Audit log

Every state-changing event for Eleven Finance: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-28 17:55:06Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 422,769,704

   sig

   2jyiUmV2C7WN…4RT7KEFMcopyexplorer ↗

   hash

   JAb98GpYRHfb…t1gZcCf4copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (6138 B) ▸

   {"actor":"system:backfill","investigation_id":"f0fb353d-7225-4009-b497-c32fcb3f7b2d","kind":"publish","page_slug":"eleven-finance","published_at":"2026-05-28T17:55:06.018Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Eleven Finance","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://rekt.news/11-rekt","type":"other","url":""},{"credibility":3,"name":"https://elevenfinance.medium.com/eleven-finance-nrv-vault-exploit-and-loss-of-funds-a-post-mortem-437a79ded743","type":"other","url":""},{"credibility":3,"name":"https://peckshield.medium.com/eleven-finance-incident-root-cause-analysis-123b5675fa76","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://skynet.certik.com/projects/elevenfinance","type":"other","url":""},{"credibility":3,"name":"https://docs.eleven.finance/security","type":"other","url":""},{"credibility":3,"name":"https://elevenfinance.medium.com/eleven-finance-nrv-vault-exploit-and-loss-of-funds-a-post-mortem-437a79ded743","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://elevenfinance.medium.com/eleven-finance-recovery-plan-a3869f8242d0","type":"other","url":""},{"credibility":3,"name":"https://elevenfinance.medium.com/eleven-finance-a-plan-for-the-return-of-funds-recovered-from-the-nerve-vault-exploit-39a006af20d3","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://bscscan.com/token/0xacd7b3d9c10e97d0efa418903c0c7669e702e4c0","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/currencies/eleven-finance/","type":"other","url":""},{"credibility":3,"name":"https://coinpaprika.com/coin/ele-eleven-finance/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.scam-detector.com/validator/eleven-finance-review/","type":"other","url":""},{"credibility":3,"name":"https://isthiscoinascam.com/check/eleven-finance","type":"other","url":""}]}],"sources_used":[{"credibility":2,"name":"Eleven Finance — REKT News","type":"news_article","url":"https://rekt.news/11-rekt"},{"credibility":2,"name":"Eleven Finance NRV Vault Exploit Post-Mortem (Medium)","type":"official","url":"https://elevenfinance.medium.com/eleven-finance-nrv-vault-exploit-and-loss-of-funds-a-post-mortem-437a79ded743"},{"credibility":2,"name":"PeckShield Incident Root Cause Analysis (Medium)","type":"research","url":"https://peckshield.medium.com/eleven-finance-incident-root-cause-analysis-123b5675fa76"},{"credibility":2,"name":"Eleven.Finance Recovery Plan (Medium)","type":"official","url":"https://elevenfinance.medium.com/eleven-finance-recovery-plan-a3869f8242d0"},{"credibility":2,"name":"Eleven Finance — Plan for Return of Recovered Funds (Medium)","type":"official","url":"https://elevenfinance.medium.com/eleven-finance-a-plan-for-the-return-of-funds-recovered-from-the-nerve-vault-exploit-39a006af20d3"},{"credibility":2,"name":"CertiK Skynet — Eleven Finance","type":"research","url":"https://skynet.certik.com/projects/elevenfinance"},{"credibility":1,"name":"Eleven Finance ELE Token on BscScan","type":"on_chain","url":"https://bscscan.com/token/0xacd7b3d9c10e97d0efa418903c0c7669e702e4c0"},{"credibility":2,"name":"CoinMarketCap — Eleven Finance (ELE)","type":"other","url":"https://coinmarketcap.com/currencies/eleven-finance/"},{"credibility":3,"name":"Scam Detector — eleven.finance Review","type":"community_report","url":"https://www.scam-detector.com/validator/eleven-finance-review/"},{"credibility":2,"name":"Eleven Finance — Nerve Vaults Exploit Community Update (Medium)","type":"official","url":"https://elevenfinance.medium.com/eleven-finance-nerve-vaults-exploit-an-important-community-update-92e508a88d52"}],"summary":"Eleven Finance is a yield optimizer and leveraged yield farming protocol deployed on Binance Smart Chain (BSC) and Polygon. On June 22, 2021, attackers exploited a critical smart contract vulnerability in the protocol's Nerve-partnership vaults, draining approximately $4.5–4.8 million. The team published a recovery plan, repaid an initial 25% tranche from personal debt, and later announced full principal recovery; however, the ELE token has since lost over 99% of its value from its all-time high, and the protocol appears largely inactive.","timeline":[{"date":"2021-04-01","event":"Eleven Finance publishes April 2021 update detailing vault ecosystem on BSC and Polygon, introducing the ELE token and Bigfoot leveraged yield farming platform.","source":""},{"date":"2021-06-22","event":"Attacker exploits the emergencyBurn() vulnerability in six Nerve-partnership vaults on BSC. Approximately $4.5–4.8 million is drained via flash loan attack. Attacker bridges proceeds to Ethereum via the Nerve bridge.","source":""},{"date":"2021-06-24","event":"Eleven Finance publishes post-mortem acknowledging developer oversight as root cause. Confirms NRV vaults represented 4% of total TVL and that remaining vaults continued operating. Bigfoot/BigFoot platform taken offline temporarily.","source":""},{"date":"2021-06-25","event":"A self-described whitehat hacker returns 849.2 BNB (~$252,000) to the Eleven Finance deployer address.","source":""},{"date":"2021-07-01","event":"Eleven Finance publishes full Recovery Plan. Phase 1 distributes 25% of losses (~$1.2M) to affected users. Team announces personal debt assumption and 11RV token structure for Phase 2 compensation.","source":""},{"date":"2021-07-19","event":"CertiK delivers audit of Eleven Finance lending bank contracts. Exploited vault contracts were not in audit scope.","source":""},{"date":"2021-10-04","event":"Eleven Finance announces full recovery of exploited funds. Phase 2 distribution planned to bring users near 100% compensation in BUSD.","source":""},{"date":"2022-01-01","event":"Team reports full compensation repayment to affected Nerve Vault exploit users, approximately 3 months ahead of initial estimate.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 3797e2f4-7a5c-4e8e-b54e-8dd3859cf607copy
2. #2rescoreby systemsystem

   2026-10-10 18:48:07Z
   Score: 32 → 59 (+27)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 32 → 59. Problems weighed by who is responsible: incidents the subject suffered −6.4, concerns that are not fraud −3.2, problems around the subject, caused by others −1.6.
   anchoranchored

   chain

   ●mainnet-betaslot 455,368,061

   sig

   PLu1RpdhMC9a…ahvZDAdRcopyexplorer ↗

   hash

   3XBHSVNnrpZT…6Ke8u8K4copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (610 B) ▸

   {"actor":"system","decided_at":"2026-10-10T18:48:07.741Z","decision":"rescore","investigation_id":"f0fb353d-7225-4009-b497-c32fcb3f7b2d","new_score":59,"page_slug":"eleven-finance","prev_score":32,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 32 → 59. Problems weighed by who is responsible: incidents the subject suffered −6.4, concerns that are not fraud −3.2, problems around the subject, caused by others −1.6.","score_delta":27,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 50148f86-b23e-49e9-a9e4-d384ea092649copy
3. #3reviewby reviewerreviewer

   2026-11-02 09:41:36Z
   Score: 59 → 59 (no score change)
   The exploit narrative (emergencyBurn bug, flash loan, roughly $4.5M loss) is broadly supported by Rekt and secondary PeckShield coverage. The attacker address attribution is imprecise. The recovery and compensation figures could not be verified because the Medium sources were blocked. The ZachXBT section is openly hedged. Current status is unclear, with one aggregator suggesting the project was discontinued in 2022.
   anchoranchored

   chain

   ●mainnet-betaslot 464,448,696

   sig

   Lpkcz8Nwt6Ly…Ddq85rA4copyexplorer ↗

   hash

   CPytv2iVQD1b…PzRVnPkucopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1305 B) ▸

   {"actor":"reviewer","artifact_identity":"9bf0d1eba14623b648e12162da08b88b","blocked_count":1,"decided_at":"2026-11-02T09:41:36.711Z","decision":"review","disputed_pct":0.25,"findings_hash":"CcJki6SjtxE773aWH6vT44oQh65Jcc4wJM7P4CjYT7vE","investigation_id":"f0fb353d-7225-4009-b497-c32fcb3f7b2d","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":59,"omissions":{"material":0,"total":1},"page_content_hash":"4cf2c5e89fdcae1f257793f739dd4b8ecfc709ea3801ab16709d305d1e9601b1","page_slug":"eleven-finance","prev_score":59,"reason":"The exploit narrative (emergencyBurn bug, flash loan, roughly $4.5M loss) is broadly supported by Rekt and secondary PeckShield coverage. The attacker address attribution is imprecise. The recovery and compensation figures could not be verified because the Medium sources were blocked. The ZachXBT section is openly hedged. Current status is unclear, with one aggregator suggesting the project was discontinued in 2022.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":4,"sequence_num":3,"subject_status":"unknown","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 30972fc3-2faf-4cbf-a514-df01d2db59e9copy
4. #4review reviseby judgejudge

   2026-11-02 09:41:36Z
   Score: 59 → 59 (no score change)
   Of five claims reviewed, one (claim_findings[3], the recovery plan figures) could not be checked because the source blocked the reviewer, so it is left out of the percentage. Of the remaining four, one is unverifiable (claim_findings[4], the statement that the website remains accessible, which a single aggregator contradicts), giving a disputed share of 25%. Two further claims are only partly supported: the $4.8M upper loss figure (claim_findings[0]) and the attacker address 0x8b29, which appears to be an attack contract rather than the primary address (claim_findings[1]). The core exploit narrative is broadly supported, the one omission is minor, and reviewer confidence is low (0.4), so the penalty is kept at the mild end of the minor band.
   anchoranchored

   chain

   ●mainnet-betaslot 464,448,702

   sig

   36Tav7HFvAye…5B9DQBSdcopyexplorer ↗

   hash

   oq4vmmuCoiED…HKTBaXq7copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1433 B) ▸

   {"actor":"judge","artifact_identity":"9bf0d1eba14623b648e12162da08b88b","band_override":null,"blocked_count":1,"decided_at":"2026-11-02T09:41:36.711Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.25,"investigation_id":"f0fb353d-7225-4009-b497-c32fcb3f7b2d","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":59,"page_slug":"eleven-finance","prev_score":59,"reason":"Of five claims reviewed, one (claim_findings[3], the recovery plan figures) could not be checked because the source blocked the reviewer, so it is left out of the percentage. Of the remaining four, one is unverifiable (claim_findings[4], the statement that the website remains accessible, which a single aggregator contradicts), giving a disputed share of 25%. Two further claims are only partly supported: the $4.8M upper loss figure (claim_findings[0]) and the attacker address 0x8b29, which appears to be an attack contract rather than the primary address (claim_findings[1]). The core exploit narrative is broadly supported, the one omission is minor, and reviewer confidence is low (0.4), so the penalty is kept at the mild end of the minor band.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":4,"sequence_num":4,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision c81d8686-f362-4e6b-b174-d00865806d1ccopy
5. #5rescoreby systemsystem

   2026-11-02 09:41:37Z
   Score: 59 → 63 (+4)
   Recalculated after the fact-check of 2026-11-02. Rescored under Scoring v2, the published formula (avoid.net/scoring): 59 → 63. Problems weighed by who is responsible: incidents the subject suffered −3.2, concerns that are not fraud −3.2, problems around the subject, caused by others −0.8; 2 section(s) set aside until a failed fact-check is resolved.
   anchoranchored

   chain

   ●mainnet-betaslot 464,448,707

   sig

   5bkBiaSaZfbv…k4auxZSZcopyexplorer ↗

   hash

   7Puc5GTzQvUP…SzhbUhnCcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (720 B) ▸

   {"actor":"system","decided_at":"2026-11-02T09:41:36.711Z","decision":"rescore","investigation_id":"f0fb353d-7225-4009-b497-c32fcb3f7b2d","new_score":63,"page_slug":"eleven-finance","prev_score":59,"reason":"Recalculated after the fact-check of 2026-11-02. Rescored under Scoring v2, the published formula (avoid.net/scoring): 59 → 63. Problems weighed by who is responsible: incidents the subject suffered −3.2, concerns that are not fraud −3.2, problems around the subject, caused by others −0.8; 2 section(s) set aside until a failed fact-check is resolved.","score_delta":4,"score_model":"v2","sequence_num":5,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 2b3bf538-48f5-4f5b-8891-739d5c9405cccopy