Audit log

Every state-changing event for Astrid Finance: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-30 11:47:54Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 423,150,287

   sig

   AEGLxtgrV9Lx…gzkWEkCBcopyexplorer ↗

   hash

   4SgrVWhSwFk1…At7RafzMcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (5723 B) ▸

   {"actor":"system:backfill","investigation_id":"bdadc939-db8a-469e-9f90-efc0aa2e2810","kind":"publish","page_slug":"astrid-finance","published_at":"2026-05-30T11:47:54.034Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Astrid Finance","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/neptune-mutual/understanding-the-astrid-finance-exploit-d8001a65b4f6","type":"other","url":""},{"credibility":3,"name":"https://astridfinancial.wixsite.com/mysite","type":"other","url":""},{"credibility":3,"name":"https://testnet.astrid.finance/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/neptune-mutual/understanding-the-astrid-finance-exploit-d8001a65b4f6","type":"other","url":""},{"credibility":3,"name":"https://www.binance.com/en/square/post/2023-10-29-astrid-finance-suffers-exploit-after-auditors-recommended-fix-smart-contract-paused-and-full-refunds-promised-1541672","type":"other","url":""},{"credibility":3,"name":"https://www.fxstreet.com/cryptocurrencies/news/what-happened-in-crypto-this-weekend-202310300652","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.binance.com/en/square/post/2023-10-29-astrid-finance-suffers-exploit-after-auditors-recommended-fix-smart-contract-paused-and-full-refunds-promised-1541672","type":"other","url":""},{"credibility":3,"name":"https://www.fxstreet.com/cryptocurrencies/news/what-happened-in-crypto-this-weekend-202310300652","type":"other","url":""},{"credibility":3,"name":"https://medium.com/neptune-mutual/understanding-the-astrid-finance-exploit-d8001a65b4f6","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.fxstreet.com/cryptocurrencies/news/what-happened-in-crypto-this-weekend-202310300652","type":"other","url":""},{"credibility":3,"name":"https://business.outlookindia.com/cryptocurrency/standard-chartered-owned-crypto-platform-zodia-launched-in-hong-kong-astrid-finance-exploiter-returns-182k","type":"other","url":""},{"credibility":3,"name":"https://www.binance.com/en/square/post/2023-10-29-astrid-finance-suffers-exploit-after-auditors-recommended-fix-smart-contract-paused-and-full-refunds-promised-1541672","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://twitter.com/AstridFinance","type":"other","url":""},{"credibility":3,"name":"https://medium.com/neptune-mutual/understanding-the-astrid-finance-exploit-d8001a65b4f6","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://testnet.astrid.finance/","type":"other","url":""},{"credibility":3,"name":"https://www.fxstreet.com/cryptocurrencies/news/what-happened-in-crypto-this-weekend-202310300652","type":"other","url":""},{"credibility":3,"name":"https://github.com/astridfinance","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/neptune-mutual/understanding-the-astrid-finance-exploit-d8001a65b4f6","type":"other","url":""},{"credibility":3,"name":"https://www.binance.com/en/square/post/2023-10-29-astrid-finance-suffers-exploit-after-auditors-recommended-fix-smart-contract-paused-and-full-refunds-promised-1541672","type":"other","url":""}]}],"sources_used":[],"summary":"Astrid Finance is an Ethereum-based liquid restaking protocol built on EigenLayer, allowing users to deposit liquid staking tokens (stETH, rETH, cbETH) in exchange for liquid restaked tokens. On October 28, 2023, the protocol suffered a smart contract exploit due to a missing input validation check in its withdraw function, resulting in the theft of approximately $228,000 in assets. The attacker eventually returned 80% of stolen funds after an on-chain negotiation and legal threat by the team; all affected users received refunds, and the vulnerable contracts remain paused pending re-audit.","timeline":[{"date":"2023-10-28","event":"Astrid Finance exploited on Ethereum Mainnet via missing input validation in withdraw function; approximately $228,000 in stETH, rETH, and cbETH drained by attacker at address 0x792ec27874e1f614e757a1ae49d00ef5b2c73959.","source":""},{"date":"2023-10-28","event":"Astrid Finance team detects exploit, pauses vulnerable contracts, and takes a snapshot of all token holders to facilitate future refunds.","source":""},{"date":"2023-10-28","event":"Team initially states the vulnerability originated from an auditor-recommended fix; retracts the statement approximately one hour later, attributing the flaw to a mutual oversight by both the team and the auditing firm.","source":""},{"date":"2023-10-29","event":"Team sends on-chain message to attacker offering a 20% bounty (approximately 25.6 ETH) to return the remaining 80% of stolen funds; deadline set for October 31, 2023 at 8:00 am UTC with threat of legal action.","source":""},{"date":"2023-10-30","event":"Attacker returns approximately 102 ETH (roughly $182,000) — the 80% share — ahead of the deadline. Team states the matter is 'settled amicably.'","source":""},{"date":"2023-10-31","event":"Team publishes full list of affected depositors and their refund amounts; confirms all user refunds processed. Remaining recovered funds moved to multisig wallet for re-audit and redevelopment.","source":""},{"date":"2023-11-01","event":"Astrid Finance announces plan to undergo multiple independent smart contract audits before any future mainnet relaunch; contracts remain paused.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 42fc9c65-e464-46ae-8483-c7227e80f894copy
2. #2rescoreby systemsystem

   2026-10-10 18:47:06Z
   Score: 38 → 55 (+17)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 38 → 55. Problems weighed by who is responsible: problems around the subject, caused by others −4, incidents the subject suffered −3.2, concerns that are not fraud −3.2.
   anchoranchored

   chain

   ●mainnet-betaslot 455,366,925

   sig

   EituG8F4oQEs…zm27q43ecopyexplorer ↗

   hash

   EoQ1yTMxbJqM…AnrXzmHmcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (608 B) ▸

   {"actor":"system","decided_at":"2026-10-10T18:47:06.868Z","decision":"rescore","investigation_id":"bdadc939-db8a-469e-9f90-efc0aa2e2810","new_score":55,"page_slug":"astrid-finance","prev_score":38,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 38 → 55. Problems weighed by who is responsible: problems around the subject, caused by others −4, incidents the subject suffered −3.2, concerns that are not fraud −3.2.","score_delta":17,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 54d8a4f6-f8a9-4c24-89e4-a40852be9ca1copy
3. #3reviewby reviewerreviewer

   2026-11-02 10:22:32Z
   Score: 55 → 55 (no score change)
   The core exploit facts (date, attacker address, tx hash, mechanism, ~127 ETH loss, 80% return and deadline) match independent reporting. Several cited sources returned 403, so the per-token figures and the audit-retraction detail could not be verified. The ZachXBT section is stated as fact but unsupported by any source, and the page itself says it could not be verified. No shutdown or relaunch was found.
   anchoranchored

   chain

   ●mainnet-betaslot 464,460,109

   sig

   3yqwy6kXqVTN…pmtEJ1vmcopyexplorer ↗

   hash

   FsnAGbhWTtKH…tCZFU2RGcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1258 B) ▸

   {"actor":"reviewer","artifact_identity":"519b50367eaa0830ecdb1779748ae949","blocked_count":2,"decided_at":"2026-11-02T10:22:32.511Z","decision":"review","disputed_pct":0.3333,"findings_hash":"GZeqHfaNxkJvXrF7tAj3NY7AEz7GgcJu5EvE57KkFh9r","investigation_id":"bdadc939-db8a-469e-9f90-efc0aa2e2810","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":55,"page_content_hash":"7c606ec38d5391fbc103d6a45e273e974756bb47328bac7c332d9deb9e6802af","page_slug":"astrid-finance","prev_score":55,"reason":"The core exploit facts (date, attacker address, tx hash, mechanism, ~127 ETH loss, 80% return and deadline) match independent reporting. Several cited sources returned 403, so the per-token figures and the audit-retraction detail could not be verified. The ZachXBT section is stated as fact but unsupported by any source, and the page itself says it could not be verified. No shutdown or relaunch was found.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":6,"sequence_num":3,"subject_status":"unknown","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 6ff5d394-d904-49ab-9a2c-153117063676copy
4. #4review reviseby judgejudge

   2026-11-02 10:22:32Z
   Score: 55 → 55 (no score change)
   The core exploit facts (date, attacker address, transaction hash, mechanism, roughly 127 ETH lost, and the 80% return before the deadline) matched independent reporting (claim_findings[0], [1], [3]). Of the six claims that could be checked, two could not be supported by any source (about 33%): the ZachXBT flag, which the page states as fact in its heading while admitting it cannot be verified (claim_findings[4]), and the AstridDAO disambiguation, which is low risk (claim_findings[7]). Two further claims were excluded because the sources blocked the reviewer, and the page relies heavily on those blocked sources, so a high-priority coverage gap remains. Because no claim was disputed, the core allegations hold, and the reviewer's confidence is moderate, the penalty is set at the mild end of the band.
   anchoranchored

   chain

   ●mainnet-betaslot 464,460,258

   sig

   26agjQa3b9g6…PScutNHWcopyexplorer ↗

   hash

   Fan8HsSFxXMq…5XSAntLjcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1492 B) ▸

   {"actor":"judge","artifact_identity":"519b50367eaa0830ecdb1779748ae949","band_override":null,"blocked_count":2,"decided_at":"2026-11-02T10:22:32.511Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.3333,"investigation_id":"bdadc939-db8a-469e-9f90-efc0aa2e2810","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":55,"page_slug":"astrid-finance","prev_score":55,"reason":"The core exploit facts (date, attacker address, transaction hash, mechanism, roughly 127 ETH lost, and the 80% return before the deadline) matched independent reporting (claim_findings[0], [1], [3]). Of the six claims that could be checked, two could not be supported by any source (about 33%): the ZachXBT flag, which the page states as fact in its heading while admitting it cannot be verified (claim_findings[4]), and the AstridDAO disambiguation, which is low risk (claim_findings[7]). Two further claims were excluded because the sources blocked the reviewer, and the page relies heavily on those blocked sources, so a high-priority coverage gap remains. Because no claim was disputed, the core allegations hold, and the reviewer's confidence is moderate, the penalty is set at the mild end of the band.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":6,"sequence_num":4,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 68189170-ec2d-432e-9937-0301672d7a2fcopy
5. #5rescoreby systemsystem

   2026-11-02 10:22:33Z
   Score: 55 → 59 (+4)
   Recalculated after the fact-check of 2026-11-02. Rescored under Scoring v2, the published formula (avoid.net/scoring): 55 → 59. Problems weighed by who is responsible: incidents the subject suffered −3.2, problems around the subject, caused by others −2.4; 3 section(s) set aside until a failed fact-check is resolved.
   anchoranchored

   chain

   ●mainnet-betaslot 464,460,263

   sig

   3ABWf5rWjwzo…QpdBPLobcopyexplorer ↗

   hash

   sTfkPBb74fGY…6dqexWBxcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (686 B) ▸

   {"actor":"system","decided_at":"2026-11-02T10:22:32.511Z","decision":"rescore","investigation_id":"bdadc939-db8a-469e-9f90-efc0aa2e2810","new_score":59,"page_slug":"astrid-finance","prev_score":55,"reason":"Recalculated after the fact-check of 2026-11-02. Rescored under Scoring v2, the published formula (avoid.net/scoring): 55 → 59. Problems weighed by who is responsible: incidents the subject suffered −3.2, problems around the subject, caused by others −2.4; 3 section(s) set aside until a failed fact-check is resolved.","score_delta":4,"score_model":"v2","sequence_num":5,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 38f87fa7-4893-4e57-a6aa-e18ae219587bcopy