Audit log

Every state-changing event for GoodDollar: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-09-14 23:37:45Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 447,103,537

   sig

   5r1cVj8Yg2Fm…VdR6jeJTcopyexplorer ↗

   hash

   BSU95Uj3mLY5…X4A9zAiCcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (17662 B) ▸

   {"actor":"system:backfill","investigation_id":"d8cb7307-a2f3-4d4c-bc73-50f44b65b74f","kind":"publish","page_slug":"gooddollar","published_at":"2026-09-14T23:37:45.417Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"GoodDollar","sections":[{"content":"GoodDollar is an open-source, non-profit Universal Basic Income protocol governed by the GoodDAO and supported by the Good Labs Foundation. It was conceived by Yoni Assia, co-founder and CEO of eToro, who launched the project in November 2018. The protocol distributes a daily stream of G$ cryptocurrency — its native token — to any verified individual with a mobile phone and internet access. GoodDollar launched publicly on September 1–7, 2020, and has grown to serve more than 963,000 claimants across more than 222 countries and territories, with approximately 2.3 billion G$ distributed cumulatively. The protocol operates across multiple chains including Celo (which holds approximately 28% of G$ supply), Ethereum, Fuse, and XDC Network. The GoodDollar Reserve — a collateral pool holding assets such as cUSD (Celo Dollars) and XDC — backs the G$ token and enables its minting and redemption mechanics.","heading":"Protocol Overview","severity":"low","sources":[{"credibility":2,"name":"eToro CEO Yoni Assia: using crypto to bridge the wealth gap — World Economic Forum","type":"news_article","url":"https://www.weforum.org/stories/2022/08/yoni-assia-etoro-gooddollar-ubi-crypto-wealth-gap/"},{"credibility":1,"name":"eToro Launches GoodDollar And Begins Delivering Universal Basic Income — Forbes","type":"news_article","url":"https://www.forbes.com/sites/lawrencewintermeyer/2020/09/10/etoro-launches-gooddollar-and-begins-delivering-universal-basic-income/"},{"credibility":2,"name":"A crypto project paying nearly 1 million people a daily income just had its reserves looted — CryptoSlate","type":"news_article","url":"https://cryptoslate.com/a-crypto-project-paying-nearly-1-million-people-a-daily-income-just-had-its-reserves-looted/"}]},{"content":"On or around September 3, 2026, Superfluid's Security Council detected insolvent accounts on its Celo deployment. By September 4, the root cause was traced to a vulnerability in the Super App whitelisting system. According to reporting by CryptoSlate citing GoodDollar's September 9 announcement, a malicious Super App was able to bypass Superfluid's whitelisting requirement and leave insolvent G$ balances active when they should have been liquidated. Those excess G$ balances were then exchanged against assets held in the GoodDollar Reserve and against external G$ liquidity pools. Superfluid confirmed the vulnerability was specific to its Celo deployment and that other networks were not exposed to the same flaw. Upon detection, Superfluid deployed a hotfix, reinstated Super App whitelisting on Celo, and closed the affected accounts. GoodDollar is the victim of this exploit — the protocol suffered losses due to a third-party infrastructure vulnerability; it did not cause the incident.","heading":"September 2026 Exploit: Mechanism","severity":"high","sources":[{"credibility":2,"name":"A crypto project paying nearly 1 million people a daily income just had its reserves looted — CryptoSlate","type":"news_article","url":"https://cryptoslate.com/a-crypto-project-paying-nearly-1-million-people-a-daily-income-just-had-its-reserves-looted/"},{"credibility":2,"name":"GoodDollar Community Update: Navigating Challenges and Forging Ahead — Medium (GoodDollar)","type":"official","url":"https://medium.com/gooddollar/gooddollar-community-update-navigating-challenges-and-forging-ahead-2c59db554a92"}]},{"content":"GoodDollar disclosed on September 9, 2026 that approximately 86,588 cUSD (Celo Dollars) was exchanged out of its Celo reserve, and approximately $20,857 was lost from its XDC reserve, for a combined disclosed loss of approximately $107,445. The precise mechanism by which the XDC reserve was affected had not been fully explained in publicly available reporting as of mid-September 2026, and both GoodDollar and Superfluid stated they were preparing separate incident reports. External G$ liquidity pool losses were also acknowledged but the amounts had not been disclosed. GoodDollar stated that its Celo and XDC reserves were not depleted in full, citing monitoring alerts, emergency pauses, and existing protocol safeguards as limiting the damage. However, reserve operations on both Celo and XDC remained paused, bridging was suspended, and liquidity in external pools remained limited. The protocol advised users against swapping G$ until liquidity conditions improved.","heading":"Financial Impact","severity":"high","sources":[{"credibility":2,"name":"A crypto project paying nearly 1 million people a daily income just had its reserves looted — CryptoSlate","type":"news_article","url":"https://cryptoslate.com/a-crypto-project-paying-nearly-1-million-people-a-daily-income-just-had-its-reserves-looted/"},{"credibility":2,"name":"GoodDollar Community Update: Navigating Challenges and Forging Ahead — Medium (GoodDollar)","type":"official","url":"https://medium.com/gooddollar/gooddollar-community-update-navigating-challenges-and-forging-ahead-2c59db554a92"}]},{"content":"The GoodDollar protocol serves over 963,000 active UBI claimants globally, making this incident notable for its humanitarian dimension as well as its financial one. As of mid-September 2026, GoodDollar stated that claiming, transfers, and identity verification had resumed on Celo, meaning day-to-day UBI distribution continued. However, reserve-backed exchange operations — the mechanism that gives G$ holders the ability to convert their holdings into other assets — remained suspended. The thin liquidity in external pools also meant that any swapping of G$ would likely result in significant slippage, effectively trapping value for holders until liquidity is restored. The protocol stated it was planning to address the excess G$ supply created by the exploit and to restore liquidity, but no timeline had been provided publicly.","heading":"Impact on UBI Claimants","severity":"medium","sources":[{"credibility":2,"name":"A crypto project paying nearly 1 million people a daily income just had its reserves looted — CryptoSlate","type":"news_article","url":"https://cryptoslate.com/a-crypto-project-paying-nearly-1-million-people-a-daily-income-just-had-its-reserves-looted/"}]},{"content":"Following detection of the exploit, Superfluid's Security Council deployed a hotfix to its Celo deployment, reinstated Super App whitelisting, and closed the insolvent accounts. GoodDollar paused reserve operations on both Celo and XDC networks and suspended cross-chain bridging. Good Labs Foundation reported the incident to Chainalysis, which according to reporting by CryptoSlate, created an incident report and flagged the wallet addresses involved in the exploit for monitoring. As of mid-September 2026, GoodDollar and Superfluid were each preparing separate, full incident reports. No public post-mortem had been released by either team within the window of available reporting. No attacker identity had been publicly disclosed.","heading":"GoodDollar and Superfluid Response","severity":"medium","sources":[{"credibility":2,"name":"A crypto project paying nearly 1 million people a daily income just had its reserves looted — CryptoSlate","type":"news_article","url":"https://cryptoslate.com/a-crypto-project-paying-nearly-1-million-people-a-daily-income-just-had-its-reserves-looted/"},{"credibility":2,"name":"GoodDollar Community Update: Navigating Challenges and Forging Ahead — Medium (GoodDollar)","type":"official","url":"https://medium.com/gooddollar/gooddollar-community-update-navigating-challenges-and-forging-ahead-2c59db554a92"}]},{"content":"This is not the first security incident GoodDollar has experienced. On December 17, 2023, the GoodDollar Reserve smart contract was exploited through an untrusted-input vulnerability, resulting in the unauthorized withdrawal of 627,328.47 cDAI and the unapproved minting of approximately 14 billion G$ tokens. The GoodDAO, acting through the Protocol Guardians, burned approximately 3.6 billion illicitly minted G$ and added a 100% transaction fee to the approximately 9 billion G$ remaining in the attacker's possession — a mechanism designed to ensure that any attempt to trade those funds would instead benefit the GoodDollar Reserve. The wallet address identified as the exploiter in that incident was 0xec577447d314cf1e443e9f4488216651450dbe7c, reportedly funded via Tornado Cash. All activities on GoodWallet and GoodDapp were temporarily paused during that incident. The 2023 incident and the September 2026 Superfluid incident are distinct events with different root causes.","heading":"Prior Security Incident: December 2023 Exploit","severity":"high","sources":[{"credibility":2,"name":"GoodDollar security alert on X (December 17, 2023)","type":"social_media","url":"https://x.com/gooddollarorg/status/1736410405419762000"},{"credibility":2,"name":"GoodDollar Community Update: Navigating Challenges and Forging Ahead — Medium (GoodDollar)","type":"official","url":"https://medium.com/gooddollar/gooddollar-community-update-navigating-challenges-and-forging-ahead-2c59db554a92"},{"credibility":2,"name":"Weekly Blockchain Security Watch — FairyProof Substack","type":"research","url":"https://fairyproof.substack.com/p/weekly-blockchain-security-watch-6b8"}]},{"content":"GoodDollar's dependency on third-party streaming infrastructure (Superfluid) introduced a supply-chain-style attack surface that the September 2026 incident illustrated in practice. The protocol's reliance on Superfluid for G$ streaming on Celo meant that a Superfluid-layer vulnerability — not a flaw in GoodDollar's own contracts — was sufficient to drain reserve assets. The GoodDollar Reserve's design, in which newly minted G$ can be redeemed against a collateral pool, creates a direct financial consequence when excess supply is created by an exploit: any tokens minted without authorization represent an unfunded claim on reserve assets. The protocol operates across multiple chains (Celo, Ethereum, Fuse, XDC), which diversifies operational risk but also increases the attack surface and complexity of reserve management. The GoodDollar data team maintains on-chain reserve analysis scripts and Dune queries for reproducible reserve auditing across these chains.","heading":"Protocol Architecture and Risk Factors","severity":"medium","sources":[{"credibility":2,"name":"A crypto project paying nearly 1 million people a daily income just had its reserves looted — CryptoSlate","type":"news_article","url":"https://cryptoslate.com/a-crypto-project-paying-nearly-1-million-people-a-daily-income-just-had-its-reserves-looted/"},{"credibility":2,"name":"Reserve Analysis: Celo/XDC/Fuse/Ethereum cheap-buyer and balance checks — GoodDollar data-team GitHub","type":"on_chain","url":"https://github.com/GoodDollar/data-team/issues/59"}]},{"content":"As of mid-September 2026, several material facts remained publicly undisclosed or unconfirmed: (1) The full incident reports from GoodDollar and Superfluid had not been published; (2) The exact mechanism by which the XDC reserve lost $20,857 had not been explained — XDC is a separate network from Celo and Superfluid's stated scope of the vulnerability was Celo-specific; (3) The total losses from external G$ liquidity pools had not been disclosed; (4) No attacker identity or wallet address was named in connection with the September 2026 incident; (5) No recovery plan with a specific timeline had been announced publicly. Readers should consult GoodDollar's official channels and the forthcoming incident reports for updates on these open points.","heading":"Pending Information and Open Questions","severity":"medium","sources":[{"credibility":2,"name":"A crypto project paying nearly 1 million people a daily income just had its reserves looted — CryptoSlate","type":"news_article","url":"https://cryptoslate.com/a-crypto-project-paying-nearly-1-million-people-a-daily-income-just-had-its-reserves-looted/"}]}],"sources_used":[{"credibility":2,"name":"A crypto project paying nearly 1 million people a daily income just had its reserves looted — CryptoSlate","type":"news_article","url":"https://cryptoslate.com/a-crypto-project-paying-nearly-1-million-people-a-daily-income-just-had-its-reserves-looted/"},{"credibility":2,"name":"GoodDollar Community Update: Navigating Challenges and Forging Ahead — Medium (GoodDollar official)","type":"official","url":"https://medium.com/gooddollar/gooddollar-community-update-navigating-challenges-and-forging-ahead-2c59db554a92"},{"credibility":1,"name":"eToro Launches GoodDollar And Begins Delivering Universal Basic Income — Forbes","type":"news_article","url":"https://www.forbes.com/sites/lawrencewintermeyer/2020/09/10/etoro-launches-gooddollar-and-begins-delivering-universal-basic-income/"},{"credibility":2,"name":"eToro CEO Yoni Assia: using crypto to bridge the wealth gap — World Economic Forum","type":"news_article","url":"https://www.weforum.org/stories/2022/08/yoni-assia-etoro-gooddollar-ubi-crypto-wealth-gap/"},{"credibility":2,"name":"GoodDollar security alert on X (December 17, 2023)","type":"social_media","url":"https://x.com/gooddollarorg/status/1736410405419762000"},{"credibility":2,"name":"Reserve Analysis: Celo/XDC/Fuse/Ethereum cheap-buyer and balance checks — GoodDollar data-team GitHub Issue #59","type":"on_chain","url":"https://github.com/GoodDollar/data-team/issues/59"},{"credibility":2,"name":"Weekly Blockchain Security Watch — FairyProof Substack","type":"research","url":"https://fairyproof.substack.com/p/weekly-blockchain-security-watch-6b8"},{"credibility":2,"name":"Yoni Assia launched the GoodDollar project in November 2018 — Medium (GoodDollar)","type":"official","url":"https://medium.com/gooddollar/yoni-assia-co-founder-and-ceo-of-etoro-launched-the-gooddollar-project-in-november-2018-bdf9498989a5"},{"credibility":3,"name":"GoodDollar Community Update (BitRss mirror)","type":"news_article","url":"https://bitrss.com/a-crypto-project-paying-nearly-1-million-people-a-daily-income-just-had-its-reserves-looted-250114"}],"summary":"GoodDollar is a universal basic income (UBI) crypto protocol founded by Yoni Assia (co-founder and CEO of eToro) that has distributed approximately 2.3 billion G$ tokens to over 963,000 claimants across 222+ countries. In early September 2026, a malicious 'Super App' exploited a Superfluid vulnerability specific to its Celo deployment to bypass whitelisting and liquidation safeguards, allowing excess G$ balances to drain approximately $107,000 from GoodDollar's Celo and XDC reserves, with additional undisclosed losses from external liquidity pools. Reserve and bridging operations remain paused as of mid-September 2026 while both GoodDollar and Superfluid prepare separate incident reports.","timeline":[{"date":"2018-11-01","event":"Yoni Assia (co-founder and CEO of eToro) launched the GoodDollar project and established the GoodDollar Foundation.","source":"Medium — GoodDollar","source_url":"https://medium.com/gooddollar/yoni-assia-co-founder-and-ceo-of-etoro-launched-the-gooddollar-project-in-november-2018-bdf9498989a5"},{"date":"2020-09-07","event":"GoodDollar launched publicly, beginning daily G$ UBI distribution to global claimants.","source":"Forbes","source_url":"https://www.forbes.com/sites/lawrencewintermeyer/2020/09/10/etoro-launches-gooddollar-and-begins-delivering-universal-basic-income/"},{"date":"2023-12-17","event":"GoodDollar Reserve smart contract exploited via untrusted-input vulnerability; 627,328.47 cDAI withdrawn and approximately 14 billion G$ illegitimately minted. Protocol Guardians paused the protocol, burned 3.6 billion illicitly minted G$, and added a 100% transaction fee to funds remaining in the exploiter's wallet.","source":"GoodDollar on X; FairyProof Substack","source_url":"https://x.com/gooddollarorg/status/1736410405419762000"},{"date":"2026-09-03","event":"Superfluid's Security Council detected insolvent accounts on its Celo deployment, initiating investigation.","source":"CryptoSlate","source_url":"https://cryptoslate.com/a-crypto-project-paying-nearly-1-million-people-a-daily-income-just-had-its-reserves-looted/"},{"date":"2026-09-04","event":"Superfluid traced the liquidation failure to a Super App whitelisting bypass bug specific to its Celo deployment. Superfluid deployed a hotfix, reinstated Super App whitelisting on Celo, and closed affected accounts.","source":"CryptoSlate","source_url":"https://cryptoslate.com/a-crypto-project-paying-nearly-1-million-people-a-daily-income-just-had-its-reserves-looted/"},{"date":"2026-09-09","event":"GoodDollar publicly announced the incident, disclosing that 86,588 cUSD had been drained from its Celo reserve and $20,857 from its XDC reserve. Reserve operations and bridging paused. Good Labs Foundation reported the incident to Chainalysis.","source":"GoodDollar Medium; CryptoSlate","source_url":"https://medium.com/gooddollar/gooddollar-community-update-navigating-challenges-and-forging-ahead-2c59db554a92"},{"date":"2026-09-10","event":"CryptoSlate published coverage of the incident, reporting $107,000+ in total disclosed reserve losses and noting that external liquidity pool losses remained undisclosed. Both GoodDollar and Superfluid stated they were preparing separate incident reports.","source":"CryptoSlate","source_url":"https://cryptoslate.com/a-crypto-project-paying-nearly-1-million-people-a-daily-income-just-had-its-reserves-looted/"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 5c0c4ce2-bad0-4a5d-8564-bbe060c3f55bcopy