Audit log

Every state-changing event for Cardano: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

1. #1publishby system:backfill

   2026-05-18 23:07:52Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 420,649,377

   sig

   2SocEXLukbHT…SxP1RJ9Ucopyexplorer ↗

   hash

   AvK4pMCrEkoo…hU6WENemcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (4965 B) ▸

   {"actor":"system:backfill","investigation_id":"2710aef3-f667-49c3-8269-573b46ce6af9","kind":"publish","page_slug":"cardano","published_at":"2026-05-18T23:07:52.265Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Cardano","sections":[{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]}],"sources_used":[],"summary":"Cardano (ADA) holders face a persistent and multi-vector threat landscape that includes deepfake giveaway scams impersonating founder Charles Hoskinson, social media account hijackings used to promote fraudulent tokens, phishing campaigns distributing credential-stealing malware disguised as wallet software, and NFT-based wallet drainers. The Cardano Foundation's own X account was compromised in December 2024, resulting in the promotion of a fake token and false regulatory claims. State-sponsored actors including the North Korean Lazarus Group have also targeted ADA holders through the Atomic Wallet supply chain attack.","timeline":[{"date":"2020-07-01","event":"Cardano issues first public warning about fake ADA giveaway scams on YouTube, as hacked channels begin hosting fraudulent Hoskinson livestreams.","source":"","source_url":"https://cointelegraph.com/news/cardano-warns-of-youtube-scams-promoting-fake-ada-giveaways"},{"date":"2021-07-01","event":"YouTube channel of influencer Ashkar Techy (650,000 followers) hacked and renamed to promote fake Cardano ADA giveaway livestream.","source":"","source_url":"https://cryptocoin.news/news/scam-alert-new-series-of-hacks-against-youtube-channels-impersonating-official-cardano-announcements-53509/"},{"date":"2021-09-20","event":"Cardano reiterates it will 'never give away ADA' following a new wave of YouTube giveaway scam attacks targeting ADA holders.","source":"","source_url":"https://en.cryptonomist.ch/2021/09/20/cardano-never-give-away-ada/"},{"date":"2023-06-03","event":"Atomic Wallet suffers a $35M+ hack attributed by Elliptic to the North Korean Lazarus Group; ADA is among the stolen cryptocurrencies across multiple victims.","source":"","source_url":"https://www.bleepingcomputer.com/news/security/lazarus-hackers-linked-to-the-35-million-atomic-wallet-heist/"},{"date":"2023-12-14","event":"Cardano community warns of fake Berry Pool NFT rewards scam draining over 200,000 ADA from victims who connected wallets to a fraudulent site.","source":"","source_url":"https://cryptopotato.com/watch-out-cardano-ada-users-alerted-to-stay-away-from-this-dangerous-scam/"},{"date":"2023-12-15","event":"AI-generated deepfake video of Charles Hoskinson endorsing a fake ADA giveaway surfaces as a YouTube advertisement, directing victims to a fraudulent website.","source":"","source_url":"https://thecryptobasic.com/2023/12/15/scammers-promote-fake-ada-giveaway-using-ai-cloned-video-of-cardano-founder/"},{"date":"2024-04-01","event":"Lace wallet team issues alert about fake Lace wallet apps on Apple App Store and Google Play Store designed to steal recovery phrases from ADA holders.","source":"","source_url":"https://u.today/security-alert-ada-users-targeted-by-fake-cardano-wallet-updates-with-malware"},{"date":"2024-10-03","event":"Fraudulent email campaign targets ADA holders with fake Chang hard fork token migration instructions, directing victims to wallet-draining sites.","source":"","source_url":"https://www.cryptotimes.io/2024/10/03/fake-cardano-token-migration-emails-target-ada-holders/"},{"date":"2024-12-08","event":"Cardano Foundation's official X account is compromised; hackers promote fake 'ADAsol' token generating $500K in volume before crashing 99%, and post false SEC lawsuit claim causing a 4% ADA price drop.","source":"","source_url":"https://cryptobriefing.com/cardano-foundation-hacked-false-sec-claims/"},{"date":"2024-12-12","event":"Cardano Foundation regains control of its X account; confirms no other systems were affected by the breach.","source":"","source_url":"https://u.today/cardano-foundation-addresses-x-account-hack-heres-what-happened"},{"date":"2025-01-01","event":"Fake 'Eternl Desktop' phishing campaign distributes malware-laden installer (Eternl.msi) embedding a LogMeIn remote access tool to gain persistent unauthorized access to Cardano users' machines.","source":"","source_url":"https://cybersecuritynews.com/potential-wallet-phishing-campaign-targets-cardano-users/"},{"date":"2026-03-24","event":"Cardano Lace wallet team flags fraudulent site lacedesktop.io and fake 'Lace Desktop 2.0' phishing emails circulating within the ADA community.","source":"","source_url":"https://u.today/security-alert-ada-users-targeted-by-fake-cardano-wallet-updates-with-malware"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 9195e01b-a8d9-4643-a342-01b7d9d8b98bcopy
2. #2reviewby reviewerreviewer

   2026-06-13 21:10:13Z
   Score: 32 → 32 (no score change)
   The page's factual claims are largely accurate and independently verifiable. The two most significant issues are: (1) the Eternl Desktop campaign is misdated as January 2025 when it actually occurred in late December 2025/early January 2026, and (2) a single u.today URL is incorrectly cited for two distinct events — it correctly supports the March 2026 Lace phishing alert but does not support the April 2024 App Store fake app claim. The cited CoinTelegraph URL for the July 2020 Cardano YouTube scam warning returns a 404, though the underlying event is corroborated by other live sources. No material facts are disputed by credible counter-sources.
   anchoranchored

   chain

   ●mainnet-betaslot 426,277,734

   sig

   bTuGaybNVWyw…LbzfM2yPcopyexplorer ↗

   hash

   8nsAsE9kUg93…WbpLzg1mcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (996 B) ▸

   {"actor":"reviewer","decided_at":"2026-06-13T21:10:13.778Z","decision":"review","investigation_id":"2710aef3-f667-49c3-8269-573b46ce6af9","new_score":32,"page_slug":"cardano","prev_score":32,"reason":"The page's factual claims are largely accurate and independently verifiable. The two most significant issues are: (1) the Eternl Desktop campaign is misdated as January 2025 when it actually occurred in late December 2025/early January 2026, and (2) a single u.today URL is incorrectly cited for two distinct events — it correctly supports the March 2026 Lace phishing alert but does not support the April 2024 App Store fake app claim. The cited CoinTelegraph URL for the July 2020 Cardano YouTube scam warning returns a 404, though the underlying event is corroborated by other live sources. No material facts are disputed by credible counter-sources.","score_delta":0,"sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision baf06bee-5d4f-4b5e-8b32-020ae2b585d0copy
3. #3review reviseby judgejudge

   2026-06-13 21:10:13Z
   Score: 32 → 27 (-5)
   The page's core factual record is sound — 9 of 15 claims are fully confirmed, zero are disputed by credible counter-sources, and the disputed_pct of 7% falls within the approve band. However, two concrete errors push the verdict to revise: claim_findings[13] places the Eternl Desktop phishing campaign in January 2025 when the cited source dates it to late December 2025 / early January 2026 (an off-by-one-year misdating), and claim_findings[9] applies a URL that resolves to a March 2026 article as the citation for a separate April 2024 App Store incident, leaving that timeline entry unsourced. Additionally, two high-priority coverage gaps — all six body sections are empty and no on-chain data is cited for any traceable incident — limit the page's utility and warrant expansion before it can be considered complete.
   anchoranchored

   chain

   ●mainnet-betaslot 426,277,737

   sig

   Xhge94siTNzW…k3ckACxLcopyexplorer ↗

   hash

   8Zoh2CfowmTj…XXAoNS8Tcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1171 B) ▸

   {"actor":"judge","decided_at":"2026-06-13T21:10:13.778Z","decision":"review_revise","investigation_id":"2710aef3-f667-49c3-8269-573b46ce6af9","new_score":27,"page_slug":"cardano","prev_score":32,"reason":"The page's core factual record is sound — 9 of 15 claims are fully confirmed, zero are disputed by credible counter-sources, and the disputed_pct of 7% falls within the approve band. However, two concrete errors push the verdict to revise: claim_findings[13] places the Eternl Desktop phishing campaign in January 2025 when the cited source dates it to late December 2025 / early January 2026 (an off-by-one-year misdating), and claim_findings[9] applies a URL that resolves to a March 2026 article as the citation for a separate April 2024 App Store incident, leaving that timeline entry unsourced. Additionally, two high-priority coverage gaps — all six body sections are empty and no on-chain data is cited for any traceable incident — limit the page's utility and warrant expansion before it can be considered complete.","score_delta":-5,"sequence_num":3,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision d4ded94f-fe52-4b71-add2-16c3e1263576copy
4. #4reviewby reviewerreviewer

   2026-06-14 16:51:23Z
   Score: 27 → 27 (no score change)
   Blue-chip calibration review (Prompt A). Verdict: over-penalized. Page content is treated as accurate; the trust_score band is miscalibrated. Cardano (ADA) is a legitimate, peer-reviewed, institutionally recognized blockchain platform operated by a Swiss non-profit foundation (Cardano Foundation), a research engineering company (IOG/Input Output Global), and a commercial entity (EMURGO). Every single incident in the page's 12-entry timeline describes third-party attackers — YouTube channel hijackers, North Korean state hackers targeting Atomic Wallet, NFT phishing operators, fake app developers, and phishing email campaigns — exploiting Cardano's brand and user base. The page's own summary uses language that presupposes Cardano is a victim ("holders encounter multiple threat vectors"). There is no evidence of fraud, exit scam, Ponzi mechanics, or any regulatory enforcement action against Cardano itself; the fake SEC lawsuit claim cited in the timeline was fabricated by the attacker who breached the Foundation's X account, not by Cardano. Independent verification confirms that CME Group launched ADA futures in February 2026, multiple major asset managers have filed for spot ADA ETFs, ADA was included in the U.S. national digital asset reserve, and the SEC has not taken enforcement action against Cardano. Under the post-policy band semantics, a score of 32 (WARNING) is appropriate only for entities with elevated fraud/loss risk or unresolved severe incidents — Cardano meets neither criterion. The incidents on the page are precisely the kind of scam-ecosystem activity that affects every major cryptocurrency (Bitcoin, Ethereum, Solana all have analogous pages of third-party impersonation scams) and should be documented as CAUTIONARY consumer-awareness notes, not WARNING-band risk signals. A score of 72 (VERIFIED) is appropriate: legitimate with well-documented third-party threat vectors that users should know about, but no unresolved incidents attributable to the entity itself.
   anchoranchored

   chain

   ●mainnet-betaslot 426,456,184

   sig

   59YNGhpcXT8J…aewwjpcDcopyexplorer ↗

   hash

   8thsTXu1kFjU…BcnCpBZEcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (2353 B) ▸

   {"actor":"reviewer","decided_at":"2026-06-14T16:51:23.088Z","decision":"review","investigation_id":"2710aef3-f667-49c3-8269-573b46ce6af9","new_score":27,"page_slug":"cardano","prev_score":27,"reason":"Blue-chip calibration review (Prompt A). Verdict: over-penalized. Page content is treated as accurate; the trust_score band is miscalibrated. Cardano (ADA) is a legitimate, peer-reviewed, institutionally recognized blockchain platform operated by a Swiss non-profit foundation (Cardano Foundation), a research engineering company (IOG/Input Output Global), and a commercial entity (EMURGO). Every single incident in the page's 12-entry timeline describes third-party attackers — YouTube channel hijackers, North Korean state hackers targeting Atomic Wallet, NFT phishing operators, fake app developers, and phishing email campaigns — exploiting Cardano's brand and user base. The page's own summary uses language that presupposes Cardano is a victim (\"holders encounter multiple threat vectors\"). There is no evidence of fraud, exit scam, Ponzi mechanics, or any regulatory enforcement action against Cardano itself; the fake SEC lawsuit claim cited in the timeline was fabricated by the attacker who breached the Foundation's X account, not by Cardano. Independent verification confirms that CME Group launched ADA futures in February 2026, multiple major asset managers have filed for spot ADA ETFs, ADA was included in the U.S. national digital asset reserve, and the SEC has not taken enforcement action against Cardano. Under the post-policy band semantics, a score of 32 (WARNING) is appropriate only for entities with elevated fraud/loss risk or unresolved severe incidents — Cardano meets neither criterion. The incidents on the page are precisely the kind of scam-ecosystem activity that affects every major cryptocurrency (Bitcoin, Ethereum, Solana all have analogous pages of third-party impersonation scams) and should be documented as CAUTIONARY consumer-awareness notes, not WARNING-band risk signals. A score of 72 (VERIFIED) is appropriate: legitimate with well-documented third-party threat vectors that users should know about, but no unresolved incidents attributable to the entity itself.","score_delta":0,"sequence_num":4,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 3106f57e-62e3-4397-9e3a-cad64446cbbbcopy
5. #5review approveby judgejudge

   2026-06-14 16:51:23Z
   Score: 27 → 67 (+40)
   This is a severity-calibration adjudication, not a fact dispute. All six claim findings (claim_findings[0] through claim_findings[5]) are supported, and disputed_pct is 0% — the page content is accurate and stands. The current score of 32 (WARNING band) is demonstrably too harsh: every one of the 12 timeline entries documents third-party actors exploiting Cardano's brand and user base; none are attributable to Cardano itself (claim_findings[4]). The page's own language frames Cardano as a victim target, not a perpetrator (claim_findings[0]). Meanwhile the score omits material legitimacy counterweights — Swiss non-profit governance, CME futures launched February 2026, multiple spot ETF filings, and inclusion in the U.S. national digital asset reserve (claim_findings[3]) — that a properly calibrated score must weigh. A delta of +40 corrects the score to 72 (VERIFIED), consistent with the reviewer's recommendation and supported at 0.91 confidence.
   anchoranchored

   chain

   ●mainnet-betaslot 426,456,187

   sig

   4hAeiP5dvCwU…Ddgwh7rPcopyexplorer ↗

   hash

   JArC3BymDxZX…mVigpAKgcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1307 B) ▸

   {"actor":"judge","decided_at":"2026-06-14T16:51:23.088Z","decision":"review_approve","investigation_id":"2710aef3-f667-49c3-8269-573b46ce6af9","new_score":67,"page_slug":"cardano","prev_score":27,"reason":"This is a severity-calibration adjudication, not a fact dispute. All six claim findings (claim_findings[0] through claim_findings[5]) are supported, and disputed_pct is 0% — the page content is accurate and stands. The current score of 32 (WARNING band) is demonstrably too harsh: every one of the 12 timeline entries documents third-party actors exploiting Cardano's brand and user base; none are attributable to Cardano itself (claim_findings[4]). The page's own language frames Cardano as a victim target, not a perpetrator (claim_findings[0]). Meanwhile the score omits material legitimacy counterweights — Swiss non-profit governance, CME futures launched February 2026, multiple spot ETF filings, and inclusion in the U.S. national digital asset reserve (claim_findings[3]) — that a properly calibrated score must weigh. A delta of +40 corrects the score to 72 (VERIFIED), consistent with the reviewer's recommendation and supported at 0.91 confidence.","score_delta":40,"sequence_num":5,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 42bfe738-c81b-4790-9b5f-9a7f2dbf3ee7copy
6. #6reviewby reviewerreviewer

   2026-06-14 23:16:25Z
   Score: 67 → 67 (no score change)
   Blue-chip calibration review (Prompt A). Verdict: over-penalized. Page content is treated as accurate; the trust_score band is miscalibrated. Cardano (ADA) is a legitimate, peer-reviewed, institutionally recognized blockchain platform operated by a Swiss non-profit foundation (Cardano Foundation), a research engineering company (IOG/Input Output Global), and a commercial entity (EMURGO). Every single incident in the page's 12-entry timeline describes third-party attackers — YouTube channel hijackers, North Korean state hackers targeting Atomic Wallet, NFT phishing operators, fake app developers, and phishing email campaigns — exploiting Cardano's brand and user base. The page's own summary uses language that presupposes Cardano is a victim ("holders encounter multiple threat vectors"). There is no evidence of fraud, exit scam, Ponzi mechanics, or any regulatory enforcement action against Cardano itself; the fake SEC lawsuit claim cited in the timeline was fabricated by the attacker who breached the Foundation's X account, not by Cardano. Independent verification confirms that CME Group launched ADA futures in February 2026, multiple major asset managers have filed for spot ADA ETFs, ADA was included in the U.S. national digital asset reserve, and the SEC has not taken enforcement action against Cardano. Under the post-policy band semantics, a score of 32 (WARNING) is appropriate only for entities with elevated fraud/loss risk or unresolved severe incidents — Cardano meets neither criterion. The incidents on the page are precisely the kind of scam-ecosystem activity that affects every major cryptocurrency (Bitcoin, Ethereum, Solana all have analogous pages of third-party impersonation scams) and should be documented as CAUTIONARY consumer-awareness notes, not WARNING-band risk signals. A score of 72 (VERIFIED) is appropriate: legitimate with well-documented third-party threat vectors that users should know about, but no unresolved incidents attributable to the entity itself.
   anchoranchored

   chain

   ●mainnet-betaslot 426,514,985

   sig

   2pToz2Xwfv8m…ADvzE1bccopyexplorer ↗

   hash

   9sbRdWpmvAsY…snaMWMCUcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (2353 B) ▸

   {"actor":"reviewer","decided_at":"2026-06-14T23:16:25.228Z","decision":"review","investigation_id":"2710aef3-f667-49c3-8269-573b46ce6af9","new_score":67,"page_slug":"cardano","prev_score":67,"reason":"Blue-chip calibration review (Prompt A). Verdict: over-penalized. Page content is treated as accurate; the trust_score band is miscalibrated. Cardano (ADA) is a legitimate, peer-reviewed, institutionally recognized blockchain platform operated by a Swiss non-profit foundation (Cardano Foundation), a research engineering company (IOG/Input Output Global), and a commercial entity (EMURGO). Every single incident in the page's 12-entry timeline describes third-party attackers — YouTube channel hijackers, North Korean state hackers targeting Atomic Wallet, NFT phishing operators, fake app developers, and phishing email campaigns — exploiting Cardano's brand and user base. The page's own summary uses language that presupposes Cardano is a victim (\"holders encounter multiple threat vectors\"). There is no evidence of fraud, exit scam, Ponzi mechanics, or any regulatory enforcement action against Cardano itself; the fake SEC lawsuit claim cited in the timeline was fabricated by the attacker who breached the Foundation's X account, not by Cardano. Independent verification confirms that CME Group launched ADA futures in February 2026, multiple major asset managers have filed for spot ADA ETFs, ADA was included in the U.S. national digital asset reserve, and the SEC has not taken enforcement action against Cardano. Under the post-policy band semantics, a score of 32 (WARNING) is appropriate only for entities with elevated fraud/loss risk or unresolved severe incidents — Cardano meets neither criterion. The incidents on the page are precisely the kind of scam-ecosystem activity that affects every major cryptocurrency (Bitcoin, Ethereum, Solana all have analogous pages of third-party impersonation scams) and should be documented as CAUTIONARY consumer-awareness notes, not WARNING-band risk signals. A score of 72 (VERIFIED) is appropriate: legitimate with well-documented third-party threat vectors that users should know about, but no unresolved incidents attributable to the entity itself.","score_delta":0,"sequence_num":6,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 4d0d6736-be9e-403a-8732-5423b7464f37copy
7. #7review approveby judgejudge

   2026-06-14 23:16:25Z
   Score: 67 → 72 (+5)
   This is a severity-calibration adjudication, not a fact dispute. All six claim findings (claim_findings[0] through claim_findings[5]) are supported, and disputed_pct is 0% — the page content is accurate and stands. The current score of 32 (WARNING band) is demonstrably too harsh: every one of the 12 timeline entries documents third-party actors exploiting Cardano's brand and user base; none are attributable to Cardano itself (claim_findings[4]). The page's own language frames Cardano as a victim target, not a perpetrator (claim_findings[0]). Meanwhile the score omits material legitimacy counterweights — Swiss non-profit governance, CME futures launched February 2026, multiple spot ETF filings, and inclusion in the U.S. national digital asset reserve (claim_findings[3]) — that a properly calibrated score must weigh. A delta of +40 corrects the score to 72 (VERIFIED), consistent with the reviewer's recommendation and supported at 0.91 confidence.
   anchoranchored

   chain

   ●mainnet-betaslot 426,514,988

   sig

   4ZZprkEG43eU…EToyjEQfcopyexplorer ↗

   hash

   EsY89NKMGERK…uRfbz8Yocopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1306 B) ▸

   {"actor":"judge","decided_at":"2026-06-14T23:16:25.228Z","decision":"review_approve","investigation_id":"2710aef3-f667-49c3-8269-573b46ce6af9","new_score":72,"page_slug":"cardano","prev_score":67,"reason":"This is a severity-calibration adjudication, not a fact dispute. All six claim findings (claim_findings[0] through claim_findings[5]) are supported, and disputed_pct is 0% — the page content is accurate and stands. The current score of 32 (WARNING band) is demonstrably too harsh: every one of the 12 timeline entries documents third-party actors exploiting Cardano's brand and user base; none are attributable to Cardano itself (claim_findings[4]). The page's own language frames Cardano as a victim target, not a perpetrator (claim_findings[0]). Meanwhile the score omits material legitimacy counterweights — Swiss non-profit governance, CME futures launched February 2026, multiple spot ETF filings, and inclusion in the U.S. national digital asset reserve (claim_findings[3]) — that a properly calibrated score must weigh. A delta of +40 corrects the score to 72 (VERIFIED), consistent with the reviewer's recommendation and supported at 0.91 confidence.","score_delta":5,"sequence_num":7,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision a80e56d6-4cd6-4b3d-b7f4-372cf5b801b2copy