Audit log

Every state-changing event for Eigenlayer: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

1. #1publishby system:backfill

   2026-05-19 01:06:45Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 420,667,267

   sig

   59CyjFAWW3cj…NN3CsT4kcopyexplorer ↗

   hash

   DCEyfZHWt58B…Z5SoiaY5copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (6854 B) ▸

   {"actor":"system:backfill","investigation_id":"c3a6aeee-8790-468b-9671-d3c68d99e91d","kind":"publish","page_slug":"eigenlayer","published_at":"2026-05-19T01:06:45.518Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Eigenlayer","sections":[{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]}],"sources_used":[{"credibility":2,"name":"EigenLayer's official X account hacked to promote fake airdrop - The Block","type":"news_article","url":"https://www.theblock.co/post/321939/eigenlayer-x-account-hack-fake-airdrop"},{"credibility":2,"name":"EigenLayer Twitter Hack: Airdrop Scam - Decrypt","type":"news_article","url":"https://decrypt.co/287159/eigenlayer-twitter-hack-airdrop-scam"},{"credibility":2,"name":"Victim Loses $800K in EigenLayer X Account Hack Airdrop Scam - CryptoNews","type":"news_article","url":"https://cryptonews.com/news/victim-loses-800k-in-eigenlayer-x-account-hack-airdrop-scam/"},{"credibility":2,"name":"EigenLayer investigates suspicious wallet that sold $5.5 million worth of EIGEN tokens - The Block","type":"news_article","url":"https://www.theblock.co/post/319620/eigenlayer-investigates-suspicious-wallet-that-sold-5-5-million-worth-of-eigen-tokens-potentially-violating-the-lockup-schedule"},{"credibility":2,"name":"EigenLayer erroneously transferred $5.5 million worth of tokens to attacker: statement - The Block","type":"news_article","url":"https://www.theblock.co/post/319689/eigenlayer-erroneously-transferred-5-5-million-worth-of-tokens-to-attacker-statement"},{"credibility":2,"name":"Explained: The EigenLayer Investor Hack (October 2024) - Halborn","type":"research","url":"https://www.halborn.com/blog/post/explained-the-eigenlayer-investor-hack-october-2024"},{"credibility":2,"name":"EigenLayer investigates unauthorized EIGEN token sale - Crypto Briefing","type":"news_article","url":"https://cryptobriefing.com/eigenlayer-token-sale-investigation/"},{"credibility":2,"name":"EigenLayer completes investigation on $5.7M hack - Cryptopolitan","type":"news_article","url":"https://www.cryptopolitan.com/eigenlayer-investigation-5-7m-hack/"},{"credibility":2,"name":"EigenLayer X account has just been hacked - ZachXBT (via CryptoNewsZ)","type":"news_article","url":"https://www.cryptonewsz.com/eigenlayer-x-account-has-just-been-hacked-zachxbt/"},{"credibility":2,"name":"Critics question the transparency and true float of EIGEN tokens - Blockworks","type":"news_article","url":"https://blockworks.co/news/0xresearch-newsletter-eigen-tokens-transparency"},{"credibility":2,"name":"EigenLayer X Account Hacked to Promote Fake Airdrop - DailyCoin","type":"news_article","url":"https://dailycoin.com/eigenlayer-x-account-hacked-to-promote-fake-airdrop-heres-what-we-know/"},{"credibility":2,"name":"EigenLayer Says $5.5 Million Hack From Compromised Email Thread Is An Isolated Incident - Unchained","type":"news_article","url":"https://unchainedcrypto.com/eigenlayer-says-5-5-million-hack-from-compromised-email-thread-is-an-isolated-incident/"},{"credibility":2,"name":"Email Breach Causes $5.5M EIGEN Token Heist - Bankless","type":"news_article","url":"https://www.bankless.com/email-breach-causes-eigenlayers-5-5m-token-heist"},{"credibility":3,"name":"Beware of Fake Twitter Accounts and Restaking Scams - imToken Wallet Security Report","type":"community_report","url":"https://support.token.im/hc/en-us/articles/31819758350617-Beware-of-Fake-Twitter-Accounts-and-Restaking-Scams-imToken-Wallet-Security-Monthly-Report-25th-Issue"},{"credibility":1,"name":"Disclosure Regarding Lock-Up Schedules, Staking, and Related - Eigen Foundation","type":"official","url":"https://docs.eigenfoundation.org/legal/disclosure-regarding-lockup-staking"}],"summary":"EigenLayer is a legitimate Ethereum restaking protocol operated by Eigen Labs that became a high-value target for phishing campaigns, wallet drainer attacks, and social engineering in 2024 following the launch of its EIGEN token. In October 2024 alone, the protocol's official X account was compromised to promote a fake airdrop resulting in at least $800,000 lost by one victim, and a separate email-based social engineering attack redirected approximately $5.7 million in locked investor tokens to an attacker's wallet. EIGEN holders and restakers face an elevated and persistent threat surface from impersonation sites, fake airdrop claims, and token-approval drainer schemes that exploit the protocol's name and brand recognition.","timeline":[{"date":"2024-05-10","event":"EigenLayer begins EIGEN token airdrop (Season 1 stakedrop); employees and investors subject to one-year lockup period.","source":"","source_url":"https://www.theblock.co/post/319620/eigenlayer-investigates-suspicious-wallet-that-sold-5-5-million-worth-of-eigen-tokens-potentially-violating-the-lockup-schedule"},{"date":"2024-10-04","event":"EigenLayer announces investigation into unauthorized sale of approximately 1,673,645 EIGEN tokens (~$5.7M) from wallet 0x87787389BB2Eb2EC8Fe4aA6a2e33D671d925A60f, later attributed to a social engineering attack on an investor email thread.","source":"","source_url":"https://www.theblock.co/post/319689/eigenlayer-erroneously-transferred-5-5-million-worth-of-tokens-to-attacker-statement"},{"date":"2024-10-04","event":"Lookonchain and Arkham Intelligence trace the suspicious EIGEN token sale to EigenLayer team wallet; ZachXBT credited in subsequent investigation announcement.","source":"","source_url":"https://cryptobriefing.com/eigenlayer-token-sale-investigation/"},{"date":"2024-10-18","event":"EigenLayer's official X account is compromised; attackers post fraudulent EIGEN Season 2 airdrop announcements linking to phishing site blog.eigenfoundation.org. ZachXBT issues Telegram alert warning users not to click any links.","source":"","source_url":"https://decrypt.co/287159/eigenlayer-twitter-hack-airdrop-scam"},{"date":"2024-10-18","event":"At least one victim loses approximately $800,000 in mETH to the fake airdrop wallet drainer; Scam Sniffer reports the loss. Eigen Labs issues warning via backup @eigen_labs account.","source":"","source_url":"https://cryptonews.com/news/victim-loses-800k-in-eigenlayer-x-account-hack-airdrop-scam/"},{"date":"2024-10-29","event":"EigenLayer completes investigation on the $5.7M email hack, confirming social engineering via compromised email thread and noting partial fund recovery through exchange cooperation and law enforcement.","source":"","source_url":"https://www.cryptopolitan.com/eigenlayer-investigation-5-7m-hack/"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision fd6f8cd3-7ab4-4a0d-99cf-ceda9daa7b47copy
2. #2reviewby reviewerreviewer

   2026-06-14 23:15:50Z
   Score: 32 → 32 (no score change)
   Blue-chip calibration review (Prompt A). Verdict: over-penalized. Page content is treated as accurate; the trust_score band is miscalibrated. EigenLayer is a legitimate and operational Ethereum restaking protocol by Eigen Labs that suffered two discrete third-party attacks in October 2024: a social engineering email compromise targeting an investor's token transfer (~$5.7M loss to the investor) and an X account hijacking that led to a phishing victim losing $800K in mETH. The company's own smart contracts, infrastructure, and on-chain systems were not compromised in either incident. Both incidents were resolved: Eigen Labs completed its investigation by October 29, 2024, partial fund freezes were achieved via law enforcement and exchange cooperation, and new security protocols were implemented. As of 2025-2026 EigenLayer (now EigenCloud) holds ~$8.9B TVL, has institutional operators (Google Cloud, Coinbase Cloud), and continues active protocol development. The current score of 32 (WARNING) is inconsistent with the page's own framing of EigenLayer as a legitimate protocol targeted by external actors. Under the post-policy band semantics, WARNING implies elevated fraud or loss risk from the entity; the correct band is CAUTIONARY (50-69), reflecting material caveats including: the process negligence of using unprotected email to coordinate high-value token transfers, the tokenomics controversy (VC-skewed allocation, US/Canada exclusion from airdrop, non-transferable initial tokens), and the unresolved question of exact fund recovery amounts — none of which constitute fraud by Eigen Labs itself. A score of 58 in the CAUTIONARY band is appropriate for an independently-verified, institutionally-backed protocol with resolved external incidents and documented operational shortcomings.
   anchoranchored

   chain

   ●mainnet-betaslot 426,514,332

   sig

   5TTgEBepmV3f…hAwihk6Bcopyexplorer ↗

   hash

   C71RJi3fJpGY…gsAFPSMZcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (2153 B) ▸

   {"actor":"reviewer","decided_at":"2026-06-14T23:15:50.776Z","decision":"review","investigation_id":"c3a6aeee-8790-468b-9671-d3c68d99e91d","new_score":32,"page_slug":"eigenlayer","prev_score":32,"reason":"Blue-chip calibration review (Prompt A). Verdict: over-penalized. Page content is treated as accurate; the trust_score band is miscalibrated. EigenLayer is a legitimate and operational Ethereum restaking protocol by Eigen Labs that suffered two discrete third-party attacks in October 2024: a social engineering email compromise targeting an investor's token transfer (~$5.7M loss to the investor) and an X account hijacking that led to a phishing victim losing $800K in mETH. The company's own smart contracts, infrastructure, and on-chain systems were not compromised in either incident. Both incidents were resolved: Eigen Labs completed its investigation by October 29, 2024, partial fund freezes were achieved via law enforcement and exchange cooperation, and new security protocols were implemented. As of 2025-2026 EigenLayer (now EigenCloud) holds ~$8.9B TVL, has institutional operators (Google Cloud, Coinbase Cloud), and continues active protocol development. The current score of 32 (WARNING) is inconsistent with the page's own framing of EigenLayer as a legitimate protocol targeted by external actors. Under the post-policy band semantics, WARNING implies elevated fraud or loss risk from the entity; the correct band is CAUTIONARY (50-69), reflecting material caveats including: the process negligence of using unprotected email to coordinate high-value token transfers, the tokenomics controversy (VC-skewed allocation, US/Canada exclusion from airdrop, non-transferable initial tokens), and the unresolved question of exact fund recovery amounts — none of which constitute fraud by Eigen Labs itself. A score of 58 in the CAUTIONARY band is appropriate for an independently-verified, institutionally-backed protocol with resolved external incidents and documented operational shortcomings.","score_delta":0,"sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision b1d21ab5-7777-4bc1-9590-ba8dc2963648copy
3. #3review approveby judgejudge

   2026-06-14 23:15:50Z
   Score: 32 → 58 (+26)
   The blue-chip calibration review found 0% disputed content — all six claim_findings[0–5] were supported. EigenLayer is a legitimate, institutionally-backed Ethereum restaking protocol (claim_findings[0]: ~$8.9B TVL, Google Cloud and Coinbase Cloud operators as of March 2026). Both October 2024 incidents — the $5.7M email-based social engineering attack (claim_findings[1]) and the $800K X-account hijacking (claim_findings[2]) — were suffered by the entity and its investors, not perpetrated by Eigen Labs. The page's own framing (claim_findings[4]) explicitly describes EigenLayer as a legitimate protocol targeted by external actors, making a WARNING band (implying elevated fraud risk from the entity itself) internally inconsistent. The correct band is CAUTIONARY (50–69), acknowledging documented process negligence, tokenomics controversy, and a minor overstatement of fund-recovery certainty (claim_findings[3]), none of which constitute fraud. A score of 58 is consistent with the evidence; the current score of 32 is a victim-penalization error. Page content stands as accurate and must remain published.
   anchoranchored

   chain

   ●mainnet-betaslot 426,514,336

   sig

   Gd551j8DoupS…W3e5w356copyexplorer ↗

   hash

   FPgNm4k3d1Az…6bnPC1fFcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1467 B) ▸

   {"actor":"judge","decided_at":"2026-06-14T23:15:50.776Z","decision":"review_approve","investigation_id":"c3a6aeee-8790-468b-9671-d3c68d99e91d","new_score":58,"page_slug":"eigenlayer","prev_score":32,"reason":"The blue-chip calibration review found 0% disputed content — all six claim_findings[0–5] were supported. EigenLayer is a legitimate, institutionally-backed Ethereum restaking protocol (claim_findings[0]: ~$8.9B TVL, Google Cloud and Coinbase Cloud operators as of March 2026). Both October 2024 incidents — the $5.7M email-based social engineering attack (claim_findings[1]) and the $800K X-account hijacking (claim_findings[2]) — were suffered by the entity and its investors, not perpetrated by Eigen Labs. The page's own framing (claim_findings[4]) explicitly describes EigenLayer as a legitimate protocol targeted by external actors, making a WARNING band (implying elevated fraud risk from the entity itself) internally inconsistent. The correct band is CAUTIONARY (50–69), acknowledging documented process negligence, tokenomics controversy, and a minor overstatement of fund-recovery certainty (claim_findings[3]), none of which constitute fraud. A score of 58 is consistent with the evidence; the current score of 32 is a victim-penalization error. Page content stands as accurate and must remain published.","score_delta":26,"sequence_num":3,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 104ec8aa-eea6-43bf-a7a5-d641e59cc24ccopy