Audit log

Every state-changing event for CrediX Finance: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

1. #1publishby system:backfill

   2026-05-26 19:54:21Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 422,351,456

   sig

   5KUU4hKq3sEM…4wsbkf3Xcopyexplorer ↗

   hash

   Eaiebf2hRiKe…48SDP71Gcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (6739 B) ▸

   {"actor":"system:backfill","investigation_id":"294f90c2-a70f-4405-aedf-dd0bc7352bb5","kind":"publish","page_slug":"credix","published_at":"2026-05-26T19:54:21.320Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"CrediX Finance","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/business/2025/08/04/defi-protocol-credix-taken-offline-after-usd4-5m-exploit","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/334313/credix-team-vanishes-stability-dao-preps-legal-report","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/markets/2023/07/26/crypto-lender-credix-brings-opens-private-credit-pool-on-solana-with-11-yield","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.quillaudits.com/blog/hack-analysis/credix-finance-4.5m-exploit","type":"other","url":""},{"credibility":3,"name":"https://quillaudits.medium.com/credix-finances-4-5m-exploit-96526a5119cc","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-credix-hack-august-2025","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/business/2025/08/04/defi-protocol-credix-taken-offline-after-usd4-5m-exploit","type":"other","url":""},{"credibility":3,"name":"https://www.theblock.co/post/365458/solana-lender-credix-defi-exploit","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://cointelegraph.com/news/credix-finance-team-disappears-after-4-5m-hack","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/334313/credix-team-vanishes-stability-dao-preps-legal-report","type":"other","url":""},{"credibility":3,"name":"https://www.cryptotimes.io/2025/08/08/credix-team-suspectedly-pulls-off-exit-scam-after-4-5m-hack/","type":"other","url":""},{"credibility":3,"name":"https://www.cryptopolitan.com/exit-scam-credix-disappears-after-a-4-5m-hack/","type":"other","url":""},{"credibility":3,"name":"https://www.newsbtc.com/news/exit-scam-defi-protocol-credixs-team-vanishes-following-4-5-million-exploit/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://decrypt.co/334313/credix-team-vanishes-stability-dao-preps-legal-report","type":"other","url":""},{"credibility":3,"name":"https://www.cointribune.com/en/credix-finance-disappears-4-5m-hack/","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/credix-finance-team-disappears-after-4-5m-hack","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://skynet.certik.com/projects/credix","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-credix-hack-august-2025","type":"other","url":""},{"credibility":3,"name":"https://tokenvitals.com/blog/inside-credix-collapse-lessons-4-5m-defi-exit-scam","type":"other","url":""},{"credibility":3,"name":"https://www.quillaudits.com/blog/hack-analysis/credix-finance-4.5m-exploit","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.quillaudits.com/blog/hack-analysis/credix-finance-4.5m-exploit","type":"other","url":""},{"credibility":3,"name":"https://www.thearizonatribune.com/credix-hack-funds-washed-tornado-cash/","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/business/2025/08/04/defi-protocol-credix-taken-offline-after-usd4-5m-exploit","type":"other","url":""},{"credibility":3,"name":"https://skynet.certik.com/projects/credix","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coingabbar.com/en/crypto-currency-news/credix-finance-scam-or-defi-rug-pull-plot-millions-vanish","type":"other","url":""},{"credibility":3,"name":"https://www.ainvest.com/news/credix-finance-team-suspected-exit-scam-4-5-million-hack-2508/","type":"other","url":""}]}],"sources_used":[],"summary":"CrediX Finance was a DeFi lending protocol launched in July 2025 on the Sonic blockchain that suffered a $4.5 million exploit on August 4, 2025, less than one month after launch. The exploit involved a compromised or insider-controlled admin wallet that minted unbacked synthetic tokens to drain liquidity pools; the team subsequently vanished, deleted all official channels, and failed to honor public recovery promises, prompting widespread allegations of a premeditated exit scam. Note: CrediX Finance (Sonic, 2025) is a distinct entity from Credix Finance (Solana, founded 2021), which is a separate legitimate RWA protocol.","timeline":[{"date":"2025-07-01","event":"CrediX Finance launches on the Sonic blockchain as a DeFi lending protocol, less than one month before the exploit.","source":""},{"date":"2025-07-29","event":"Attacker granted POOL_ADMIN_ROLE, BRIDGE_ROLE, ASSET_LISTING_ADMIN_ROLE, EMERGENCY_ADMIN_ROLE, and RISK_ADMIN_ROLE via the ACLManager contract by a CrediX admin EOA (0x0dd010513F7abB8F9c628dC164a24D953BCA09Cf). Transaction hash: 0x0cc3520951a2b41281dcc9a0d37ef3f7f139b75675d83ae72e3b8e903334f35e.","source":""},{"date":"2025-08-04","event":"Exploit executed at approximately 09:10 UTC. Attacker mints 2,500,000 unbacked acUSDC and 3,250,000 unbacked acscUSD, uses them as collateral to drain $4.5M in user funds. Protocol taken offline. Stolen assets bridged from Sonic to Ethereum via deBridge.","source":""},{"date":"2025-08-04","event":"CrediX Finance posts statement on X claiming 'All users funds will be recovered in full within 24-48 hours' and alleges a negotiated return deal with the exploiter.","source":""},{"date":"2025-08-05","event":"CertiK confirms stolen assets distributed across three Ethereum wallets. Approximately half (300 ETH) subsequently routed through Tornado Cash.","source":""},{"date":"2025-08-08","event":"CrediX Finance team goes completely dark. Website remains offline, X account deactivated, Telegram channel deleted, Discord shut down. No fund recovery occurs. CertiK publicly reports the disappearance.","source":""},{"date":"2025-08-08","event":"Stability DAO announces it is filing a formal legal report with cybercrime authorities, confirms KYC data for two CrediX team members has been obtained and will be submitted to law enforcement.","source":""},{"date":"2025-08-09","event":"Multiple affected protocols — Sonic Labs, Euler, Beets, Trevee — join Stability DAO's coordinated legal and recovery effort. Trevee reduces its CrediX exposure from $1.6M to approximately $700K.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision ede1cc6d-bd3a-4159-978b-2524ce1a62decopy