Audit log

Every state-changing event for Atlantis Loans: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-30 04:06:01Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 423,080,268

   sig

   5vZPU3FC1Kr6…8fQGFHB9copyexplorer ↗

   hash

   8ctBG6NVxa5W…HLRZ2TFUcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (6163 B) ▸

   {"actor":"system:backfill","investigation_id":"5f3633bd-c615-44e1-a887-a95b3cbdcfea","kind":"publish","page_slug":"atlantis-loans","published_at":"2026-05-30T04:06:01.143Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Atlantis Loans","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://defillama.com/protocol/atlantis-loans","type":"other","url":""},{"credibility":3,"name":"https://github.com/peckshield/publications/blob/master/audit_reports/PeckShield-Audit-Report-Atlantis-v1.0.pdf","type":"other","url":""},{"credibility":3,"name":"https://medium.com/@atlantisfinance/atlantis-official-ido-rush-rewards-40b6e4682269","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/@atlantisfinance/dear-atlantis-community-712307f91a7","type":"other","url":""},{"credibility":3,"name":"https://www.web3isgoinggreat.com/?id=abandoned-atlantis-loans-project-exploited-for-1-1-million","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://rekt.news/atlantis-loans-rekt","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-atlantis-loans-hack-june-2023","type":"other","url":""},{"credibility":3,"name":"https://medium.com/neptune-mutual/understanding-atlantis-loans-exploit-3716f7e765b4","type":"other","url":""},{"credibility":3,"name":"https://blog.solidityscan.com/atlantis-loans-hack-analysis-7f3fb2e295e0","type":"other","url":""},{"credibility":3,"name":"https://www.immunebytes.com/blog/atlantis-loans-hack-june-10-2023-detailed-hack-analysis/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.web3isgoinggreat.com/?id=abandoned-atlantis-loans-project-exploited-for-1-1-million","type":"other","url":""},{"credibility":3,"name":"https://medium.com/nefture/2-5m-lost-in-atlantis-loan-crypto-hack-an-avoidable-tragedy-c926d72fee8b","type":"other","url":""},{"credibility":3,"name":"https://revoke.cash/exploits/atlantis-loans","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/atlantis-loans","type":"other","url":""},{"credibility":3,"name":"https://rekt.news/atlantis-loans-rekt","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-atlantis-loans-hack-june-2023","type":"other","url":""},{"credibility":3,"name":"https://medium.com/neptune-mutual/understanding-atlantis-loans-exploit-3716f7e765b4","type":"other","url":""},{"credibility":3,"name":"https://blog.solidityscan.com/atlantis-loans-hack-analysis-7f3fb2e295e0","type":"other","url":""},{"credibility":3,"name":"https://medium.com/@AMLBot/defi-vulnerabilities-atlantis-loans-hack-1545dfac22ae","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/d3ploy/atlantis-loans-exploit-defi-governance-vulnerabilities-the-connection-w-venus-protocol-af39721d9b1f","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://revoke.cash/exploits/atlantis-loans","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-atlantis-loans-hack-june-2023","type":"other","url":""},{"credibility":3,"name":"https://medium.com/neptune-mutual/understanding-atlantis-loans-exploit-3716f7e765b4","type":"other","url":""}]}],"sources_used":[],"summary":"Atlantis Loans was a decentralized lending and borrowing protocol built on BNB Chain (BSC) that was abandoned by its development team in April 2023 due to financial distress. Despite the abandonment, active smart contracts and unrevoked user approvals remained on-chain, which an attacker exploited in June 2023 through a malicious governance proposal, ultimately draining an estimated $2.5 million from users. The protocol is now defunct, its website is down, and its TVL has collapsed to near zero.","timeline":[{"date":"2021-01-01","event":"Atlantis Loans launches as a decentralized lending protocol on BNB Smart Chain, modeled after Compound Finance.","source":""},{"date":"2023-04-01","event":"Development team publishes abandonment announcement on Medium, citing 6-8 months of financial difficulty. Protocol smart contracts remain live and governance remains active.","source":""},{"date":"2023-04-12","event":"First malicious governance proposal (Proposal ID 49) submitted by attacker. Proposal fails to reach quorum due to insufficient votes.","source":""},{"date":"2023-06-07","event":"Attacker submits second malicious governance proposal (Proposal ID 52) via GovernorBravo contract, targeting admin roles of all ABep20Delegator token contracts.","source":""},{"date":"2023-06-10","event":"Governance proposal executes after 48-hour timelock. Attacker takes admin control of proxy contracts, inserts backdoored implementation, and begins draining token approvals from user wallets. Initial losses estimated at approximately $1.1 million.","source":""},{"date":"2023-06-11","event":"Exploit discovered and reported publicly. BeosinAlert and PeckShieldAlert issue warnings. Revoke.cash deploys dedicated exploit checker for affected users.","source":""},{"date":"2023-06-12","event":"Attacker continues draining unrevoked approvals. PeckShield reports total losses exceeding $2.5 million. Web3 Is Going Great documents the incident.","source":""},{"date":"2023-06-13","event":"Rekt.news publishes post-mortem. Multiple security firms including Halborn, Neptune Mutual, Nefture Security, and SolidityScan publish detailed analyses.","source":""},{"date":"2023-07-01","event":"Team's deadline for burning 450,000 ATL tokens passes. Protocol website subsequently goes offline.","source":""},{"date":"2026-05-01","event":"Protocol TVL stands at approximately $2,902. DeFiLlama marks the protocol as having rug pulled user funds with website down. No recovery or remediation has been undertaken.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision ee2761e9-ee09-4f3e-9f0b-33d3ef92ed35copy
2. #2rescoreby systemsystem

   2026-10-10 18:40:53Z
   Score: 12 → 50 (+38)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 12 → 50. Problems weighed by who is responsible: concerns that are not fraud −9.6, incidents the subject suffered −6.4, problems around the subject, caused by others −1.6; legitimacy credit long-running +10; no longer operating, so capped at 50.
   anchoranchored

   chain

   ●mainnet-betaslot 455,359,566

   sig

   MxpKjbkuzMSe…qkwfgqUzcopyexplorer ↗

   hash

   9MgU28DgNk4k…XdsDfmtncopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (684 B) ▸

   {"actor":"system","decided_at":"2026-10-10T18:40:53.424Z","decision":"rescore","investigation_id":"5f3633bd-c615-44e1-a887-a95b3cbdcfea","new_score":50,"page_slug":"atlantis-loans","prev_score":12,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 12 → 50. Problems weighed by who is responsible: concerns that are not fraud −9.6, incidents the subject suffered −6.4, problems around the subject, caused by others −1.6; legitimacy credit long-running +10; no longer operating, so capped at 50.","score_delta":38,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision f2e754de-0235-4b76-a629-253f633e5457copy
3. #3reviewby reviewerreviewer

   2026-11-03 23:57:03Z
   Score: 50 → 50 (no score change)
   The core narrative is supported by Rekt, Web3IsGoingGreat and Halborn: abandonment in April 2023, a governance attack in June 2023, $1.1M initially, and $2.5M later. Rekt and Halborn do not support some granular details such as the timelock, the ATL burn and the exact execution date, and the Medium sources were not checked. The timeline date for the $2.5M figure (June 12) is probably too early, since Rekt says it came about a week after the exploit. The 'rug pull' wording and the TVL figure were not verified.
   anchoranchored

   chain

   ●mainnet-betaslot 465,091,568

   sig

   jcrCFx5Tvhth…baYJGDQRcopyexplorer ↗

   hash

   BSdSvpnX1v4P…amYj4uCwcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1362 B) ▸

   {"actor":"reviewer","artifact_identity":"cb3c38d41b6582b4d4167198da30e53e","blocked_count":3,"decided_at":"2026-11-03T23:57:03.823Z","decision":"review","disputed_pct":0,"findings_hash":"6YJGkAG7ua9hpJaL55YG5THaHavC1s49nWLEM13WTGZV","investigation_id":"5f3633bd-c615-44e1-a887-a95b3cbdcfea","judge_def_hash":"750934ecb48272224909b7430fab271676d391380fbc821acbe7ee7e4cac2fa3","new_score":50,"page_content_hash":"12d58f21e94f3cc5ff93ebe84c6cae6541952ecfcb8058807f827ec1e75e47b5","page_slug":"atlantis-loans","prev_score":50,"reason":"The core narrative is supported by Rekt, Web3IsGoingGreat and Halborn: abandonment in April 2023, a governance attack in June 2023, $1.1M initially, and $2.5M later. Rekt and Halborn do not support some granular details such as the timelock, the ATL burn and the exact execution date, and the Medium sources were not checked. The timeline date for the $2.5M figure (June 12) is probably too early, since Rekt says it came about a week after the exploit. The 'rug pull' wording and the TVL figure were not verified.","reviewer_def_hash":"3839668b232611e5b26db72079d64745f8e57e919b8a379e79b44ba4a52c845b","score_delta":0,"scored_claims":4,"sequence_num":3,"subject_status":"shut_down","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision e44adc98-1af1-450b-967d-c01616057268copy
4. #4review approveby judgejudge

   2026-11-03 23:57:04Z
   Score: 50 → 50 (no score change)
   Of 7 claim findings, 3 were unverifiable only because the sources (Medium, DeFiLlama) blocked the reviewer (claim_findings[4], [5], [6]) and are left out of the count. Of the remaining 4, none were disputed or unverifiable, giving 0% disputed. The core narrative (abandonment in April 2023, the June 2023 governance attack, $1.1M initial and $2.5M later losses) is confirmed by Rekt, Web3IsGoingGreat and Halborn. One timeline date for the $2.5M figure (claim_findings[2], June 12) is probably about a week too early, which is a minor correction rather than a challenge to the page. No omissions were reported and the page's shutdown status matches the sources. The large blocked share and the reviewer's moderate confidence (0.55) are coverage limits, not defects of the page.
   anchoranchored

   chain

   ●mainnet-betaslot 465,091,574

   sig

   3r8rRNpdiKwv…RChFEHcrcopyexplorer ↗

   hash

   JDzab68UdQLy…2jD7SnVjcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1457 B) ▸

   {"actor":"judge","artifact_identity":"cb3c38d41b6582b4d4167198da30e53e","band_override":null,"blocked_count":3,"decided_at":"2026-11-03T23:57:03.823Z","decision":"review_approve","delist_requested":false,"disputed_pct":0,"investigation_id":"5f3633bd-c615-44e1-a887-a95b3cbdcfea","judge_def_hash":"750934ecb48272224909b7430fab271676d391380fbc821acbe7ee7e4cac2fa3","new_score":50,"page_slug":"atlantis-loans","prev_score":50,"reason":"Of 7 claim findings, 3 were unverifiable only because the sources (Medium, DeFiLlama) blocked the reviewer (claim_findings[4], [5], [6]) and are left out of the count. Of the remaining 4, none were disputed or unverifiable, giving 0% disputed. The core narrative (abandonment in April 2023, the June 2023 governance attack, $1.1M initial and $2.5M later losses) is confirmed by Rekt, Web3IsGoingGreat and Halborn. One timeline date for the $2.5M figure (claim_findings[2], June 12) is probably about a week too early, which is a minor correction rather than a challenge to the page. No omissions were reported and the page's shutdown status matches the sources. The large blocked share and the reviewer's moderate confidence (0.55) are coverage limits, not defects of the page.","reviewer_def_hash":"3839668b232611e5b26db72079d64745f8e57e919b8a379e79b44ba4a52c845b","score_delta":0,"scored_claims":4,"sequence_num":4,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 9e7da953-8438-4b17-a99f-fa7e05167b1bcopy