Audit log

Every state-changing event for four.meme: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-29 16:13:03Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 422,972,369

   sig

   4qRn9fnZCU1L…E5dKGikMcopyexplorer ↗

   hash

   9u2gWXJPnmAW…13TXEMjLcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (6336 B) ▸

   {"actor":"system:backfill","investigation_id":"1be02c1b-0438-4836-bcbb-18f74708862e","kind":"publish","page_slug":"fourmeme","published_at":"2026-05-29T16:13:03.503Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"four.meme","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.kucoin.com/learn/crypto/what-is-four-meme-bnb-chain-memecoin-launchpad-and-how-does-it-work","type":"other","url":""},{"credibility":3,"name":"https://blog.mexc.com/what-is-four-token-form-a-binaryx-rebranding/","type":"other","url":""},{"credibility":3,"name":"https://cryptoslate.com/launchpads/four-meme-review/","type":"other","url":""},{"credibility":3,"name":"https://finance.yahoo.com/news/four-meme-records-2-6-073125161.html","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://cryptoslate.com/bnb-chains-memecoin-launchpad-four-meme-hit-by-200k-exploit-suspends-liquidity/","type":"other","url":""},{"credibility":3,"name":"https://beincrypto.com/four-meme-exploit-bnb-chain/","type":"other","url":""},{"credibility":3,"name":"https://cryptopotato.com/bsc-based-meme-coin-launchpad-four-meme-suffers-183k-exploit/","type":"other","url":""},{"credibility":3,"name":"https://www.ainvest.com/news/meme-suffers-183-000-exploit-highlighting-bnb-chain-vulnerabilities-2503/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://decrypt.co/310388/meme-coin-launchpad-four-meme-falls-victim-to-another-exploit","type":"other","url":""},{"credibility":3,"name":"https://lunaray.medium.com/four-meme-hack-analysis-7f320dc99b9e","type":"other","url":""},{"credibility":3,"name":"https://www.quillaudits.com/blog/hack-analysis/four-meme-attack-analysis","type":"other","url":""},{"credibility":3,"name":"https://cryptoslate.com/four-meme-handles-second-exploit-in-months-reinstates-launch-service/","type":"other","url":""},{"credibility":3,"name":"https://www.web3isgoinggreat.com/single/fourmeme-hack-2","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.cryptopolitan.com/fraudulent-four-meme-top-result-google/","type":"other","url":""},{"credibility":3,"name":"https://beincrypto.com/four-meme-hacked-suspends-token-trading/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://cryptoslate.com/launchpads/four-meme-review/","type":"other","url":""},{"credibility":3,"name":"https://www.cryptopolitan.com/four-meme-increases-token-launch-fee/","type":"other","url":""},{"credibility":3,"name":"https://coinspot.io/en/cryptocurrencies/four-meme-increased-the-token-launch-fee-to-fight-spam-and-toxic-memes/","type":"other","url":""},{"credibility":3,"name":"https://cryptorank.io/news/feed/3e175-four-meme-increases-token-launch-fee","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://beincrypto.com/four-meme-exploit-bnb-chain/","type":"other","url":""},{"credibility":3,"name":"https://www.quillaudits.com/blog/hack-analysis/four-meme-attack-analysis","type":"other","url":""},{"credibility":3,"name":"https://lunaray.medium.com/four-meme-hack-analysis-7f320dc99b9e","type":"other","url":""},{"credibility":3,"name":"https://cryptoslate.com/launchpads/four-meme-review/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.web3isgoinggreat.com/single/fourmeme-hack-2","type":"other","url":""},{"credibility":3,"name":"https://t.me/s/investigations","type":"other","url":""}]}],"sources_used":[],"summary":"four.meme is a permissionless meme token launchpad built on BNB Chain (BSC), operated under the Four (formerly BinaryX) ecosystem, that enables zero-KYC token creation with automatic bonding-curve-to-PancakeSwap liquidity migration. The platform suffered two confirmed smart contract exploits within six weeks in early 2025, losing a combined total of approximately $310,000 in user and pool funds. Repeat critical vulnerabilities, a phishing campaign that hijacked Google search results, and ecosystem-wide spam and token-pollution incidents raise substantial safety concerns for users.","timeline":[{"date":"2024-07-03","event":"four.meme launches on BNB Chain as the first dedicated meme token launchpad on BSC, with a fair-launch bonding curve model and automatic PancakeSwap migration.","source":""},{"date":"2025-02-11","event":"First smart contract exploit: attackers manipulate PancakeSwap V3 pool prices ahead of token launches due to missing price verification checks. Approximately $183,000–$200,000 stolen. four.meme suspends LP function and announces user compensation.","source":""},{"date":"2025-02-12","event":"A fraudulent clone of four.meme surfaces as a top Google Ads result, redirecting users searching for the legitimate platform to a phishing site. Community researchers issue warnings.","source":""},{"date":"2025-02-25","event":"BinaryX community vote finalizes rebrand to Four; token ticker changes from BNX/FOUR to FORM at a 1:1 swap ratio.","source":""},{"date":"2025-03-18","event":"Second smart contract exploit: attacker uses predictable PancakeSwap pair address and the 0x7f79f6df function to bypass transfer restrictions and drain pool liquidity during migration. Approximately $130,000–$174,000 stolen. Stolen BNB moved through FixedFloat.","source":""},{"date":"2025-03-18","event":"SlowMist, QuillAudits, and Lunaray publish technical analyses of the second exploit. four.meme suspends launch function and pledges another security review.","source":""},{"date":"2025-03-19","event":"four.meme resumes token launch function after internal security review. No third-party audit report is published.","source":""},{"date":"2025-10-01","event":"On-chain pollution attack floods four.meme with over 32,000 spam and low-quality tokens in a single day. Platform responds with a 0.01 BNB launch fee and manual review process.","source":""},{"date":"2025-10-13","event":"four.meme announces a $45 million Reload Airdrop in partnership with BNB Chain following a market downturn affecting tokens in its ecosystem.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision db8b3bf8-05db-4563-82d0-4458567a60b5copy
2. #2rescoreby systemsystem

   2026-10-10 18:44:30Z
   Score: 38 → 54 (+16)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 38 → 54. Problems weighed by who is responsible: incidents the subject suffered −6.4, problems around the subject, caused by others −3.2, concerns that are not fraud −3.2; legitimacy credit long-running +2.
   anchoranchored

   chain

   ●mainnet-betaslot 455,364,244

   sig

   5ukKfrtQbqAM…6ed1hpNjcopyexplorer ↗

   hash

   BLvLwxN7bAZS…YaCt5NQjcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (639 B) ▸

   {"actor":"system","decided_at":"2026-10-10T18:44:30.226Z","decision":"rescore","investigation_id":"1be02c1b-0438-4836-bcbb-18f74708862e","new_score":54,"page_slug":"fourmeme","prev_score":38,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 38 → 54. Problems weighed by who is responsible: incidents the subject suffered −6.4, problems around the subject, caused by others −3.2, concerns that are not fraud −3.2; legitimacy credit long-running +2.","score_delta":16,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision c8b000c3-ecb5-4990-a27a-2fd847614fbfcopy
3. #3acceptby agent:avoid-moderatoranalyzer

   2026-10-16 03:28:52Z
   Score: 54 → 53 (-1)
   Decrypt confirms a second four.meme exploit (March 18, 2025, ~$174k) via a PancakeSwap liquidity mechanism flaw, occurring roughly two months after an earlier ~$183k exploit, matching the submission's description of a repeat security incident.
   Source:https://decrypt.co/310388/meme-coin-launchpad-four-meme-falls-victim-to-another-exploit

   Wayback:archived snapshot2026-09-21 05:35:08Z
   anchoranchored

   chain

   ●mainnet-betaslot 457,487,473

   sig

   2bkg4DZYTGJS…RsdxkEgxcopyexplorer ↗

   hash

   6ZZoRACoz68W…NfYszrE8copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (709 B) ▸

   {"actor":"agent:avoid-moderator","decided_at":"2026-10-16T03:28:51.829Z","decision":"accept","investigation_id":"1be02c1b-0438-4836-bcbb-18f74708862e","new_score":53,"page_slug":"fourmeme","prev_score":54,"reason":"Decrypt confirms a second four.meme exploit (March 18, 2025, ~$174k) via a PancakeSwap liquidity mechanism flaw, occurring roughly two months after an earlier ~$183k exploit, matching the submission's description of a repeat security incident.","score_delta":-1,"sequence_num":3,"submission_content_hash":"a95d3bcd5553fe6180ae720f3974d6e3d853b5047af4b161134cae10628d6664","submission_id":"c09f3f16-7066-4091-8a43-685278475269","submission_kind":"url","submission_valence":"incriminating","v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 0b99a57f-1002-4872-befc-380e0016fc16copy
4. #4reviewby reviewerreviewer

   2026-10-27 19:10:03Z
   Score: 53 → 53 (no score change)
   The core exploit facts (Feb 11 and Mar 18, 2025 incidents, loss ranges, SlowMist root cause, the Oct 2025 pollution attack and fee) are supported by the sources I fetched. Issues found: the FixedFloat role looks reversed (it was the attacker's funding source), the interval between exploits is five weeks rather than six, the resumption date may be off by a day, the ZachXBT flag is unsupported, and the compensation claim was not found in the cited article. I did not fetch every cited source. The subject appears to be still operating.
   anchoranchored

   chain

   ●mainnet-betaslot 462,183,874

   sig

   fwUVz6pbQBQ4…Bxhq1s6Tcopyexplorer ↗

   hash

   HCbiPqgBmxSX…gzazUMCxcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1347 B) ▸

   {"actor":"reviewer","artifact_identity":"cea653845121d25d77d2b5182291be42","decided_at":"2026-10-27T19:10:03.421Z","decision":"review","disputed_pct":0.375,"findings_hash":"22wYVPNCypzcW32fi3xxgn12VCWqJLTLZFjL8dFCb893","investigation_id":"1be02c1b-0438-4836-bcbb-18f74708862e","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":53,"page_content_hash":"56e34dc6628c90e4ab45e5417672e528fd97f34d2f6f22a2f42fa7f2b9dfdf85","page_slug":"fourmeme","prev_score":53,"reason":"The core exploit facts (Feb 11 and Mar 18, 2025 incidents, loss ranges, SlowMist root cause, the Oct 2025 pollution attack and fee) are supported by the sources I fetched. Issues found: the FixedFloat role looks reversed (it was the attacker's funding source), the interval between exploits is five weeks rather than six, the resumption date may be off by a day, the ZachXBT flag is unsupported, and the compensation claim was not found in the cited article. I did not fetch every cited source. The subject appears to be still operating.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"sequence_num":4,"subject_status":"operating","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 4db9785c-7884-4528-a5a5-355749afbb08copy
5. #5review reviseby judgejudge

   2026-10-27 19:10:03Z
   Score: 53 → 53 (no score change)
   Of 8 claims checked, 3 could not be verified (claim_findings[1], [6], [7]), which puts the unverified share at 37.5% and in the significant-issues band. The core exploit facts, loss ranges and the October 2025 pollution attack were confirmed (claim_findings[0], [5]), and the review found no omissions and no sign the project has shut down, so the penalty sits at the lower end of the band. The unverified items are the ZachXBT flag, which the page itself admits is unconfirmed, an unsourced claim of no regulatory investigation, and a compensation claim the cited article does not mention. Separately, claim_findings[2] suggests the page reverses FixedFloat's role (it appears to be the attacker's funding source, not the laundering route), and the interval between exploits is five weeks, not six.
   anchoranchored

   chain

   ●mainnet-betaslot 462,183,879

   sig

   3WKozRmKCPVy…sd9pMSeDcopyexplorer ↗

   hash

   BdxFfLscNMJ3…mHaaxx11copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1440 B) ▸

   {"actor":"judge","artifact_identity":"cea653845121d25d77d2b5182291be42","band_override":null,"decided_at":"2026-10-27T19:10:03.421Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.375,"investigation_id":"1be02c1b-0438-4836-bcbb-18f74708862e","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":53,"page_slug":"fourmeme","prev_score":53,"reason":"Of 8 claims checked, 3 could not be verified (claim_findings[1], [6], [7]), which puts the unverified share at 37.5% and in the significant-issues band. The core exploit facts, loss ranges and the October 2025 pollution attack were confirmed (claim_findings[0], [5]), and the review found no omissions and no sign the project has shut down, so the penalty sits at the lower end of the band. The unverified items are the ZachXBT flag, which the page itself admits is unconfirmed, an unsourced claim of no regulatory investigation, and a compensation claim the cited article does not mention. Separately, claim_findings[2] suggests the page reverses FixedFloat's role (it appears to be the attacker's funding source, not the laundering route), and the interval between exploits is five weeks, not six.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"sequence_num":5,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 01d13a14-09d0-477d-9ca2-b855acaa3fe4copy