Audit log

Every state-changing event for GMGN.ai: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-07-22 02:11:35Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 443,501,008

   sig

   2y3syfozESiK…bvy4V4u9copyexplorer ↗

   hash

   Fqh7ht9dLXKy…GVbQnRXJcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (14024 B) ▸

   {"actor":"system:backfill","investigation_id":"fc811077-cde8-4cc1-9c08-8b91657cbf92","kind":"publish","page_slug":"gmgn-ai","published_at":"2026-07-22T02:11:35.700Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"GMGN.ai","sections":[{"content":"GMGN.ai is a memecoin-focused trading terminal covering Solana, Ethereum, Base, BNB Chain, and other networks. It combines a web-based charting/analytics terminal with a Telegram trading bot, both connected to the same underlying wallet, and it scans new token launches on venues such as Pump.fun, Four.meme, Raydium, and letsbonk.fun. Core features include token security screening, 'smart money' wallet tracking, and copy trading of tracked wallets. The platform reportedly charges a 1% fee per transaction with no subscription cost. According to industry write-ups, GMGN was founded in June 2023 by a team including co-founder 'Haze,' a former early member of the Pionex exchange, alongside founder Jerry Ma; the broader team is described as roughly 30 people, predominantly Chinese, with the company based in Singapore.","heading":"Platform Overview and Business Model","severity":"low","sources":[{"credibility":2,"name":"GMGN on Solana: Project Review, Programs, Token, Metrics | Solana Compass","type":"research","url":"https://solanacompass.com/projects/gmgn"},{"credibility":2,"name":"GMGN.ai official site","type":"official","url":"https://gmgn.ai/"},{"credibility":2,"name":"Exclusive Interview with GMGN Co-founder Haze - ChainCatcher","type":"news_article","url":"https://www.chaincatcher.com/en/article/2174404"},{"credibility":2,"name":"GMGN: A One-Stop Meme Trading Platform - Gate Learn","type":"research","url":"https://www.gate.com/learn/articles/gmgn-a-one-stop-meme-trading-platform/7667"}]},{"content":"GMGN's own documentation states that the platform is non-custodial with respect to trading balances: 'GMGN does not perform any operations on the user's wallet, and we do not have the ability to transfer any user's wallet balance.' Official guidance instructs users to apply a 'Zero Trust' posture, warns that 'the official GMGN bot will never ask for your wallet's private key first,' and advises verifying any GMGN-branded Telegram group, admin message, or download link against the official Twitter/X account (@gmgnai) and the official app link (gmgn.ai/app) before acting. This is a self-reported policy from the entity itself rather than an independently audited custody attestation, so it should be treated as a company claim, not a verified fact.","heading":"Custody Model and Official Security Position","severity":"medium","sources":[{"credibility":2,"name":"Safety Tip - GMGN Tutorial (official docs)","type":"official","url":"https://docs.gmgn.ai/index/safety-tip"},{"credibility":2,"name":"Q&A - GMGN Tutorial (official docs)","type":"official","url":"https://docs.gmgn.ai/index/q-a"}]},{"content":"GMGN has been the subject of repeated, well-documented impersonation campaigns. In January 2026, GMGN's official X account warned users not to install a fake 'GMGN' app that had appeared on the Apple App Store, stating that importing a private key into that app would result in the wallet being drained, and noting the genuine iOS app was still under App Store review at the time. At least one user publicly reported on X that a fake GMGN App Store listing resulted in their wallet being fully drained. Separately, cybersecurity outlets (itfunk.org and PCrisk) documented a 'Fake GMGN Website Scam' in which phishing sites impersonating gmgn.ai — distributed via rogue ads, spam links, compromised sites, or typosquatted domains — trick victims into connecting wallets and signing malicious smart contracts that grant scammers automatic drain access; losses in these cases are irreversible on-chain. Web searches conducted for this investigation also surfaced several look-alike domains (e.g., GitHub Pages sites styled as 'GMGN.AI' clones) that are not affiliated with the official gmgn.ai domain, underscoring an active phishing ecosystem built around the GMGN brand. These incidents describe fraud committed by third parties impersonating GMGN, not a breach of GMGN's own systems.","heading":"Impersonation, Phishing, and Fake App Incidents","severity":"high","sources":[{"credibility":2,"name":"GMGN.Ai official X warning on fake App Store app","type":"official","url":"https://x.com/gmgnai/status/1877356423610511861"},{"credibility":3,"name":"Julie Bush (X) — wallet drained via fake GMGN app","type":"social_media","url":"https://x.com/julie_bush/status/1883791862911369288"},{"credibility":2,"name":"Security Alert: Fake GMGN App Discovered on App Store - Outposts","type":"news_article","url":"https://outposts.io/article/security-alert-fake-gmgn-app-discovered-on-app-store-5c2255e2-a7c7-4efc-acde-32acc333e90c"},{"credibility":2,"name":"The Fake GMGN Website Scam - itfunk.org","type":"research","url":"https://www.itfunk.org/cyber-threats/online-scams/the-fake-gmgn-website-scam/"},{"credibility":2,"name":"Fake GMGN Website Scam - Removal and recovery steps - PCrisk","type":"research","url":"https://www.pcrisk.com/removal-guides/33299-fake-gmgn-website-scam"}]},{"content":"In May 2026, a trader using the alias 'Unihax0r' reported losing over $200,000 across Ethereum, Base, and BSC after wallets were drained via direct private-key compromise. Reporting on the incident states the affected wallets were originally created through a separate Telegram multichain trading bot called SIGMA and were subsequently imported into both GMGN and Rabby Wallet; the compromise is attributed to the wallet-creation process or a leak associated with SIGMA rather than to any action by GMGN. This case is included because it involves a GMGN-connected wallet, but available reporting does not implicate GMGN's own infrastructure as the source of the leak.","heading":"Unrelated Private-Key Compromise Involving a GMGN-Imported Wallet","severity":"medium","sources":[{"credibility":2,"name":"Crypto Trader Drained of $200K in Telegram Bot Linked Crypto Hack - The Crypto Times","type":"news_article","url":"https://www.cryptotimes.io/2026/05/11/crypto-trader-drained-of-200k-in-telegram-bot-linked-crypto-hack/"},{"credibility":2,"name":"Crypto trader loses $200K after Telegram bot leaks private keys - Cryptopolitan","type":"news_article","url":"https://www.cryptopolitan.com/crypto-trader-loses-200k-telegram-bot/"}]},{"content":"GMGN.ai holds a low aggregate rating on Trustpilot — approximately 2.1 out of 5 stars, with roughly 79% one-star reviews among a relatively small sample (around two dozen reviews) — with recurring complaints about copy-trading losses, unexpected or unclear fees, difficulty withdrawing balances, and unresponsive customer support. Some reviewers describe funds being transferred out of platform-linked Telegram wallets with no recovery path; it is not established in available sources how many of these cases stem from GMGN's own product behavior (e.g., slippage, fee structure, or copy-trade execution) versus phishing/impersonation of the type documented above. Because the review volume is small and largely self-reported/anecdotal (Tier 3), these complaints should be treated as indicative of user dissatisfaction and risk rather than proof of platform-side fraud. Third-party 'trust score' aggregators disagree sharply on GMGN's legitimacy: some (e.g., GridinSoft) rate the domain as very safe, while others (e.g., Scam Detector) rate it low-to-medium trust; these automated scores are based on domain/heuristic signals rather than investigative reporting and carry limited evidentiary weight.","heading":"User Complaints and Independent Review Ratings","severity":"medium","sources":[{"credibility":3,"name":"Gmgn Reviews - Trustpilot","type":"community_report","url":"https://www.trustpilot.com/review/gmgn.ai"},{"credibility":3,"name":"GMGN AI Review & How To Use (2026) - Solana Trading Bots","type":"other","url":"https://solanatradingbots.com/gmgn-ai-how-to-use/"},{"credibility":3,"name":"Is Copy Trading on GMGN.AI a SCAM!? - Dan Heilman Investing (YouTube)","type":"social_media","url":"https://www.youtube.com/watch?v=9KgdzlpeTrU"},{"credibility":3,"name":"gmgn.ai Reviews - Scam Detector","type":"other","url":"https://www.scam-detector.com/validator/gmgn-ai-review/"},{"credibility":3,"name":"Gmgn.ai Reviews - GridinSoft","type":"other","url":"https://gridinsoft.com/online-virus-scanner/url/gmgn-ai"}]},{"content":"No regulatory enforcement actions, court filings, or law-enforcement designations naming GMGN.ai were identified in available sources. GMGN operates in the largely unregulated on-chain trading-terminal/Telegram-bot category rather than as a licensed exchange or custodian, and no SEC, CFTC, DOJ, or equivalent international regulatory action against the platform was found as of this investigation.","heading":"Regulatory and Legal Status","severity":"low","sources":[]}],"sources_used":[{"credibility":2,"name":"GMGN on Solana: Project Review, Programs, Token, Metrics | Solana Compass","type":"research","url":"https://solanacompass.com/projects/gmgn"},{"credibility":2,"name":"GMGN.ai official site","type":"official","url":"https://gmgn.ai/"},{"credibility":2,"name":"Exclusive Interview with GMGN Co-founder Haze - ChainCatcher","type":"news_article","url":"https://www.chaincatcher.com/en/article/2174404"},{"credibility":2,"name":"GMGN: A One-Stop Meme Trading Platform - Gate Learn","type":"research","url":"https://www.gate.com/learn/articles/gmgn-a-one-stop-meme-trading-platform/7667"},{"credibility":2,"name":"Safety Tip - GMGN Tutorial (official docs)","type":"official","url":"https://docs.gmgn.ai/index/safety-tip"},{"credibility":2,"name":"Q&A - GMGN Tutorial (official docs)","type":"official","url":"https://docs.gmgn.ai/index/q-a"},{"credibility":2,"name":"GMGN.Ai official X warning on fake App Store app","type":"official","url":"https://x.com/gmgnai/status/1877356423610511861"},{"credibility":3,"name":"Julie Bush (X) — wallet drained via fake GMGN app","type":"social_media","url":"https://x.com/julie_bush/status/1883791862911369288"},{"credibility":2,"name":"Security Alert: Fake GMGN App Discovered on App Store - Outposts","type":"news_article","url":"https://outposts.io/article/security-alert-fake-gmgn-app-discovered-on-app-store-5c2255e2-a7c7-4efc-acde-32acc333e90c"},{"credibility":2,"name":"The Fake GMGN Website Scam - itfunk.org","type":"research","url":"https://www.itfunk.org/cyber-threats/online-scams/the-fake-gmgn-website-scam/"},{"credibility":2,"name":"Fake GMGN Website Scam - Removal and recovery steps - PCrisk","type":"research","url":"https://www.pcrisk.com/removal-guides/33299-fake-gmgn-website-scam"},{"credibility":2,"name":"Crypto Trader Drained of $200K in Telegram Bot Linked Crypto Hack - The Crypto Times","type":"news_article","url":"https://www.cryptotimes.io/2026/05/11/crypto-trader-drained-of-200k-in-telegram-bot-linked-crypto-hack/"},{"credibility":2,"name":"Crypto trader loses $200K after Telegram bot leaks private keys - Cryptopolitan","type":"news_article","url":"https://www.cryptopolitan.com/crypto-trader-loses-200k-telegram-bot/"},{"credibility":3,"name":"Gmgn Reviews - Trustpilot","type":"community_report","url":"https://www.trustpilot.com/review/gmgn.ai"},{"credibility":3,"name":"GMGN AI Review & How To Use (2026) - Solana Trading Bots","type":"other","url":"https://solanatradingbots.com/gmgn-ai-how-to-use/"},{"credibility":3,"name":"Is Copy Trading on GMGN.AI a SCAM!? - Dan Heilman Investing (YouTube)","type":"social_media","url":"https://www.youtube.com/watch?v=9KgdzlpeTrU"},{"credibility":3,"name":"gmgn.ai Reviews - Scam Detector","type":"other","url":"https://www.scam-detector.com/validator/gmgn-ai-review/"},{"credibility":3,"name":"Gmgn.ai Reviews - GridinSoft","type":"other","url":"https://gridinsoft.com/online-virus-scanner/url/gmgn-ai"}],"summary":"GMGN.ai is a Singapore-based, primarily Chinese-run multi-chain memecoin trading terminal and Telegram trading bot, launched in mid-2023, focused on Solana, Ethereum, Base, and BNB Chain token discovery, smart-money wallet tracking, and copy trading. The platform states it is non-custodial and cannot move user wallet balances itself, but it carries a poor Trustpilot rating driven by complaints about copy-trading losses and unclear fees, and it has been the target of extensive phishing and impersonation campaigns — including fake mobile apps and cloned websites — that have drained victims' wallets. No confirmed breach of GMGN's own infrastructure or misappropriation of user funds by the company has been documented in available sources.","timeline":[{"date":"2023-06","event":"GMGN reportedly founded, building a multi-chain memecoin trading terminal and Telegram bot targeting Solana and EVM chains.","source":"Exclusive Interview with GMGN Co-founder Haze - ChainCatcher","source_url":"https://www.chaincatcher.com/en/article/2174404"},{"date":"2026-01-08","event":"GMGN's official X account warned users that a fake 'GMGN' app on the Apple App Store was a scam capable of draining wallets if a private key was imported, noting the real iOS app was still under App Store review.","source":"GMGN.Ai official X post","source_url":"https://x.com/gmgnai/status/1877356423610511861"},{"date":"2026-01-26","event":"A user publicly reported on X that installing a fake GMGN app from the App Store resulted in their wallet being fully drained.","source":"Julie Bush on X","source_url":"https://x.com/julie_bush/status/1883791862911369288"},{"date":"2026-05-11","event":"A trader using wallets imported into GMGN (originally created via the separate SIGMA Telegram bot) reported losing over $200,000 across Ethereum, Base, and BSC in a private-key compromise incident; reporting attributes the leak to the wallet's origin rather than to GMGN.","source":"The Crypto Times","source_url":"https://www.cryptotimes.io/2026/05/11/crypto-trader-drained-of-200k-in-telegram-bot-linked-crypto-hack/"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 2ffbbafd-c559-4dbc-9743-3dbbc744f99fcopy
2. #2reviewby reviewerreviewer

   2026-08-27 07:05:45Z
   Score: 58 → 58 (no score change)
   The page's core factual scaffolding (founding date/team, fee structure, custody model, team identity, and general characterization of Trustpilot/scam-score sentiment) is well supported by primary and independent sources. However, two of the page's four timeline-anchored security incidents are dated a full year off (the January 2026 fake-app episode actually occurred in January 2025, per the cited tweets' own timestamps and a corroborating ChainCatcher article), and the summary's blanket claim that no breach of GMGN's own infrastructure has been documented is contradicted by well-reported October 2025 incidents (an anti-sandwich/MEV exploit and a separate phishing wave, both compensated by GMGN) that the page omits entirely. The page correctly avoids overstating an 'AI' capability claim and correctly treats named founders as self-identified rather than speculatively unmasked.
   anchoranchored

   chain

   ●mainnet-betaslot 443,524,567

   sig

   2uEfM1ait5YL…gvRNEBVocopyexplorer ↗

   hash

   8H75eNBhAapa…ehB832X5copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1230 B) ▸

   {"actor":"reviewer","decided_at":"2026-08-27T07:05:45.326Z","decision":"review","investigation_id":"fc811077-cde8-4cc1-9c08-8b91657cbf92","new_score":58,"page_slug":"gmgn-ai","prev_score":58,"reason":"The page's core factual scaffolding (founding date/team, fee structure, custody model, team identity, and general characterization of Trustpilot/scam-score sentiment) is well supported by primary and independent sources. However, two of the page's four timeline-anchored security incidents are dated a full year off (the January 2026 fake-app episode actually occurred in January 2025, per the cited tweets' own timestamps and a corroborating ChainCatcher article), and the summary's blanket claim that no breach of GMGN's own infrastructure has been documented is contradicted by well-reported October 2025 incidents (an anti-sandwich/MEV exploit and a separate phishing wave, both compensated by GMGN) that the page omits entirely. The page correctly avoids overstating an 'AI' capability claim and correctly treats named founders as self-identified rather than speculatively unmasked.","score_delta":0,"sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision e7d9093c-f043-4e47-b5ca-51b88a17139bcopy
3. #3review reviseby judgejudge

   2026-08-27 07:05:45Z
   Score: 58 → 43 (-15)
   Independently computed disputed_pct is 18.5% (5 disputed of 27 claims), which falls in the minor-issues band, and the page's core factual scaffolding — founding date, team identity, fee structure, custody model, and general scam/impersonation pattern — held up under independent verification (claim_findings[0-5, 7-14, 17-23, 26]). The penalty sits at the top of that band because the disputed claims are not evenly minor: the page's own summary affirmatively states no breach of GMGN's own infrastructure or misappropriation of funds has been documented, and this is contradicted by well-corroborated October 2025 incidents — an exploit of GMGN's own anti-sandwich nodes and a separate ~107-user phishing wave, both compensated by the company (claim_findings[6]). Two coverage_gaps rated high priority reinforce that this is an omission of a checkable, sourced incident rather than a matter of interpretation. Separately, two timeline entries (claim_findings[15], [16], [24], [25]) date a fake-App-Store episode a full year off, based on the cited tweets' own Snowflake timestamps and a corroborating ChainCatcher article, which shifts an incident's apparent recency. These are date and omission problems rather than reversals of the page's core narrative, and the reviewer confirmed several of the page's more sensitive judgment calls were handled correctly (accurate AI-capability framing, correct non-speculative founder attribution, appropriately hedged unsourced regulatory-negative claim), so denial or a significant-issues escalation is not warranted.
   anchoranchored

   chain

   ●mainnet-betaslot 443,524,573

   sig

   aWWJQijtaqNT…FKgZWndXcopyexplorer ↗

   hash

   5rfGy8HBC1bk…22aByjqmcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1908 B) ▸

   {"actor":"judge","decided_at":"2026-08-27T07:05:45.326Z","decision":"review_revise","investigation_id":"fc811077-cde8-4cc1-9c08-8b91657cbf92","new_score":43,"page_slug":"gmgn-ai","prev_score":58,"reason":"Independently computed disputed_pct is 18.5% (5 disputed of 27 claims), which falls in the minor-issues band, and the page's core factual scaffolding — founding date, team identity, fee structure, custody model, and general scam/impersonation pattern — held up under independent verification (claim_findings[0-5, 7-14, 17-23, 26]). The penalty sits at the top of that band because the disputed claims are not evenly minor: the page's own summary affirmatively states no breach of GMGN's own infrastructure or misappropriation of funds has been documented, and this is contradicted by well-corroborated October 2025 incidents — an exploit of GMGN's own anti-sandwich nodes and a separate ~107-user phishing wave, both compensated by the company (claim_findings[6]). Two coverage_gaps rated high priority reinforce that this is an omission of a checkable, sourced incident rather than a matter of interpretation. Separately, two timeline entries (claim_findings[15], [16], [24], [25]) date a fake-App-Store episode a full year off, based on the cited tweets' own Snowflake timestamps and a corroborating ChainCatcher article, which shifts an incident's apparent recency. These are date and omission problems rather than reversals of the page's core narrative, and the reviewer confirmed several of the page's more sensitive judgment calls were handled correctly (accurate AI-capability framing, correct non-speculative founder attribution, appropriately hedged unsourced regulatory-negative claim), so denial or a significant-issues escalation is not warranted.","score_delta":-15,"sequence_num":3,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision a7e2b073-acee-47bf-aa2b-d24d07944b88copy