Skip to main content
Sign in
Atomic Wallet1 decision on this page

Audit log

Every state-changing event for Atomic Wallet: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

  1. #1publishby system:backfill
    2026-05-20 18:36:41Z
    Score: ?? (no score change)
    anchoranchored
    chain
    mainnet-betaslot 421,041,187
    sig
    5matCjSpX57M…NFFGFp7sexplorer ↗
    hash
    3qjuGNacbP91…VHm7EGUbsha256 → base58
    verifying row…full verify ↗
    canonical bytes (7096 B) ▸
    {"actor":"system:backfill","investigation_id":"eae350e6-3c39-44fa-86fe-baca6fab2c50","kind":"publish","page_slug":"atomic-wallet","published_at":"2026-05-20T18:36:41.487Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Atomic Wallet","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://www.crunchbase.com/organization/atomic-wallet"},{"credibility":3,"name":"","type":"other","url":"https://www.coindesk.com/tech/2022/02/10/least-authority-discloses-security-risks-in-atomic-wallet"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://www.coindesk.com/tech/2022/02/10/least-authority-discloses-security-risks-in-atomic-wallet"},{"credibility":3,"name":"","type":"other","url":"https://www.dlnews.com/articles/defi/atomic-wallet-slammed-for-closed-code-amid-35m-dollar-hack/"},{"credibility":3,"name":"","type":"other","url":"https://topclassactions.com/lawsuit-settlements/privacy/data-breach/atomic-wallet-knew-of-security-flaws-prior-to-breach-class-action-claims/"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://www.elliptic.co/blog/analysis/north-korea-linked-atomic-wallet-heist-tops-100-million"},{"credibility":3,"name":"","type":"other","url":"https://www.halborn.com/blog/post/explained-the-atomic-wallet-hack-june-2023"},{"credibility":3,"name":"","type":"other","url":"https://decrypt.co/144444/north-korean-hackers-pocket-over-100-m-in-atomic-wallet-heist"},{"credibility":3,"name":"","type":"other","url":"https://techcrunch.com/2023/08/23/fbi-north-korea-lazarus-crypto/"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://www.elliptic.co/blog/analysis/35-million-atomic-wallet-hacker-funnels-crypto-to-north-korea-s-favored-mixer"},{"credibility":3,"name":"","type":"other","url":"https://www.elliptic.co/blog/analysis/north-korea-linked-atomic-wallet-heist-tops-100-million"},{"credibility":3,"name":"","type":"other","url":"https://www.coindesk.com/tech/2023/06/13/atomic-wallet-hackers-move-stolen-funds-via-ofac-sanctioned-exchange-garantex-elliptic"},{"credibility":3,"name":"","type":"other","url":"https://www.trmlabs.com/resources/blog/inside-north-koreas-crypto-heists"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://www.elliptic.co/blog/analysis/north-korea-linked-atomic-wallet-heist-tops-100-million"},{"credibility":3,"name":"","type":"other","url":"https://www.chainalysis.com/blog/crypto-hacking-stolen-funds-2024/"},{"credibility":3,"name":"","type":"other","url":"https://techcrunch.com/2023/08/23/fbi-north-korea-lazarus-crypto/"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://www.classaction.org/news/class-action-filed-over-2023-atomic-wallet-data-breach-in-which-100m-in-crypto-assets-was-stolen"},{"credibility":3,"name":"","type":"other","url":"https://brownrudnick.com/client_news/brown-rudnick-wins-dismissal-of-class-action-suit-against-atomic-wallet-over-100m-hack/"},{"credibility":3,"name":"","type":"other","url":"https://cointelegraph.com/news/us-court-dismiss-atomic-wallet-class-suit-lack-jurisdiction"},{"credibility":3,"name":"","type":"other","url":"https://www.insideclassactions.com/2024/10/08/a-closer-look-court-applies-established-personal-jurisdiction-principles-to-dismiss-crypto-wallet-companies-in-class-action-filed-after-100-million-north-korean-crypto-hack/"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://hacken.io/discover/atomic-wallet-hack/"},{"credibility":3,"name":"","type":"other","url":"https://www.dlnews.com/articles/defi/atomic-wallet-faces-lawsuit-following-north-korean-hack/"},{"credibility":3,"name":"","type":"other","url":"https://www.elliptic.co/blog/analysis/north-korea-linked-atomic-wallet-heist-tops-100-million"}]}],"sources_used":[],"summary":"Atomic Wallet is a non-custodial multi-asset cryptocurrency wallet founded in 2017 and headquartered in Tallinn, Estonia. In June 2023, the platform suffered one of the largest individual wallet hacks in cryptocurrency history when attackers — subsequently attributed with high confidence to North Korea's Lazarus Group — drained over $100 million from approximately 5,500 user wallets. A 2022 third-party security audit had publicly identified critical vulnerabilities that the company allegedly failed to remediate prior to the attack.","timeline":[{"date":"2018-09-01","event":"Atomic Wallet raises approximately $22 million in an ICO for its AWC token.","source":""},{"date":"2021-04-01","event":"Security firm Least Authority completes an audit of Atomic Wallet, identifying critical vulnerabilities including flawed cryptographic implementation and improper use of the Electron framework. Responsible disclosure process begins.","source":""},{"date":"2022-02-10","event":"Least Authority publicly discloses its audit findings after approximately ten months of responsible disclosure attempts, warning that Atomic Wallet users are at 'significant risk' and recommending against deployment until issues are remediated.","source":""},{"date":"2023-06-02","event":"Attackers — later attributed to North Korea's Lazarus Group — begin draining cryptocurrency from Atomic Wallet users. The FBI would later confirm this date as the approximate start of the breach.","source":""},{"date":"2023-06-03","event":"Atomic Wallet publicly acknowledges 'reports of wallets being compromised' via social media. Initial reports estimate approximately $35 million stolen.","source":""},{"date":"2023-06-05","event":"Elliptic publishes initial blockchain analysis tracing stolen funds to Sinbad.io, a Bitcoin mixer previously linked to Lazarus Group operations, and attributes the hack to North Korea's Lazarus Group with high confidence.","source":""},{"date":"2023-06-13","event":"Elliptic updates its analysis, raising total estimated theft to over $100 million and reporting that hackers shifted some funds through Garantex, an OFAC-sanctioned Russian exchange.","source":""},{"date":"2023-06-21","event":"Class action lawsuit Meany et al. v. Atomic Wallet et al. (Case No. 1:23-cv-01582) is filed in U.S. District Court for the District of Colorado, alleging negligence and failure to remediate known security vulnerabilities.","source":""},{"date":"2023-08-23","event":"The FBI issues a public advisory confirming DPRK cyber actors stole approximately $100 million from Atomic Wallet on or about June 2, 2023, and warns cryptocurrency companies about potential cash-out activity.","source":""},{"date":"2024-09-10","event":"U.S. District Judge Philip Brimmer grants Atomic Wallet's motion to dismiss the class action for lack of personal jurisdiction, ending the primary U.S. legal avenue for affected users to seek compensation.","source":""}]},"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision f97e3232-f99a-4dfa-8bf7-84c4d51bdbef
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine — python -m src.verify_decision <event_id>.