Skip to main content
Sign in
EasyFi1 decision on this page

Audit log

Every state-changing event for EasyFi: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

  1. #1publishby system:backfill
    2026-05-22 04:05:30Z
    Score: ?? (no score change)
    anchoranchored
    chain
    mainnet-betaslot 421,342,896
    sig
    2PZFzA8pxLFj…mz9Kx5RAexplorer ↗
    hash
    6wxLw1yWcuRn…Pe4ue6JFsha256 → base58
    verifying row…full verify ↗
    canonical bytes (7075 B) ▸
    {"actor":"system:backfill","investigation_id":"791df2de-5786-4056-a92a-9f5c584c9057","kind":"publish","page_slug":"easyfi","published_at":"2026-05-22T04:05:30.294Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"EasyFi","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/markets/2021/04/20/defi-protocol-easyfi-reports-hack-loss-of-over-80m-in-funds","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-easyfi-hack-april-2021","type":"other","url":""},{"credibility":3,"name":"https://cryptobriefing.com/easyfi-hacked-over-80-million-metamask-attack/","type":"other","url":""},{"credibility":3,"name":"https://thedefiant.io/news/hacks/compound-finance-fork-easyfi-loses-over-60m-in-admin-key-hack","type":"other","url":""},{"credibility":3,"name":"https://github.com/tayvano/lazarus-bluenoroff-research/blob/main/hacks-and-thefts/easyfi.md","type":"other","url":""},{"credibility":3,"name":"https://chainbulletin.com/easyfi-hack-was-caused-by-compromised-admin-keys","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-easyfi-hack-april-2021","type":"other","url":""},{"credibility":3,"name":"https://chainbulletin.com/easyfi-hack-was-caused-by-compromised-admin-keys","type":"other","url":""},{"credibility":3,"name":"https://www.scmagazine.com/analysis/application-security/centralization-ironically-most-common-cause-of-decentralized-finance-hacks","type":"other","url":""},{"credibility":3,"name":"https://www.linkedin.com/pulse/easyfi-lending-protocol-smart-contract-final-audit-halborn-jimoh","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/easify-network/interim-compensation-plan-8fa81e46ada4","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/reeling-from-post-hack-price-slump-easyfi-reveals-community-compensation-plan","type":"other","url":""},{"credibility":3,"name":"https://medium.com/coinmonks/the-fall-of-easyfi-network-c4c6773a1378","type":"other","url":""},{"credibility":3,"name":"https://bitcoinist.com/security-incident-easyfi-to-compensate-100-of-the-depositors-net-balances/","type":"other","url":""},{"credibility":3,"name":"https://medium.com/easify-network/easyfi-security-incident-66c02a277a91","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/coinmonks/the-fall-of-easyfi-network-c4c6773a1378","type":"other","url":""},{"credibility":3,"name":"https://gbaglobal.org/blog/2021/04/29/after-the-hack-is-easyfi-trustworthy/","type":"other","url":""},{"credibility":3,"name":"https://www.cryptoscoop.io/reeling-from-post-hack-price-slump-easyfi-reveals-community-compensation-plan/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://cointelegraph.com/news/reeling-from-post-hack-price-slump-easyfi-reveals-community-compensation-plan","type":"other","url":""},{"credibility":3,"name":"https://www.coinbase.com/price/easyfi","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/currencies/easyfi/","type":"other","url":""},{"credibility":3,"name":"https://medium.com/easify-network/easyfi-roadmap-2022-5f94cbbc8395","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://blockonomi.com/easyfi-guide/","type":"other","url":""},{"credibility":3,"name":"https://www.crunchbase.com/organization/easyfi","type":"other","url":""},{"credibility":3,"name":"https://tracxn.com/d/companies/easyfi/__8w98Z6QokAZD1UFWk8ppUarbZ_WS0Fw8ux650ruN-2Y","type":"other","url":""},{"credibility":3,"name":"https://www.newsbtc.com/news/company/easyfi-lending-protocol-goes-live-with-money-markets-on-polygon/","type":"other","url":""}]}],"sources_used":[],"summary":"EasyFi was a Layer 2 DeFi lending protocol operating on Polygon Network, forked from Compound Finance, that suffered one of the largest DeFi hacks of 2021 when an attacker compromised the CEO's MetaMask admin keys on April 19, 2021, stealing approximately $81 million in EASY tokens and stablecoins. The protocol attempted a hard fork and compensation plan, but a significant portion of token holders on decentralized exchanges alleged they remained uncompensated, and community members raised concerns about transparency, censorship of dissent, and the fundamental security failure of managing over $100 million in assets through a single admin key held in a browser extension. ZachXBT has flagged EasyFi as a high-risk entity.","timeline":[{"date":"2020-01-01","event":"EasyFi founded by Ankitt Gaur and Anshul Dhir as a Compound Finance fork on Polygon (Matic) Network.","source":""},{"date":"2021-04-01","event":"EasyFi launched on Binance Smart Chain and partnered with PancakeSwap for yield farming incentives, becoming a Binance Innovation Zone project.","source":""},{"date":"2021-04-19","event":"Attacker compromised CEO Ankitt Gaur's computer and extracted MetaMask admin seed phrase, stealing 2.98 million EASY tokens (~$75M) and $6M in stablecoins from liquidity pools. Total loss estimated at ~$81 million.","source":""},{"date":"2021-04-20","event":"EasyFi publicly disclosed the hack. CEO Ankitt Gaur posted a security incident report on Medium. Deposits and withdrawals suspended. Gaur offered a $1 million bounty for return of funds.","source":""},{"date":"2021-04-20","event":"EASY token price dropped approximately 50%, falling from ~$25 to ~$13.50 within 24 hours of disclosure.","source":""},{"date":"2021-04-27","event":"Binance halted EASY trading pairs and took a snapshot of user holdings, distributing new EZ tokens at a 1:1 ratio to eligible holders.","source":""},{"date":"2021-04-28","event":"EasyFi executed a hard fork, launching EZ token (v2) and rendering the attacker's stolen EASY tokens worthless on the new contract. Ticker changed from EASY to EZ.","source":""},{"date":"2021-05-01","event":"Stolen funds traced through Ren Bridge to Ethereum, converted to ~123 Bitcoin, laundered via Chipmixer, and deposited to Binance and P2P exchanges (Noones, Paxful).","source":""},{"date":"2021-05-08","event":"EasyFi revealed community compensation plan: 25% immediate stablecoin payout, 75% in EZ IOU tokens redeemable for EZ v2. Users on decentralized exchanges alleged they were categorized as ineligible for full 1:1 swap compensation.","source":""},{"date":"2021-05-01","event":"Community members published accounts alleging bans from EasyFi Telegram for asking critical questions and alleged discriminatory compensation treatment for DEX users.","source":""},{"date":"2022-01-01","event":"EasyFi published 2022 roadmap indicating continued development plans. Protocol activity and community engagement reportedly declined significantly following the hack.","source":""}]},"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision 24ca3ac0-f550-44b6-91f9-7ce4fd8edad8
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine — python -m src.verify_decision <event_id>.