Audit log

Every state-changing event for CREAM Lending: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-21 17:13:06Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 421,244,930

   sig

   2eSyj1DpDcNW…BrsrYvcwcopyexplorer ↗

   hash

   EWVe2GrDCwHN…SFtFcmJLcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (8106 B) ▸

   {"actor":"system:backfill","investigation_id":"3da751e1-b8be-425d-9938-6197061f36fb","kind":"publish","page_slug":"cream-lending","published_at":"2026-05-21T17:13:06.780Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"CREAM Lending","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://coinbureau.com/review/cream-finance","type":"other","url":""},{"credibility":3,"name":"https://phemex.com/academy/what-is-cream-finance","type":"other","url":""},{"credibility":3,"name":"https://thedefiant.io/news/hacks/cream-finance-third-largest-exploit","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://thedefiant.io/cream-and-alpha-finance-get-hacked-for-37-5m","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/alpha-homora-loses-37-million-following-iron-bank-exploit","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/57660/a-37-million-defi-heist-cost-attackers-just-15000-in-transaction-fees","type":"other","url":""},{"credibility":3,"name":"https://coingape.com/cream-finance-gets-exploited-for-37-5-million/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-cream-finance-hack-august-2021","type":"other","url":""},{"credibility":3,"name":"https://www.theregister.com/2021/08/31/cream_finance_theft","type":"other","url":""},{"credibility":3,"name":"https://finance.yahoo.com/news/defi-protocol-cream-finance-exploited-015120517.html","type":"other","url":""},{"credibility":3,"name":"https://slowmist.medium.com/slowmist-brief-analysis-of-cream-finance-hacked-event-30b18e1db8c","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-cream-finance-hack-october-2021","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/business/2021/10/27/cream-finance-exploited-in-flash-loan-attack-worth-over-100m","type":"other","url":""},{"credibility":3,"name":"https://www.theblock.co/post/122241/ethereum-defi-protocol-cream-finance-hacked-for-115-million","type":"other","url":""},{"credibility":3,"name":"https://therecord.media/hackers-steal-130-million-from-cream-finance-the-companys-3rd-hack-this-year","type":"other","url":""},{"credibility":3,"name":"https://www.bloomberg.com/news/articles/2021-10-27/defi-protocol-cream-finance-loses-130-million-in-latest-hack","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/84590/cream-finance-suffers-third-hack-losing-over-130-million","type":"other","url":""},{"credibility":3,"name":"https://medium.com/immunefi/hack-analysis-cream-finance-oct-2021-fc222d913fc5","type":"other","url":""},{"credibility":3,"name":"https://rekt.news/cream-rekt-2","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-cream-finance-hack-august-2021","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/84590/cream-finance-suffers-third-hack-losing-over-130-million","type":"other","url":""},{"credibility":3,"name":"https://medium.com/immunefi/hack-analysis-cream-finance-oct-2021-fc222d913fc5","type":"other","url":""},{"credibility":3,"name":"https://www.theregister.com/2021/08/31/cream_finance_theft","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/business/2021/11/14/cream-plunges-on-news-that-hack-compensation-will-inflate-token-supply","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/currencies/cream-finance/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/@investigationsbyzachxbt/22-000-eth-embezzled-and-over-ten-projects-failed-the-story-of-machi-big-brother-jeff-huang-a1ad073fcfa8","type":"other","url":""},{"credibility":3,"name":"https://www.theblock.co/post/235220/crypto-sleuth-zachxbt-sued-for-defamation","type":"other","url":""},{"credibility":3,"name":"https://blockworks.co/news/jeffrey-huang-zachxbt-defamation","type":"other","url":""},{"credibility":3,"name":"https://www.theblock.co/post/244776/jeffrey-machi-big-brother-huang-drops-defamation-suit-against-crypto-sleuth-zachxbt","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/machi-big-brother-withdraws-defamation-lawsuit-against-zachxbt","type":"other","url":""},{"credibility":3,"name":"https://nftnow.com/news/nft-pro-trader-machi-big-brother-files-defamation-suit-against-web3-sleuth-zachxbt/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://coinmarketcap.com/currencies/cream-finance/","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/business/2021/11/14/cream-plunges-on-news-that-hack-compensation-will-inflate-token-supply","type":"other","url":""},{"credibility":3,"name":"https://www.web3isgoinggreat.com/?collection=cream","type":"other","url":""}]}],"sources_used":[],"summary":"C.R.E.A.M. Finance (Crypto Rules Everything Around Me) is a decentralized lending and borrowing protocol launched in August 2020, forked from Compound Finance. The protocol suffered three major exploits in 2021 totaling approximately $185 million in losses, making it one of the most frequently and severely hacked DeFi protocols in history. On-chain investigator ZachXBT flagged the protocol and its founders, and the CREAM token has collapsed more than 99% from its all-time high.","timeline":[{"date":"2020-08-03","event":"CREAM Finance launches on Ethereum, forked from Compound Finance, co-founded by Jeffrey Huang and Leo Cheng.","source":""},{"date":"2021-02-04","event":"CREAM token reaches all-time high of $373.16.","source":""},{"date":"2021-02-13","event":"Hack 1: CREAM Finance Iron Bank exploited via Alpha Homora V2 uncollateralized lending vulnerability. Approximately $37.5 million lost across ETH, USDC, USDT, and DAI. CREAM and ALPHA tokens fall ~30%.","source":""},{"date":"2021-08-30","event":"Hack 2: CREAM Finance exploited via ERC-777 reentrancy vulnerability in AMP token integration. Approximately 2,804 ETH and 462 million AMP tokens drained, worth $18.8–25 million. AMP token price falls ~15%.","source":""},{"date":"2021-10-27","event":"Hack 3: CREAM Finance suffers largest exploit — approximately $130 million drained via flash loan oracle price manipulation against yUSDVault. Third-largest DeFi hack recorded at the time. CREAM token falls over 30%.","source":""},{"date":"2021-10-27","event":"CREAM Finance posts on-chain message to attacker: 'you win. we're rekt. please return funds.' A 10% bounty offer yields no recovery.","source":""},{"date":"2021-11-14","event":"CREAM announces hack compensation plan: 1.45 million CREAM tokens to be issued from treasury, dramatically expanding circulating supply. Token drops from ~$88 to ~$51.","source":""},{"date":"2022-06-16","event":"ZachXBT publishes article alleging CREAM co-founder Jeffrey Huang (Machi Big Brother) embezzled 22,000 ETH from Formosa Financial and lists CREAM among over ten failed projects.","source":""},{"date":"2022-09-12","event":"CoinDesk reports CREAM Finance exploiter converts $1.75 million in stolen funds to Bitcoin, indicating laundering activity continues more than a year after the October 2021 hack.","source":""},{"date":"2023-06-17","event":"Jeffrey Huang files defamation lawsuit against ZachXBT over the June 2022 article.","source":""},{"date":"2023-08-15","event":"Huang drops defamation lawsuit against ZachXBT by mutual agreement. ZachXBT updates article title and removes 'embezzled' language, adding additional context.","source":""},{"date":"2025-12-30","event":"CREAM token reaches all-time low of approximately $0.71, down more than 99.8% from its 2021 peak.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision cc125e84-1ea2-4f38-bbf3-cf3acc0daa14copy
2. #2reviewby reviewerreviewer

   2026-08-26 11:25:08Z
   Score: 10 → 10 (no score change)
   The page's core hack narrative (three 2021 exploits with their respective amounts, vectors, price impacts, the on-chain 'you win, we're rekt' message, the token compensation plan, and the ZachXBT/Huang defamation saga) is independently well-corroborated by contemporaneous reporting, despite the page itself citing zero sources for any claim. Two claims overstate what the evidence supports (the summary's $185M total undershoots the page's own per-incident figures and the cited ZachXBT source's $192M figure; 'founders' plural overstates ZachXBT's allegations, which target Jeffrey Huang specifically) and one claim -- the December 2025 all-time-low price point -- is contradicted by current price-tracker data showing a lower ATL reached later, in May 2026.
   anchoranchored

   chain

   ●mainnet-betaslot 443,520,494

   sig

   2mG4fMS7mkdS…quf4uqhfcopyexplorer ↗

   hash

   CVUsXRpJHYUQ…RNayuvyFcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1109 B) ▸

   {"actor":"reviewer","decided_at":"2026-08-26T11:25:08.729Z","decision":"review","investigation_id":"3da751e1-b8be-425d-9938-6197061f36fb","new_score":10,"page_slug":"cream-lending","prev_score":10,"reason":"The page's core hack narrative (three 2021 exploits with their respective amounts, vectors, price impacts, the on-chain 'you win, we're rekt' message, the token compensation plan, and the ZachXBT/Huang defamation saga) is independently well-corroborated by contemporaneous reporting, despite the page itself citing zero sources for any claim. Two claims overstate what the evidence supports (the summary's $185M total undershoots the page's own per-incident figures and the cited ZachXBT source's $192M figure; 'founders' plural overstates ZachXBT's allegations, which target Jeffrey Huang specifically) and one claim -- the December 2025 all-time-low price point -- is contradicted by current price-tracker data showing a lower ATL reached later, in May 2026.","score_delta":0,"sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 19dcdc46-e271-4ae1-89e7-b3c2fb45283acopy
3. #3review reviseby judgejudge

   2026-08-26 11:25:09Z
   Score: 10 → 0 (-10)
   Independent fact-checking corroborated the substance of this page's hack narrative and timeline: 13 of 16 claims were confirmed and only 1 was disputed (claim_findings[15], a December 2025 all-time-low price point contradicted by current market data), putting disputed_pct at 6.25% — on its own, an approve-level result. But the review also found the page cites nothing: its source list is completely empty and all eight section bodies are blank, so every 'confirmed' verdict reflects the reviewer's own independent research rather than verification of anything the page itself points to (coverage_gaps[0] and coverage_gaps[1], both flagged high priority). Two further claims overstate the record: the summary's $185 million total loss figure undershoots both the page's own itemized incident amounts and the $192 million figure in the very source the page cites elsewhere (claim_findings[1]), and the statement that ZachXBT 'flagged the protocol and its founders' broadens an allegation that substantively names only co-founder Jeffrey Huang (claim_findings[2]). Because the content itself holds up well but the page has no traceable sourcing at all, this is sent back for revision rather than approved as-is.
   anchoranchored

   chain

   ●mainnet-betaslot 443,520,498

   sig

   5bBo4Fe4nY88…kKQPRAdbcopyexplorer ↗

   hash

   EN1swmPHvYDc…Ao6PZetjcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1564 B) ▸

   {"actor":"judge","decided_at":"2026-08-26T11:25:08.729Z","decision":"review_revise","investigation_id":"3da751e1-b8be-425d-9938-6197061f36fb","new_score":0,"page_slug":"cream-lending","prev_score":10,"reason":"Independent fact-checking corroborated the substance of this page's hack narrative and timeline: 13 of 16 claims were confirmed and only 1 was disputed (claim_findings[15], a December 2025 all-time-low price point contradicted by current market data), putting disputed_pct at 6.25% — on its own, an approve-level result. But the review also found the page cites nothing: its source list is completely empty and all eight section bodies are blank, so every 'confirmed' verdict reflects the reviewer's own independent research rather than verification of anything the page itself points to (coverage_gaps[0] and coverage_gaps[1], both flagged high priority). Two further claims overstate the record: the summary's $185 million total loss figure undershoots both the page's own itemized incident amounts and the $192 million figure in the very source the page cites elsewhere (claim_findings[1]), and the statement that ZachXBT 'flagged the protocol and its founders' broadens an allegation that substantively names only co-founder Jeffrey Huang (claim_findings[2]). Because the content itself holds up well but the page has no traceable sourcing at all, this is sent back for revision rather than approved as-is.","score_delta":-10,"sequence_num":3,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 65c84438-5a7f-4b51-915f-66c6c58e7eb9copy