Skip to main content
Sign in
ElasticSwap1 decision on this page

Audit log

Every state-changing event for ElasticSwap: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

  1. #1publishby system:backfill
    2026-05-30 12:11:33Z
    Score: ?? (no score change)
    anchoranchored
    chain
    mainnet-betaslot 423,153,856
    sig
    3Pw76Wp5E78J…jp4XzJKiexplorer ↗
    hash
    b5CAnm6mbbud…hWvzmwg3sha256 → base58
    verifying row…full verify ↗
    canonical bytes (10560 B) ▸
    {"actor":"system:backfill","investigation_id":"39126e66-9131-4746-9523-66acc488e1d3","kind":"publish","page_slug":"elasticswap","published_at":"2026-05-30T12:11:33.629Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"ElasticSwap","sections":[{"content":"","heading":"","severity":"low","sources":[{"credibility":2,"name":"ElasticSwap GitHub Repository","type":"official","url":"https://github.com/ElasticSwap/elasticswap"},{"credibility":2,"name":"ElasticSwap Documentation","type":"official","url":"https://docs.elasticswap.org/"},{"credibility":3,"name":"ElasticSwap Medium — TIC is Launched, Now What","type":"news_article","url":"https://medium.com/elasticswap-the-future-is-elastic/elasticswap-tic-is-launched-now-what-4f64167e2c0d"}]},{"content":"","heading":"","severity":"critical","sources":[{"credibility":2,"name":"Code4rena — ElasticSwap Audit Report (January 2022)","type":"research","url":"https://code4rena.com/reports/2022-01-elasticswap"},{"credibility":2,"name":"Code4rena — ElasticSwap Audit Contest Page","type":"research","url":"https://code4rena.com/audits/2022-01-elasticswap-contest"},{"credibility":2,"name":"CertiK — ElasticSwap Incident Analysis","type":"research","url":"https://www.certik.com/resources/blog/4fuQmtFvhDB685gtcWr3I3-elasticswap-incident-analysis"}]},{"content":"","heading":"","severity":"critical","sources":[{"credibility":2,"name":"QuillAudits — Decoding Elastic Swap's $854K Exploit","type":"research","url":"https://quillaudits.medium.com/decoding-elastic-swaps-850k-exploit-quillaudits-9ceb7fcd8d1a"},{"credibility":2,"name":"CertiK — ElasticSwap Incident Analysis","type":"research","url":"https://www.certik.com/resources/blog/4fuQmtFvhDB685gtcWr3I3-elasticswap-incident-analysis"},{"credibility":2,"name":"SolidityScan — ElasticSwap Hack Analysis: Erroneous Calculations Bug","type":"research","url":"https://blog.solidityscan.com/elasticswap-hack-analysis-erroneous-calculations-bug-8dac10fb1b98"},{"credibility":3,"name":"Crypto-Rekts — ElasticSwap Entry","type":"community_report","url":"https://github.com/liqtags/crypto-rekts/blob/main/rekts/ElasticSwap.md"}]},{"content":"","heading":"","severity":"high","sources":[{"credibility":2,"name":"CertiK — ElasticSwap Incident Analysis","type":"research","url":"https://www.certik.com/resources/blog/4fuQmtFvhDB685gtcWr3I3-elasticswap-incident-analysis"},{"credibility":2,"name":"QuillAudits — Decoding Elastic Swap's $854K Exploit","type":"research","url":"https://quillaudits.medium.com/decoding-elastic-swaps-850k-exploit-quillaudits-9ceb7fcd8d1a"},{"credibility":3,"name":"CoinCu — ElasticSwap Attacked, Loss Approximately $854,000","type":"news_article","url":"https://coincu.com/151529-elasticswap-attacked-loss-854000/"}]},{"content":"","heading":"","severity":"high","sources":[{"credibility":3,"name":"ElasticSwap — What's Next (Medium)","type":"news_article","url":"https://medium.com/elasticswap-the-future-is-elastic/elasticswap-whats-next-1fab0b356069"},{"credibility":2,"name":"ElasticSwap — DefiLlama Protocol Page","type":"on_chain","url":"https://defillama.com/protocol/elasticswap"},{"credibility":2,"name":"ElasticSwap GitHub","type":"official","url":"https://github.com/ElasticSwap"}]},{"content":"","heading":"","severity":"high","sources":[{"credibility":2,"name":"ZachXBT Investigations Telegram Channel","type":"social_media","url":"https://t.me/investigations"},{"credibility":2,"name":"ZachXBT on X","type":"social_media","url":"https://x.com/zachxbt"},{"credibility":2,"name":"QuillAudits — Decoding Elastic Swap's $854K Exploit (attacker addresses documented)","type":"research","url":"https://quillaudits.medium.com/decoding-elastic-swaps-850k-exploit-quillaudits-9ceb7fcd8d1a"},{"credibility":2,"name":"Snowtrace — ElasticSwap TIC Token Tracker (Avalanche)","type":"on_chain","url":"https://snowtrace.io/token/0x75739a693459f33B1FBcC02099eea3eBCF150cBe"}]}],"sources_used":[{"credibility":2,"name":"QuillAudits — Decoding Elastic Swap's $854K Exploit","type":"research","url":"https://quillaudits.medium.com/decoding-elastic-swaps-850k-exploit-quillaudits-9ceb7fcd8d1a"},{"credibility":2,"name":"CertiK — ElasticSwap Incident Analysis","type":"research","url":"https://www.certik.com/resources/blog/4fuQmtFvhDB685gtcWr3I3-elasticswap-incident-analysis"},{"credibility":2,"name":"SolidityScan — ElasticSwap Hack Analysis: Erroneous Calculations Bug","type":"research","url":"https://blog.solidityscan.com/elasticswap-hack-analysis-erroneous-calculations-bug-8dac10fb1b98"},{"credibility":2,"name":"Code4rena — ElasticSwap Audit Report","type":"research","url":"https://code4rena.com/reports/2022-01-elasticswap"},{"credibility":2,"name":"Code4rena — ElasticSwap Audit Contest","type":"research","url":"https://code4rena.com/audits/2022-01-elasticswap-contest"},{"credibility":2,"name":"ElasticSwap GitHub Repository","type":"official","url":"https://github.com/ElasticSwap/elasticswap"},{"credibility":2,"name":"ElasticSwap Documentation","type":"official","url":"https://docs.elasticswap.org/"},{"credibility":3,"name":"ElasticSwap Medium — TIC is Launched, Now What","type":"news_article","url":"https://medium.com/elasticswap-the-future-is-elastic/elasticswap-tic-is-launched-now-what-4f64167e2c0d"},{"credibility":3,"name":"ElasticSwap Medium — What's Next","type":"news_article","url":"https://medium.com/elasticswap-the-future-is-elastic/elasticswap-whats-next-1fab0b356069"},{"credibility":3,"name":"Crypto-Rekts — ElasticSwap Entry","type":"community_report","url":"https://github.com/liqtags/crypto-rekts/blob/main/rekts/ElasticSwap.md"},{"credibility":2,"name":"ZachXBT Investigations Telegram Channel","type":"social_media","url":"https://t.me/investigations"},{"credibility":2,"name":"ZachXBT on X","type":"social_media","url":"https://x.com/zachxbt"},{"credibility":2,"name":"Snowtrace — ElasticSwap TIC Token Tracker (Avalanche)","type":"on_chain","url":"https://snowtrace.io/token/0x75739a693459f33B1FBcC02099eea3eBCF150cBe"},{"credibility":2,"name":"ElasticSwap — DefiLlama Protocol Page","type":"on_chain","url":"https://defillama.com/protocol/elasticswap"},{"credibility":3,"name":"CoinCu — ElasticSwap Attacked, Loss Approximately $854,000","type":"news_article","url":"https://coincu.com/151529-elasticswap-attacked-loss-854000/"}],"summary":"ElasticSwap was an Avalanche-first AMM protocol specializing in elastic supply tokens, which launched in May 2022 and was exploited in December 2022 for approximately $854,000 via flash loan attacks that exploited an accounting inconsistency between its addLiquidity and removeLiquidity functions. The vulnerability class that enabled the exploit had been identified in a Code4rena security audit conducted ten months earlier but was not adequately remediated before deployment. The protocol recovered approximately 55% of user funds through a bounty program and community vote, but the TIC governance token lost over 70% of its value and the protocol appears to have ceased meaningful activity.","timeline":[{"date":"2021-01-01","event":"ElasticSwap founders launch ElasticDAO, the predecessor project, on Ethereum.","source":"ElasticSwap Medium","source_url":"https://medium.com/elasticswap-the-future-is-elastic/elasticswap-tic-is-launched-now-what-4f64167e2c0d"},{"date":"2022-01-20","event":"Code4rena competitive audit begins for ElasticSwap smart contracts. Auditors identify high-severity vulnerability H-02: direct token transfers to pool contracts can inflate balances and enable value extraction via removeLiquidity.","source":"Code4rena Audit Report","source_url":"https://code4rena.com/reports/2022-01-elasticswap"},{"date":"2022-01-26","event":"Code4rena audit contest closes. Nine unique vulnerabilities identified including two high-severity findings.","source":"Code4rena Audit Report","source_url":"https://code4rena.com/reports/2022-01-elasticswap"},{"date":"2022-05-11","event":"ElasticSwap protocol and AMM interface launch on Avalanche with an AMPL liquidity pool. TIC governance token goes live.","source":"ElasticSwap Medium","source_url":"https://medium.com/elasticswap-the-future-is-elastic/elasticswap-tic-is-launched-now-what-4f64167e2c0d"},{"date":"2022-05-01","event":"ElasticSwap announces strategic partnerships with Big Brain Holdings, ShapeShift, Ampleforth, Connext, and Nomad, and plans multi-chain expansion to Polygon, Arbitrum, and Fantom.","source":"ElasticSwap Medium — What's Next","source_url":"https://medium.com/elasticswap-the-future-is-elastic/elasticswap-whats-next-1fab0b356069"},{"date":"2022-12-12","event":"Three separate flash loan attacks exploit ElasticSwap on Avalanche and Ethereum chains. Attackers exploit accounting inconsistency between addLiquidity (constant K) and removeLiquidity (live balance) to drain liquidity pools. Total stolen: approximately $854,000.","source":"CertiK — ElasticSwap Incident Analysis","source_url":"https://www.certik.com/resources/blog/4fuQmtFvhDB685gtcWr3I3-elasticswap-incident-analysis"},{"date":"2022-12-13","event":"ElasticSwap announces the exploit publicly on Twitter at approximately 07:33 AM UTC and urges all users to remove liquidity immediately. TIC token price falls more than 70%.","source":"CertiK — ElasticSwap Incident Analysis","source_url":"https://www.certik.com/resources/blog/4fuQmtFvhDB685gtcWr3I3-elasticswap-incident-analysis"},{"date":"2022-12-14","event":"MEV bot operator who front-ran the Ethereum attacker agrees to return 400.5 ETH to ElasticSwap treasury under the bounty program, retaining approximately 44.5 ETH as a bounty fee.","source":"QuillAudits — Decoding Elastic Swap's $854K Exploit","source_url":"https://quillaudits.medium.com/decoding-elastic-swaps-850k-exploit-quillaudits-9ceb7fcd8d1a"},{"date":"2022-12-15","event":"ElasticSwap team initiates community governance vote on how to manage recovered assets while developing refund proposals for affected users.","source":"CertiK — ElasticSwap Incident Analysis","source_url":"https://www.certik.com/resources/blog/4fuQmtFvhDB685gtcWr3I3-elasticswap-incident-analysis"},{"date":"2023-01-22","event":"ElasticSwap team publishes JSON files documenting aggregate losses by address across all chains. Treasury multisig holds approximately 487 ETH ($625,000). Approximately 55% of user funds recovered total; 50.89% of users vote to convert recovered assets proportionally for reimbursement.","source":"CertiK — ElasticSwap Incident Analysis","source_url":"https://www.certik.com/resources/blog/4fuQmtFvhDB685gtcWr3I3-elasticswap-incident-analysis"}]},"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision 4fd30ead-1b22-4f29-888f-69a7095ec465
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine — python -m src.verify_decision <event_id>.