← Dough Finance1 decision on this page
Audit log
Every state-changing event for Dough Finance: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.
- #1publishby system:backfill2026-05-28 03:44:12ZScore: ? → ? (no score change)anchoranchored
- chain
- ●mainnet-betaslot 422,640,803
- sig
33WrfwG1xu2j…Wk28Y4ijexplorer ↗- hash
HUk7eWZ98SYg…ZywyhYUjsha256 → base58
verifying row…full verify ↗canonical bytes (7124 B) ▸
{"actor":"system:backfill","investigation_id":"b907a69e-6917-4f90-ad0a-942808b657d0","kind":"publish","page_slug":"dough-finance","published_at":"2026-05-28T03:44:12.600Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Dough Finance","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://docs.dough.finance/","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/dough-finance","type":"other","url":""},{"credibility":3,"name":"https://www.cryptotimes.io/2025/05/20/trumps-crypto-allies-leave-dough-investors-high-and-dry/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.certik.com/resources/blog/3SMOuGMCSttY4pQW6I49W2-dough-finance-incident-analysis","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/dough-finance-loses-1-8m-flash-loan-attack","type":"other","url":""},{"credibility":3,"name":"https://bitcoinist.com/defi-protocol-dough-finance-exploit-swipes-1-96-million-in-user-funds/","type":"other","url":""},{"credibility":3,"name":"https://medium.com/@dehacker_security/dough-finance-incident-analysis-04db15c22552","type":"other","url":""},{"credibility":3,"name":"https://www.web3isgoinggreat.com/?id=dough-finance-hack","type":"other","url":""},{"credibility":3,"name":"https://safe-edges.medium.com/dough-finance-1-8-m-hack-analysis-d83bcb6b3500","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.bitget.com/news/detail/12560604094777","type":"other","url":""},{"credibility":3,"name":"https://coinalertnews.com/news/2025/05/20/07d92e9b5e866f706e03d55df60db506","type":"other","url":""},{"credibility":3,"name":"https://www.cryptotimes.io/2025/05/20/trumps-crypto-allies-leave-dough-investors-high-and-dry/","type":"other","url":""},{"credibility":3,"name":"https://www.ainvest.com/news/dough-finance-clients-await-compensation-2-5m-hack-2505/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://beincrypto.com/wlfi-founders-sued-dough-reimbursement-hack/","type":"other","url":""},{"credibility":3,"name":"https://blocktribune.com/florida-man-sues-crypto-founder-for-fraud-over-lost-investment/","type":"other","url":""},{"credibility":3,"name":"https://www.cryptotimes.io/2025/05/20/trumps-crypto-allies-leave-dough-investors-high-and-dry/","type":"other","url":""},{"credibility":3,"name":"https://www.dglaw.com/reuters-how-trumps-crypto-business-partners-left-their-old-clients-in-the-lurch/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://cointelegraph.com/explained/from-25m-loss-to-65m-gain-inside-the-playbook-of-recycled-crypto-founders","type":"other","url":""},{"credibility":3,"name":"https://www.dlnews.com/articles/defi/meet-the-operators-of-donald-trump-world-liberty-financial/","type":"other","url":""},{"credibility":3,"name":"https://coinalertnews.com/news/2025/05/20/07d92e9b5e866f706e03d55df60db506","type":"other","url":""},{"credibility":3,"name":"https://en.wikipedia.org/wiki/World_Liberty_Financial","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.web3isgoinggreat.com/?id=dough-finance-hack","type":"other","url":""},{"credibility":3,"name":"https://www.certik.com/resources/blog/3SMOuGMCSttY4pQW6I49W2-dough-finance-incident-analysis","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://defillama.com/protocol/dough-finance","type":"other","url":""},{"credibility":3,"name":"https://beincrypto.com/wlfi-founders-sued-dough-reimbursement-hack/","type":"other","url":""},{"credibility":3,"name":"https://www.ainvest.com/news/dough-finance-clients-await-compensation-2-5m-hack-2505/","type":"other","url":""}]}],"sources_used":[],"summary":"Dough Finance was an Ethereum-based DeFi lending and margin-trading protocol co-founded by Chase Herro and Zachary Folkman. On July 12, 2024, the protocol was exploited via a flash loan attack that drained approximately $2.1–2.5 million in user funds due to unvalidated calldata in its ConnectorDeleverageParaswap smart contract. The protocol's website is shut down, the vast majority of the approximately 2,700 affected users have received no meaningful compensation, and the co-founders have since launched World Liberty Financial alongside Donald Trump, earning an alleged $65 million in revenues from that new venture.","timeline":[{"date":"2024-05-01","event":"Jonathan Lopez invests approximately $1 million in Dough Finance, allegedly guided by Chase Herro to use leveraged looping strategies and paying a 5% fee.","source":""},{"date":"2024-07-12","event":"Flash loan exploit drains approximately $1.8–2.5 million from Dough Finance's ConnectorDeleverageParaswap contracts due to missing calldata validation. Attacker funded via Railgun.","source":""},{"date":"2024-07-12","event":"Dough Finance acknowledges exploit, urges users to withdraw funds, and posts on-chain message demanding return of stolen assets by July 15, 2024.","source":""},{"date":"2024-07-13","event":"Approximately 600 ETH of stolen funds deposited into Tornado Cash by the attacker. White-hat wallet returns 69.12 ETH; MEV bot c0ffeebabe.eth returns 7.05 ETH.","source":""},{"date":"2024-07-15","event":"Dough Finance's ultimatum deadline to the attacker passes with no compliance. Founders announce intent to pursue criminal, legal, and administrative remedies.","source":""},{"date":"2024-08-01","event":"Dough Finance announces compensation plan: proprietary DOUGH tokens convertible to ETH for affected users. Approximately $180,000 of recovered $281,000 distributed to select addresses.","source":""},{"date":"2024-08-15","event":"Co-founders Herro and Folkman cease communication on official Dough Finance channels.","source":""},{"date":"2024-09-01","event":"Chase Herro and Zachary Folkman launch World Liberty Financial (WLFI) alongside Donald Trump, his sons, and the Witkoff family.","source":""},{"date":"2024-09-01","event":"Governance vote on Dough Finance reimbursement passes with 99.5% approval; no meaningful additional compensation follows.","source":""},{"date":"2024-12-01","event":"Dough Finance website goes offline. Protocol effectively abandoned.","source":""},{"date":"2025-05-01","event":"Jonathan Lopez files civil lawsuit against Chase Herro in Florida, alleging fraud, misrepresentation, breach of financial duties, and securities law violations over the $2.5M hack and unkept reimbursement promises.","source":""},{"date":"2025-05-20","event":"Multiple news outlets (CryptoTimes, CoinAlertNews, Malay Mail) report on Dough Finance investors remaining uncompensated while Herro and Folkman have earned an alleged $65 million from WLFI.","source":""},{"date":"2026-04-01","event":"Trial in Lopez v. Herro scheduled; outcome pending as of research date.","source":""}]},"v":1}Verify offline (run on your own machine)python -m src.verify_decision 6e471d34-5c0f-40f8-a697-3a7d0bf79436
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine —
python -m src.verify_decision <event_id>.