Audit log

Every state-changing event for Compounder Finance: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-25 17:34:24Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 422,113,828

   sig

   4jXPLmrjD1ya…5wDfkhndcopyexplorer ↗

   hash

   FP9jCKcrv7dJ…Zh8EG6zccopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (6148 B) ▸

   {"actor":"system:backfill","investigation_id":"312d7168-4587-4013-b950-2b2717d3aa4a","kind":"publish","page_slug":"compounder-finance","published_at":"2026-05-25T17:34:24.060Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Compounder Finance","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/tech/2020/12/02/108m-stolen-developers-implicated-in-alleged-smart-contract-rug-pull","type":"other","url":""},{"credibility":3,"name":"https://coingeek.com/compounder-dev-team-steals-over-10-million-in-latest-defi-attack/","type":"other","url":""},{"credibility":3,"name":"https://etherscan.io/token/0x7ef1081ecc8b5b5b130656a41d4ce4f89dbbcc8c","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/tech/2020/12/02/108m-stolen-developers-implicated-in-alleged-smart-contract-rug-pull","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/50196/defi-auditor-death-threats-12-million-rug-pull","type":"other","url":""},{"credibility":3,"name":"https://cryptoslate.com/this-defi-app-based-on-ethereum-just-stole-12-million-from-its-users/","type":"other","url":""},{"credibility":3,"name":"https://coingeek.com/compounder-dev-team-steals-over-10-million-in-latest-defi-attack/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/tech/2020/12/02/108m-stolen-developers-implicated-in-alleged-smart-contract-rug-pull","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/50196/defi-auditor-death-threats-12-million-rug-pull","type":"other","url":""},{"credibility":3,"name":"https://www.quadrigainitiative.com/casestudy/compounderfinancerugpull.php","type":"other","url":""},{"credibility":3,"name":"https://coingeek.com/compounder-dev-team-steals-over-10-million-in-latest-defi-attack/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://decrypt.co/50196/defi-auditor-death-threats-12-million-rug-pull","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/tech/2020/12/02/108m-stolen-developers-implicated-in-alleged-smart-contract-rug-pull","type":"other","url":""},{"credibility":3,"name":"https://coingeek.com/compounder-dev-team-steals-over-10-million-in-latest-defi-attack/","type":"other","url":""},{"credibility":3,"name":"https://www.quadrigainitiative.com/casestudy/compounderfinancerugpull.php","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.quadrigainitiative.com/casestudy/compounderfinancerugpull.php","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/tech/2020/12/02/108m-stolen-developers-implicated-in-alleged-smart-contract-rug-pull","type":"other","url":""},{"credibility":3,"name":"https://chainbulletin.com/compounder-finance-developers-allegedly-involved-in-10-8-million-rug-pull-scheme","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/tech/2020/12/02/108m-stolen-developers-implicated-in-alleged-smart-contract-rug-pull","type":"other","url":""},{"credibility":3,"name":"https://cryptoslate.com/this-defi-app-based-on-ethereum-just-stole-12-million-from-its-users/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://decrypt.co/50196/defi-auditor-death-threats-12-million-rug-pull","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/tech/2020/12/02/108m-stolen-developers-implicated-in-alleged-smart-contract-rug-pull","type":"other","url":""},{"credibility":3,"name":"https://www.quadrigainitiative.com/casestudy/compounderfinancerugpull.php","type":"other","url":""}]}],"sources_used":[],"summary":"Compounder Finance was an Ethereum-based DeFi yield aggregator that launched in November 2020 and executed a deliberate rug pull approximately 22 days later, stealing between $10.8 million and $12.5 million from investors. Anonymous developers embedded hidden 'Evil Strategy' smart contracts behind a publicly visible but unmonitored 24-hour timelock, then drained all user funds and deleted the project's website and social media accounts. No funds were recovered and the perpetrators have never been publicly identified.","timeline":[{"date":"2020-11-08","event":"Compounder Finance smart contract deployed on Ethereum (CP3R token contract: 0x7ef1081ecc8b5b5b130656a41d4ce4f89dbbcc8c).","source":""},{"date":"2020-11-19","event":"Solidity Finance releases audit report, flagging centralized developer control over strategy pools via a 24-hour timelock but concluding the protocol is safe from external attacks.","source":""},{"date":"2020-11-19","event":"In the weeks following the audit, developers begin deploying malicious 'Evil Strategy' contracts through the publicly visible but unmonitored timelock.","source":""},{"date":"2020-12-01","event":"Developers execute the rug pull, calling inCaseStrategyTokenGetStuck() across seven malicious strategy contracts and draining all user funds. Website, Twitter, Medium, and Discord are deleted.","source":""},{"date":"2020-12-02","event":"CoinDesk reports $10.8 million stolen; Compound Finance founder Robert Leshner publicly condemns the scheme and confirms no affiliation.","source":""},{"date":"2020-12-02","event":"CP3R token collapses approximately 98.8% in 24 hours, trading at $0.24.","source":""},{"date":"2020-12-03","event":"Decrypt reports Solidity Finance received death threats within 36 hours of the rug pull. DeFiYield.info — which claims $1 million in losses — announces a $50,000 bounty for information leading to fund recovery and organizes a Telegram victim group.","source":""},{"date":"2020-12-03","event":"Solidity Finance publicly acknowledges it should have been clearer about the implications of developer-controlled admin keys and commits to more robust future disclosures.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision e773ee2c-952e-4cf8-a827-aa4973a1cb5dcopy
2. #2rescoreby systemsystem

   2026-10-27 05:34:48Z
   Score: 2 → 0 (-2)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 2 → 0. The page establishes that the subject is itself a scheme, so the score is 0.
   anchoranchored

   chain

   ●mainnet-betaslot 461,954,096

   sig

   5YYgr3Sbjse9…bcZZ6Ymmcopyexplorer ↗

   hash

   59B3yEVjjEzK…fAZfUb5icopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (524 B) ▸

   {"actor":"system","decided_at":"2026-10-27T05:34:48.535Z","decision":"rescore","investigation_id":"312d7168-4587-4013-b950-2b2717d3aa4a","new_score":0,"page_slug":"compounder-finance","prev_score":2,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 2 → 0. The page establishes that the subject is itself a scheme, so the score is 0.","score_delta":-2,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 51321359-39ad-4708-9af6-9ef92d8a54f7copy
3. #3reviewby reviewerreviewer

   2026-11-02 00:27:13Z
   Score: 0 → 0 (no score change)
   The core narrative holds: a rug pull on Dec 1, 2020, with $10.8M to $12.5M stolen, an audit on Nov 19 and an unmonitored 24-hour timelock. Several details are weaker. The launch date is Nov 8 or 9 on the page but Nov 10 in CoinDesk. The Tornado.cash routing and the function and strategy details are not in the cited CoinDesk article. The claim that Solidity committed to future disclosures is not supported by Decrypt. Timeline entries carry no sources.
   anchoranchored

   chain

   ●mainnet-betaslot 464,293,357

   sig

   4k6AiujR5q9J…UkHhmtKacopyexplorer ↗

   hash

   D13tDQoXZac9…ccQcz7jocopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1273 B) ▸

   {"actor":"reviewer","artifact_identity":"d62931ecffe374d30a74288065223821","decided_at":"2026-11-02T00:27:13.465Z","decision":"review","disputed_pct":0.3077,"findings_hash":"FBVZzQgAGp3dzoqbsLFqRu9qn94z8bZkhvu3oYayQ6wA","investigation_id":"312d7168-4587-4013-b950-2b2717d3aa4a","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":0,"page_content_hash":"f6cd2f702f5fbc7e673d71ac27ea9d89e7ca29a736b85e48ac251e883eb1c231","page_slug":"compounder-finance","prev_score":0,"reason":"The core narrative holds: a rug pull on Dec 1, 2020, with $10.8M to $12.5M stolen, an audit on Nov 19 and an unmonitored 24-hour timelock. Several details are weaker. The launch date is Nov 8 or 9 on the page but Nov 10 in CoinDesk. The Tornado.cash routing and the function and strategy details are not in the cited CoinDesk article. The claim that Solidity committed to future disclosures is not supported by Decrypt. Timeline entries carry no sources.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"sequence_num":3,"subject_status":"shut_down","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision c59aee0b-3c4f-4a87-b148-fdf24cbdff8acopy
4. #4review reviseby judgejudge

   2026-11-02 00:27:13Z
   Score: 0 → 0 (no score change)
   The core account holds: the amount stolen, the Dec 1, 2020 rug pull date, the exploit address and token drop, the audit and the unmonitored timelock were confirmed against CoinDesk and Decrypt (claim_findings[0], [3], [7], [8]). Counting disputed and unverifiable findings gives 4 of 13 (about 31%), just over the 30% line. Two of those four, claim_findings[9] and [10], are the same defect (the unsupported claim that Solidity Finance committed to better future disclosures), so counting it once gives about 25%. The remaining issues are the launch date conflicting with CoinDesk (claim_findings[1], [2]), the unsourced Tornado.cash routing (claim_findings[6]) and timeline entries with no sources. The page is rated at the top of the minor band, and the unsupported Solidity commitment and launch date should be corrected.
   anchoranchored

   chain

   ●mainnet-betaslot 464,293,362

   sig

   2kppGDsrUmJC…vLaAjAkAcopyexplorer ↗

   hash

   F817XRG6r6pv…ByoE3ymLcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1474 B) ▸

   {"actor":"judge","artifact_identity":"d62931ecffe374d30a74288065223821","band_override":null,"decided_at":"2026-11-02T00:27:13.465Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.3077,"investigation_id":"312d7168-4587-4013-b950-2b2717d3aa4a","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":0,"page_slug":"compounder-finance","prev_score":0,"reason":"The core account holds: the amount stolen, the Dec 1, 2020 rug pull date, the exploit address and token drop, the audit and the unmonitored timelock were confirmed against CoinDesk and Decrypt (claim_findings[0], [3], [7], [8]). Counting disputed and unverifiable findings gives 4 of 13 (about 31%), just over the 30% line. Two of those four, claim_findings[9] and [10], are the same defect (the unsupported claim that Solidity Finance committed to better future disclosures), so counting it once gives about 25%. The remaining issues are the launch date conflicting with CoinDesk (claim_findings[1], [2]), the unsourced Tornado.cash routing (claim_findings[6]) and timeline entries with no sources. The page is rated at the top of the minor band, and the unsupported Solidity commitment and launch date should be corrected.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"sequence_num":4,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 4ca71001-9197-4cb3-b345-979d7d560569copy