Skip to main content
Sign in
DIMO3 decisions on this page

Audit log

Every state-changing event for DIMO: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

  1. #1publishby system:backfill
    2026-05-29 16:07:56Z
    Score: ?? (no score change)
    anchoranchored
    chain
    mainnet-betaslot 422,971,601
    sig
    4bkyse22Wgaz…Kjg9QszXexplorer ↗
    hash
    8LkUfRUeZ3xE…QoYGDg1csha256 → base58
    verifying row…full verify ↗
    canonical bytes (7600 B) ▸
    {"actor":"system:backfill","investigation_id":"f3df7ac8-3072-4759-a393-5cd4f1b75f1d","kind":"publish","page_slug":"dimo","published_at":"2026-05-29T16:07:55.987Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"DIMO","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://cleantechnica.com/2023/02/28/dimo-founder-andy-chatham-on-data-driven-cars-more/","type":"other","url":""},{"credibility":3,"name":"https://coinfund.io/founders-corner-dimo-the-depin-force-driving-the-future-of-mobility/","type":"other","url":""},{"credibility":3,"name":"https://docs.dimo.org/governance/improvement-proposals/dip6","type":"other","url":""},{"credibility":3,"name":"https://www.gate.com/learn/articles/what-is-dimo-all-you-need-to-know-about-dimo/2829","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://x.com/CertiKAlert/status/1986740107190112715","type":"other","url":""},{"credibility":3,"name":"https://x.com/DIMO_Network/status/1986847282889957391","type":"other","url":""},{"credibility":3,"name":"https://www.hokanews.com/2025/11/crypto-panic-30-million-dimo-tokens.html","type":"other","url":""},{"credibility":3,"name":"https://phemex.com/news/article/certik-detects-suspicious-dimo-token-sale-after-proxy-contract-upgrade-33681","type":"other","url":""},{"credibility":3,"name":"https://www.bitget.com/amp/news/detail/12560605051799","type":"other","url":""},{"credibility":3,"name":"https://www.nominis.io/insights/nominis-monthly-report-crypto-attacks-in-november-2025","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.hokanews.com/2025/11/crypto-panic-30-million-dimo-tokens.html","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/currencies/dimo/","type":"other","url":""},{"credibility":3,"name":"https://www.coingecko.com/en/coins/dimo","type":"other","url":""},{"credibility":3,"name":"https://coincodex.com/crypto/dimo/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://docs.dimo.org/overview/earning-dimo-tokens","type":"other","url":""},{"credibility":3,"name":"https://docs.dimo.org/overview/dimotoken/dimo-explained","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/295607/drive-earn-platform-dimo-ethereum-polygon-base","type":"other","url":""},{"credibility":3,"name":"https://www.mexc.com/price/dimo/tokenomics","type":"other","url":""},{"credibility":3,"name":"https://etherscan.io/token/0x5fab9761d60419c9eeebe3915a8fa1ed7e8d2e1b","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.theblock.co/post/272456/decentralized-infrastructure-11-5-million-series-a-coinfund","type":"other","url":""},{"credibility":3,"name":"https://coinfund.io/the-dawn-of-depin-leading-the-series-a-in-dimos-open-platform-for-car-apps/","type":"other","url":""},{"credibility":3,"name":"https://tracxn.com/d/companies/dimo/__luso2aSKJPzaWdOn2GiMxSvlArJqm5yD0zgzpY05_nU","type":"other","url":""},{"credibility":3,"name":"https://www.crunchbase.com/organization/dimo-9a37","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://docs.dimo.org/governance/improvement-proposals/dip6","type":"other","url":""},{"credibility":3,"name":"https://docs.dimo.org/governance/improvement-proposals/dip1","type":"other","url":""},{"credibility":3,"name":"https://docs.dimo.org/governance/license-proposals/dlp3","type":"other","url":""},{"credibility":3,"name":"https://dimo.co/policies/terms-of-service","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://sayfer.io/audits/smart-contract-audit-report-for-dimo-2/","type":"other","url":""},{"credibility":3,"name":"https://docs.dimo.org/docs/security/methods","type":"other","url":""},{"credibility":3,"name":"https://docs.dimo.org/docs/security/audits","type":"other","url":""},{"credibility":3,"name":"https://docs.dimo.org/docs/security/user-privacy","type":"other","url":""},{"credibility":3,"name":"https://www.bitget.com/amp/news/detail/12560605051811","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.trustpilot.com/review/dimo.zone","type":"other","url":""},{"credibility":3,"name":"https://www.bitrue.com/blog/get-to-know-dimo-crypto-tokenomics","type":"other","url":""},{"credibility":3,"name":"https://docs.dimo.org/governance/improvement-proposals/dip2","type":"other","url":""}]}],"sources_used":[],"summary":"DIMO (Decentralized Infrastructure for Mobility Operations) is a Web3 vehicle data protocol built on Polygon and later migrating to Base, developed by Digital Infrastructure Inc. The protocol allows drivers to connect their vehicles, stream data, and earn $DIMO tokens in exchange. In November 2025, a sophisticated attacker compromised a developer key and withdrew approximately 30 million DIMO tokens (3% of total supply) from a Wormhole bridge contract, causing a price drop of over 57% in 30 days and triggering a CertiK security alert. The project has legitimate venture backing and a publicly identified founding team, but the security incident, centralized key management failure, and ongoing token unlock pressure are material risk factors.","timeline":[{"date":"2021-01-01","event":"DIMO founded in Brooklyn, New York by Andy Chatham, Alex Rawitz, Rob Solomon, and Yevgeny Khessin under Digital Infrastructure Inc.","source":""},{"date":"2022-01-01","event":"Digital Infrastructure Inc. raises approximately $9 million seed round from CoinFund, Variant Fund, Slow Ventures, ConsenSys Mesh, and Borderless Capital.","source":""},{"date":"2022-06-01","event":"DIMO announces it will build on Polygon and launch the $DIMO utility token.","source":""},{"date":"2022-12-01","event":"$DIMO mainnet launches on Polygon. Token airdrops begin for connected vehicle participants over the following three months.","source":""},{"date":"2023-12-19","event":"$DIMO reaches all-time high of approximately $0.766 per token.","source":""},{"date":"2024-01-16","event":"Digital Infrastructure Inc. closes $11.5 million Series A led by CoinFund; CoinFund CIO Alex Felix joins the board. Total funding reaches approximately $22 million.","source":""},{"date":"2024-01-01","event":"Sayfer completes smart contract security audit of DIMO; 14 non-critical vulnerabilities identified and reportedly resolved.","source":""},{"date":"2024-12-01","event":"DIMO announces plan to migrate the protocol from Polygon to Coinbase's Base network pending governance vote; technical migration targeted for late 2025.","source":""},{"date":"2025-01-12","event":"Insider team and investor token vesting begins: 1/36 of the 300 million allocated tokens unlocks monthly for 36 months.","source":""},{"date":"2025-11-07","event":"Sophisticated attacker compromises a developer key and withdraws approximately 30 million $DIMO tokens (3% of supply) from a Wormhole bridge contract; tokens sold for approximately $40,000. CertiK flags the activity publicly. DIMO team revokes keys, reverts proxy upgrade, and transfers contract ownership to multi-signature wallet within approximately one hour.","source":""},{"date":"2025-11-07","event":"$DIMO token drops approximately 32% within 24 hours of the CertiK alert; 30-day drawdown reaches approximately 57%.","source":""}]},"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision b4c4e952-7a5c-43d6-8226-d7ed71291da7
  2. #2reviewby reviewerreviewer
    2026-06-09 23:35:18Z
    Score: 5252 (no score change)
    The page's core claims about the November 2025 security incident are well-supported and closely match DIMO's own public statements. The most significant factual inaccuracy is the characterization of the Sayfer audit findings as '14 non-critical vulnerabilities' when the actual report shows 3 HIGH and 1 MEDIUM severity findings. Additionally, the seed round investor list conflates seed and Series A participants, listing ConsenSys Mesh and Borderless Capital as seed investors when the official press release does not include them in that round.
    anchoranchored
    chain
    mainnet-betaslot 425,428,538
    sig
    2zsMrhgB5wjd…12BoqLa4explorer ↗
    hash
    Fpf7z9MQrYa5…oKxwUz17sha256 → base58
    verifying row…full verify ↗
    canonical bytes (887 B) ▸
    {"actor":"reviewer","decided_at":"2026-06-09T23:35:18.430Z","decision":"review","investigation_id":"f3df7ac8-3072-4759-a393-5cd4f1b75f1d","new_score":52,"page_slug":"dimo","prev_score":52,"reason":"The page's core claims about the November 2025 security incident are well-supported and closely match DIMO's own public statements. The most significant factual inaccuracy is the characterization of the Sayfer audit findings as '14 non-critical vulnerabilities' when the actual report shows 3 HIGH and 1 MEDIUM severity findings. Additionally, the seed round investor list conflates seed and Series A participants, listing ConsenSys Mesh and Borderless Capital as seed investors when the official press release does not include them in that round.","score_delta":0,"sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision 3f7e31db-f73d-4f78-b6ef-98203925272e
  3. #3review reviseby judgejudge
    2026-06-09 23:35:18Z
    Score: 5242 (-10)
    The review confirmed all core claims about the November 2025 security incident, founding team, and tokenomics with Tier 1 and Tier 2 sources. One claim is formally disputed: claim_findings[9] characterizes the Sayfer smart contract audit as producing '14 non-critical vulnerabilities,' but the actual Sayfer report documents 3 HIGH-severity and 1 MEDIUM-severity findings among the 14 total — a material misrepresentation of the project's security history. Three additional claims are partially supported: claim_findings[6] conflates seed and Series A investor rosters (ConsenSys Mesh and Borderless Capital were Series A participants, not seed), claim_findings[7] carries a $1.5M arithmetic gap in the stated total funding figure, and claim_findings[8] cites the lower of several divergent ATH price figures from aggregators. One cited source has link rot (CoinFund founders-corner, 404). The audit severity error in particular requires correction as it understates risk to readers.
    anchoranchored
    chain
    mainnet-betaslot 425,428,544
    sig
    2e1D288bjQYG…89GfoxJ5explorer ↗
    hash
    Mwj3tuzhdfoZ…phPWggUnsha256 → base58
    verifying row…full verify ↗
    canonical bytes (1329 B) ▸
    {"actor":"judge","decided_at":"2026-06-09T23:35:18.430Z","decision":"review_revise","investigation_id":"f3df7ac8-3072-4759-a393-5cd4f1b75f1d","new_score":42,"page_slug":"dimo","prev_score":52,"reason":"The review confirmed all core claims about the November 2025 security incident, founding team, and tokenomics with Tier 1 and Tier 2 sources. One claim is formally disputed: claim_findings[9] characterizes the Sayfer smart contract audit as producing '14 non-critical vulnerabilities,' but the actual Sayfer report documents 3 HIGH-severity and 1 MEDIUM-severity findings among the 14 total — a material misrepresentation of the project's security history. Three additional claims are partially supported: claim_findings[6] conflates seed and Series A investor rosters (ConsenSys Mesh and Borderless Capital were Series A participants, not seed), claim_findings[7] carries a $1.5M arithmetic gap in the stated total funding figure, and claim_findings[8] cites the lower of several divergent ATH price figures from aggregators. One cited source has link rot (CoinFund founders-corner, 404). The audit severity error in particular requires correction as it understates risk to readers.","score_delta":-10,"sequence_num":3,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision 30d1fdb8-91fb-4591-9d99-3fa0c5a1f3dd
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine — python -m src.verify_decision <event_id>.