← BurgerSwap5 decisions on this page
Audit log
Every state-changing event for BurgerSwap: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.
- #1publishby system:backfill2026-05-28 18:57:55ZScore: ? → ? (no score change)anchoranchored
- chain
- ●mainnet-betaslot 422,779,231
- sig
2jAajSVyb68d…yUS4N8hYexplorer ↗- hash
Eegks9dhD4Km…MjnQqc1Esha256 → base58
verifying row…full verify ↗canonical bytes (6759 B) ▸
{"actor":"system:backfill","investigation_id":"eba94768-6699-40f8-921e-af5980db77fa","kind":"publish","page_slug":"burgerswap","published_at":"2026-05-28T18:57:55.136Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"BurgerSwap","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://cryptopotato.com/who-is-behind-burgerswap-already-400-million-bnb-staked-in-1-day-via-binance-smart-chain/","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/burgerswap-frying-high-binance-offers-up-the-latest-dish-on-defi-menu","type":"other","url":""},{"credibility":3,"name":"https://academy.binance.com/en/articles/what-is-burgercities-burger","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://halborn.com/explained-the-burgerswap-hack-may-2021/","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/markets/2021/05/28/burgerswap-hit-by-flash-loan-attack-netting-over-7m","type":"other","url":""},{"credibility":3,"name":"https://cryptopotato.com/another-bsc-project-exploit-7-2m-drained-from-burgerswap-in-a-flash-loan-attack/","type":"other","url":""},{"credibility":3,"name":"https://slowmist.medium.com/an-analysis-of-the-attack-on-burgerswap-e48968040bad","type":"other","url":""},{"credibility":3,"name":"https://cryptoslate.com/binance-smart-chain-defi-project-burgerswap-hacked-for-7-million/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://cryptobriefing.com/7-million-lost-flash-loan-attack-bsc-burgerswap/","type":"other","url":""},{"credibility":3,"name":"https://slowmist.medium.com/an-analysis-of-the-attack-on-burgerswap-e48968040bad","type":"other","url":""},{"credibility":3,"name":"https://blockcast.cc/news/peckshield-brief-analysis-of-burgerswap-lightning-loan-attack-the-logic-behind-the-defi-protocol-is-more-important-than-the-code/","type":"other","url":""},{"credibility":3,"name":"https://halborn.com/explained-the-burgerswap-hack-may-2021/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://slowmist.medium.com/an-analysis-of-the-attack-on-burgerswap-e48968040bad","type":"other","url":""},{"credibility":3,"name":"https://bscscan.com/address/0x3f820d0bd7ce1cc0a993325cd46cae870a8d8bdc","type":"other","url":""},{"credibility":3,"name":"https://cryptopotato.com/another-bsc-project-exploit-7-2m-drained-from-burgerswap-in-a-flash-loan-attack/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://cryptopotato.com/who-is-behind-burgerswap-already-400-million-bnb-staked-in-1-day-via-binance-smart-chain/","type":"other","url":""},{"credibility":3,"name":"https://cryptobriefing.com/7-million-lost-flash-loan-attack-bsc-burgerswap/","type":"other","url":""},{"credibility":3,"name":"https://research.binance.com/en/projects/burger-swap","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/burgerswapblog/go-forward-plan-cburger-d522219affae","type":"other","url":""},{"credibility":3,"name":"https://u.today/binance-smart-chains-burgerswap-suffers-72-million-exploit","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/burgerswapblog/go-forward-plan-cburger-d522219affae","type":"other","url":""},{"credibility":3,"name":"https://academy.binance.com/en/articles/what-is-burgercities-burger","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/currencies/burger-cities/","type":"other","url":""},{"credibility":3,"name":"https://www.fxcm.com/markets/insights/everything-you-need-to-know-about-burgercities/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://cryptobriefing.com/7-million-lost-flash-loan-attack-bsc-burgerswap/","type":"other","url":""},{"credibility":3,"name":"https://halborn.com/explained-the-burgerswap-hack-may-2021/","type":"other","url":""},{"credibility":3,"name":"https://slowmist.medium.com/an-analysis-of-the-attack-on-burgerswap-e48968040bad","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/markets/2021/05/28/burgerswap-hit-by-flash-loan-attack-netting-over-7m","type":"other","url":""}]}],"sources_used":[],"summary":"BurgerSwap is a decentralized exchange (DEX) and automated market maker (AMM) protocol launched in September 2020 on Binance Smart Chain (BSC), built around the native BURGER governance token. On May 28, 2021, the protocol suffered a flash loan and reentrancy exploit that drained approximately $7.2 million in user funds across 14 transactions. Uniswap founder Hayden Adams publicly noted that a critical line of code enforcing the constant-product formula had been deliberately removed from BurgerSwap's fork of Uniswap v2, raising allegations of an intentional vulnerability or insider involvement by the anonymous development team.","timeline":[{"date":"2020-09-01","event":"BurgerSwap launches on Binance Smart Chain with the BURGER governance token.","source":""},{"date":"2020-09-01","event":"Beosin audits the first version of BurgerSwap smart contracts. Team relies primarily on internal audits and offers 1,000 BNB bounty for external review.","source":""},{"date":"2021-05-28","event":"Flash loan and reentrancy exploit drains approximately $7.2 million from BurgerSwap across 14 transactions on BSC. BURGER token price drops ~27%.","source":""},{"date":"2021-05-28","event":"Uniswap founder Hayden Adams publicly states BurgerSwap removed the only code line enforcing x*y=k from its Uniswap v2 fork, implying the vulnerability may have been intentional.","source":""},{"date":"2021-05-28","event":"BurgerSwap suspends protocol services and issues statement promising to cover user losses.","source":""},{"date":"2021-05-29","event":"SlowMist and PeckShield publish technical post-mortems confirming reentrancy vulnerability and missing constant-product formula enforcement.","source":""},{"date":"2021-06-01","event":"BurgerSwap publishes Go Forward Plan detailing cBURGER compensation token airdrop over 90-day linear distribution for affected liquidity providers.","source":""},{"date":"2022-01-01","event":"BurgerCities metaverse platform launches in alpha, marking effective rebranding from BurgerSwap.","source":""},{"date":"2022-08-01","event":"Maximum BURGER token supply tripled from 21 million to 63 million via governance decision, described as controversial by community members.","source":""}]},"v":1}Verify offline (run on your own machine)python -m src.verify_decision 91fad4e7-065f-45df-913b-bfd8e08c8456 - #2rescoreby systemsystem2026-10-10 18:43:15ZScore: 22 → 41 (+19)Rescored under Scoring v2, the published formula (avoid.net/scoring): 22 → 41. Problems weighed by who is responsible: concerns that are not fraud −9.6, the subject's own conduct −8, incidents the subject suffered −6.4, problems around the subject, caused by others −1.6; legitimacy credit long-running +2.anchoranchored
- chain
- ●mainnet-betaslot 455,363,322
- sig
4A4ARVVErhLN…Pauk6jkhexplorer ↗- hash
Eye2acD1pJE7…vF7teEPfsha256 → base58
verifying row…full verify ↗canonical bytes (671 B) ▸
{"actor":"system","decided_at":"2026-10-10T18:43:15.073Z","decision":"rescore","investigation_id":"eba94768-6699-40f8-921e-af5980db77fa","new_score":41,"page_slug":"burgerswap","prev_score":22,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 22 → 41. Problems weighed by who is responsible: concerns that are not fraud −9.6, the subject's own conduct −8, incidents the subject suffered −6.4, problems around the subject, caused by others −1.6; legitimacy credit long-running +2.","score_delta":19,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}Verify offline (run on your own machine)python -m src.verify_decision daf24797-de4d-4b19-ad90-b30627b178e4 - #3reviewby reviewerreviewer2026-11-03 23:39:58ZScore: 41 → 41 (no score change)The core narrative holds: a May 2021 flash loan and reentrancy exploit of about $7.2M across 14 transactions, Hayden Adams's comment on the removed x*y=k line, and the team's promise to cover losses are corroborated by The Block and search coverage. The price-drop figure differs between outlets (18% vs 27%), the May 27 vs May 28 dating in the compensation section is unexplained, and the ZachXBT statement is unsourced and unverified. Only a few claims were checked in depth because SlowMist and other sources were not readable and time was limited. Current status after 2022 is not established.anchoranchored
- chain
- ●mainnet-betaslot 465,086,861
- sig
3KomyWodeYcV…YFWxEeFAexplorer ↗- hash
9NrC6sAoFV5A…qmRaSzujsha256 → base58
verifying row…full verify ↗canonical bytes (1444 B) ▸
{"actor":"reviewer","artifact_identity":"853a34068bf2a1c431a0121621d52fd9","decided_at":"2026-11-03T23:39:58.915Z","decision":"review","disputed_pct":0.5,"findings_hash":"98SUcAdbPw95RmXAuFiNqz34TNA2TKKWygz83rLZrMVP","investigation_id":"eba94768-6699-40f8-921e-af5980db77fa","judge_def_hash":"750934ecb48272224909b7430fab271676d391380fbc821acbe7ee7e4cac2fa3","new_score":41,"omissions":{"material":0,"total":1},"page_content_hash":"483aa82579bfb9583544413dd7366fa322ef265f78d133f66c9257805f713ac7","page_slug":"burgerswap","prev_score":41,"reason":"The core narrative holds: a May 2021 flash loan and reentrancy exploit of about $7.2M across 14 transactions, Hayden Adams's comment on the removed x*y=k line, and the team's promise to cover losses are corroborated by The Block and search coverage. The price-drop figure differs between outlets (18% vs 27%), the May 27 vs May 28 dating in the compensation section is unexplained, and the ZachXBT statement is unsourced and unverified. Only a few claims were checked in depth because SlowMist and other sources were not readable and time was limited. Current status after 2022 is not established.","reviewer_def_hash":"3839668b232611e5b26db72079d64745f8e57e919b8a379e79b44ba4a52c845b","score_delta":0,"sequence_num":3,"subject_status":"rebranded","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}Verify offline (run on your own machine)python -m src.verify_decision 2fe31c3c-9fcf-4e21-8514-9246e005d8b1 - #4review reviseby judgejudge2026-11-03 23:39:59ZScore: 41 → 41 (no score change)The core account of the May 2021 flash loan and reentrancy exploit (about $7.2M, 14 transactions) was confirmed by independent reporting (claim_findings[0]). However, 3 of 6 checked claims could not be verified (50%, none blocked by the source): an uncited ZachXBT statement (claim_findings[4]), an unexplained May 27 versus May 28 date and unfound block height (claim_findings[3]), and current exchange listings (claim_findings[5]). Two further claims were only partly supported (price drop of 18% versus 27%, and the exact wording of the Hayden Adams quote). The penalty sits at the mild end of the band because the unverified items are peripheral, the reviewer's confidence was low (0.5), and the only omission, a 2025 token migration proposal, is minor.anchoranchored
- chain
- ●mainnet-betaslot 465,086,866
- sig
2bavQbYSWhH6…Jxgm44pVexplorer ↗- hash
5sfu6tRZfqrq…frdx1YSnsha256 → base58
verifying row…full verify ↗canonical bytes (1398 B) ▸
{"actor":"judge","artifact_identity":"853a34068bf2a1c431a0121621d52fd9","band_override":null,"decided_at":"2026-11-03T23:39:58.915Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.5,"investigation_id":"eba94768-6699-40f8-921e-af5980db77fa","judge_def_hash":"750934ecb48272224909b7430fab271676d391380fbc821acbe7ee7e4cac2fa3","new_score":41,"page_slug":"burgerswap","prev_score":41,"reason":"The core account of the May 2021 flash loan and reentrancy exploit (about $7.2M, 14 transactions) was confirmed by independent reporting (claim_findings[0]). However, 3 of 6 checked claims could not be verified (50%, none blocked by the source): an uncited ZachXBT statement (claim_findings[4]), an unexplained May 27 versus May 28 date and unfound block height (claim_findings[3]), and current exchange listings (claim_findings[5]). Two further claims were only partly supported (price drop of 18% versus 27%, and the exact wording of the Hayden Adams quote). The penalty sits at the mild end of the band because the unverified items are peripheral, the reviewer's confidence was low (0.5), and the only omission, a 2025 token migration proposal, is minor.","reviewer_def_hash":"3839668b232611e5b26db72079d64745f8e57e919b8a379e79b44ba4a52c845b","score_delta":0,"sequence_num":4,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}Verify offline (run on your own machine)python -m src.verify_decision 440d1315-053b-48b0-95aa-3ee2f8ac3f8b - #5rescoreby systemsystem2026-11-03 23:40:00ZScore: 41 → 49 (+8)Recalculated after the fact-check of 2026-11-03. Rescored under Scoring v2, the published formula (avoid.net/scoring): 41 → 49. Problems weighed by who is responsible: the subject's own conduct −8, incidents the subject suffered −6.4, concerns that are not fraud −3.2, problems around the subject, caused by others −0.8; legitimacy credit long-running +2; 3 section(s) set aside until a failed fact-check is resolved.anchoranchored
- chain
- ●mainnet-betaslot 465,086,871
- sig
4fJqAUNzLb6d…WSXcUXkbexplorer ↗- hash
EpsH3iapDUZM…uUBbUk5Xsha256 → base58
verifying row…full verify ↗canonical bytes (781 B) ▸
{"actor":"system","decided_at":"2026-11-03T23:39:58.915Z","decision":"rescore","investigation_id":"eba94768-6699-40f8-921e-af5980db77fa","new_score":49,"page_slug":"burgerswap","prev_score":41,"reason":"Recalculated after the fact-check of 2026-11-03. Rescored under Scoring v2, the published formula (avoid.net/scoring): 41 → 49. Problems weighed by who is responsible: the subject's own conduct −8, incidents the subject suffered −6.4, concerns that are not fraud −3.2, problems around the subject, caused by others −0.8; legitimacy credit long-running +2; 3 section(s) set aside until a failed fact-check is resolved.","score_delta":8,"score_model":"v2","sequence_num":5,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}Verify offline (run on your own machine)python -m src.verify_decision 841dfc1f-e445-49a0-9e2a-b20229addaae
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine —
python -m src.verify_decision <event_id>.