Audit log

Every state-changing event for FixedFloat: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-19 20:59:38Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 420,846,228

   sig

   2FZyj3oQQuQx…9j7ffsVQcopyexplorer ↗

   hash

   GSbKqpnRbdxz…z457YMEhcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (5881 B) ▸

   {"actor":"system:backfill","investigation_id":"6ac80542-8508-4b75-aa70-eaabfed272e6","kind":"publish","page_slug":"fixedfloat","published_at":"2026-05-19T20:59:37.948Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"FixedFloat","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://u.today/fixedfloat-introduces-multi-blockchain-noncustodial-exchange-with-no-kyc-review"},{"credibility":3,"name":"","type":"other","url":"https://ff.io/faq"},{"credibility":3,"name":"","type":"other","url":"https://kycnot.me/service/fixedfloat"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://decrypt.co/218077/fixedfloat-hack-26-million-bitcoin-ethereum"},{"credibility":3,"name":"","type":"other","url":"https://unchainedcrypto.com/crypto-exchange-fixedfloat-hacked-for-26-million-in-bitcoin-ether/"},{"credibility":3,"name":"","type":"other","url":"https://www.cryptotimes.io/2024/04/02/fixedfloat-hit-by-2-8-million-crypto-hack-again/"},{"credibility":3,"name":"","type":"other","url":"https://cryptoslate.com/fixedfloat-reportedly-suffers-2-8-million-theft-tether-blocks-400000-from-attackers/"},{"credibility":3,"name":"","type":"other","url":"https://ff.io/en/blog/news/reasons-for-hacking"},{"credibility":3,"name":"","type":"other","url":"https://www.bankinfosecurity.com/cryptohack-roundup-26m-fixedfloat-hack-a-24424"},{"credibility":3,"name":"","type":"other","url":"https://www.halborn.com/blog/post/explained-the-fixedfloat-hack-february-2024"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://medium.com/coinmonks/fixed-float-exploit-tracing-the-26-million-lost-to-the-hack-25fda467b577"},{"credibility":3,"name":"","type":"other","url":"https://www.elliptic.co/blog/the-rise-and-fall-of-exch-the-dark-service-used-by-north-korea-to-launder-200-million-stolen-from-bybit"},{"credibility":3,"name":"","type":"other","url":"https://cointelegraph.com/news/germany-seizes-38-million-crypto-bybit-hack-linked-exch"},{"credibility":3,"name":"","type":"other","url":"https://www.coindesk.com/markets/2024/04/02/bitcoin-lightning-exchange-fixedfloat-sees-suspicious-transfers-of-3m-to-ethereum-tron"},{"credibility":3,"name":"","type":"other","url":"https://medium.com/sentinel-protocol/the-fixedfloat-april-hack-comprehensive-analysis-and-insights-9bac2e2ca61d"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://u.today/fixedfloat-introduces-multi-blockchain-noncustodial-exchange-with-no-kyc-review"},{"credibility":3,"name":"","type":"other","url":"https://ff.io/en/blog/news/reasons-for-hacking"},{"credibility":3,"name":"","type":"other","url":"https://www.halborn.com/blog/post/explained-the-fixedfloat-hack-february-2024"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://beincrypto.com/fixed-float-two-hacks-survival-story/"},{"credibility":3,"name":"","type":"other","url":"https://coinpedia.org/press-release/fixedfloat-exchange-statement-on-security-breaches-and-future-enhancements/"},{"credibility":3,"name":"","type":"other","url":"https://www.trustpilot.com/review/ff.io"},{"credibility":3,"name":"","type":"other","url":"https://kycnot.me/service/fixedfloat"},{"credibility":3,"name":"","type":"other","url":"https://ff.io/en/blog/news/reasons-for-hacking"}]}],"sources_used":[],"summary":"FixedFloat (ff.io) is a non-custodial, no-KYC cryptocurrency swap exchange launched in 2018 that suffered two confirmed security breaches in 2024 totaling approximately $28.9 million in stolen assets. Both attacks were attributed to the same threat actor exploiting vulnerabilities in FixedFloat's third-party hosting provider, Time4VPS, and stolen funds were routed through the eXch mixer — a service subsequently shut down by German authorities for laundering proceeds from major crypto thefts. The platform resumed operations after a two-month suspension but has faced ongoing scrutiny for its anonymity-first model, opaque team structure, and inadequate incident disclosure.","timeline":[{"date":"2018-01-01","event":"FixedFloat launches as a non-custodial, no-KYC cryptocurrency swap exchange.","source":""},{"date":"2024-02-16","event":"First breach: 409.304 BTC and 1,728.48 ETH (approximately $26.1 million) drained in under 45 minutes across nine transactions. Platform enters maintenance mode.","source":""},{"date":"2024-02-18","event":"FixedFloat publicly confirms the hack, attributing it to 'vulnerabilities and security gaps in its infrastructure.' Stolen Ethereum funds traced to eXch mixer by PeckShield.","source":""},{"date":"2024-03-31","event":"Alleged same attacker gains unauthorized access to all FixedFloat servers still hosted at Time4VPS.","source":""},{"date":"2024-04-01","event":"Second breach: approximately $2.8 million drained from FixedFloat's Ethereum hot wallet. Attacker locks FixedFloat out of Time4VPS account by changing recovery email.","source":""},{"date":"2024-04-02","event":"Cyvers alerts community to suspicious FixedFloat transactions. CoinDesk and CryptoSlate report the second hack. Tether freezes approximately $400,000 in attacker-linked USDT.","source":""},{"date":"2024-04-30","event":"German authorities (BKA/ZIT) shut down eXch — the primary laundering destination for FixedFloat's stolen Ethereum — seizing approximately $38.5 million in crypto assets.","source":""},{"date":"2024-06-01","event":"FixedFloat resumes operations after approximately two-month suspension, claims infrastructure migrated away from Time4VPS and security improvements implemented. Attributes both hacks to Time4VPS vulnerabilities in official statement.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 08fbd7ec-9043-4afc-b1ef-237c286d10d2copy
2. #2reviewby reviewerreviewer

   2026-11-01 22:32:27Z
   Score: 10 → 10 (no score change)
   Core facts hold: the February and April 2024 breaches, their amounts, eXch routing, and the Time4VPS account from FixedFloat's own post. The eXch takedown is dated 2024 on the page, but it happened on 30 April 2025, and that error appears in both the section and the timeline. The page also attributes the FixedFloat laundering link to the German authorities when it comes from analysts. It cites a 'privately to journalists' statement that is not in the source, and it places the two-month suspension after the February breach when it followed the April one. Checking was limited by blocked sources and partly relied on search summaries. Current status could not be determined.
   anchoranchored

   chain

   ●mainnet-betaslot 464,261,213

   sig

   5RJkXQRJZRST…F3oZYUcrcopyexplorer ↗

   hash

   4Zs38wzvEuL4…25ayuS3tcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1525 B) ▸

   {"actor":"reviewer","artifact_identity":"140bacab8ae98d98d5661e7321540c58","blocked_count":1,"decided_at":"2026-11-01T22:32:27.259Z","decision":"review","disputed_pct":0.4444,"findings_hash":"9AbZ9AhqQypnKoBVH7PsG35piKfU8DKD6t21AaV2uvzC","investigation_id":"6ac80542-8508-4b75-aa70-eaabfed272e6","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":10,"page_content_hash":"88efcd331ea4a2d1738c5dac22e172649f54a4181c83959ec00b2463f7f0071c","page_slug":"fixedfloat","prev_score":10,"reason":"Core facts hold: the February and April 2024 breaches, their amounts, eXch routing, and the Time4VPS account from FixedFloat's own post. The eXch takedown is dated 2024 on the page, but it happened on 30 April 2025, and that error appears in both the section and the timeline. The page also attributes the FixedFloat laundering link to the German authorities when it comes from analysts. It cites a 'privately to journalists' statement that is not in the source, and it places the two-month suspension after the February breach when it followed the April one. Checking was limited by blocked sources and partly relied on search summaries. Current status could not be determined.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":9,"sequence_num":2,"subject_status":"unknown","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 571e81a4-a452-41fe-9f4a-1329958f40a6copy
3. #3review reviseby judgejudge

   2026-11-01 22:32:27Z
   Score: 10 → 0 (-20)
   Of 10 claims checked, 1 could not be read because the source blocked the reviewer and is left out, leaving 9. Three were disputed and one could not be found in its cited source, so 4 of 9 (44%) fall in the significant-issues band. The disputed items are the eXch takedown dated 2024 instead of 30 April 2025 (claim_findings[0] and [1], one underlying error) and the two-month suspension placed after the February breach when it followed the April one (claim_findings[6]). The 'only privately to journalists' quote is not in the cited FixedFloat post (claim_findings[4]). The core facts hold: the February and April 2024 breach amounts, the eXch routing and the Time4VPS account were confirmed. The penalty is set in the middle of the band because the errors are mostly dates and attribution, and the reviewer's confidence is moderate (0.6). No omission or status contradiction was reported, but the page has no coverage after mid-2024.
   anchoranchored

   chain

   ●mainnet-betaslot 464,261,218

   sig

   2nNs69cMmRft…Q8XkwZwpcopyexplorer ↗

   hash

   DhFVWyXX64oC…zRnWkxkvcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1616 B) ▸

   {"actor":"judge","artifact_identity":"140bacab8ae98d98d5661e7321540c58","band_override":null,"blocked_count":1,"decided_at":"2026-11-01T22:32:27.259Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.4444,"investigation_id":"6ac80542-8508-4b75-aa70-eaabfed272e6","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":0,"page_slug":"fixedfloat","prev_score":10,"reason":"Of 10 claims checked, 1 could not be read because the source blocked the reviewer and is left out, leaving 9. Three were disputed and one could not be found in its cited source, so 4 of 9 (44%) fall in the significant-issues band. The disputed items are the eXch takedown dated 2024 instead of 30 April 2025 (claim_findings[0] and [1], one underlying error) and the two-month suspension placed after the February breach when it followed the April one (claim_findings[6]). The 'only privately to journalists' quote is not in the cited FixedFloat post (claim_findings[4]). The core facts hold: the February and April 2024 breach amounts, the eXch routing and the Time4VPS account were confirmed. The penalty is set in the middle of the band because the errors are mostly dates and attribution, and the reviewer's confidence is moderate (0.6). No omission or status contradiction was reported, but the page has no coverage after mid-2024.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":-20,"scored_claims":9,"sequence_num":3,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 317629c6-24a6-4339-8fec-03b2005df13acopy