org/web/20251011123808/https://blockchain.news/news/allbridge-recovers-465-000-stolen-in-crypto-exploit","credibility":2,"archive_timestamp":"2025-10-11T12:38:08+00:00"},{"url":"https://research.kudelskisecurity.com/2023/01/12/mitigating-risk-in-the-allbridge-core/","name":"Mitigating Risk in the Allbridge Core — Kudelski Security Research","type":"research","archive_url":"http://web.archive.org/web/20250825065517/https://research.kudelskisecurity.com/2023/01/12/mitigating-risk-in-the-allbridge-core/","credibility":2,"archive_timestamp":"2025-08-25T06:55:17+00:00"},{"url":"https://blog.quarkslab.com/allbridge-core-stellar.html","name":"Audit of Allbridge Core — Quarkslab Blog","type":"research","archive_url":"http://web.archive.org/web/20260311214122/https://blog.quarkslab.com/allbridge-core-stellar.html","credibility":2,"archive_timestamp":"2026-03-11T21:41:22+00:00"},{"url":"https://docs-core.allbridge.io/product/security-audit","name":"Security Audit — Allbridge Core Docs","type":"official","archive_url":"https://web.archive.org/web/20260725234136/https://docs-core.allbridge.io/product/security-audits","credibility":1,"archive_timestamp":"2026-07-25T23:41:36+00:00"},{"url":"https://allbridge.medium.com/kudelski-security-audit-completed-8483e6bc463e","name":"Kudelski Security Audit Completed — Allbridge Medium","type":"official","archive_url":"http://web.archive.org/web/20260724163121/https://allbridge.medium.com/kudelski-security-audit-completed-8483e6bc463e","credibility":1,"archive_timestamp":"2026-07-24T16:31:21+00:00"},{"url":"https://bitcoinist.com/allbridge-hack-570000-lost/","name":"Allbridge Hack: Cross-Chain Protocol Loses $570,000 To Exploiter — Bitcoinist","type":"news_article","archive_url":"http://web.archive.org/web/20260216054126/https://bitcoinist.com/allbridge-hack-570000-lost/","credibility":2,"archive_timestamp":"2026-02-16T05:41:26+00:00"},{"url":"https://twitter.com/zachxbt/status/1652732324969172992","name":"ZachXBT — Twitter/X post referencing Allbridge","type":"social_media","archive_url":null,"credibility":3,"archive_timestamp":null},{"url":"https://docs-core.allbridge.io","name":"What is Allbridge Core? — Official Documentation","type":"official","archive_url":"http://web.archive.org/web/20260718173351/https://docs-core.allbridge.io/","credibility":1,"archive_timestamp":"2026-07-18T17:33:51+00:00"}],"source_tags":["defillama"],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-sonnet-4-5","created_at":"2026-05-04T02:54:43.061179+00:00","updated_at":"2026-08-29T01:34:17.873+00:00"}}