← GoonFi1 decision on this page
Audit log
Every state-changing event for GoonFi: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.
- #1publishby system:backfill2026-05-29 02:28:26ZScore: ? → ? (no score change)anchoranchored
- chain
- ●mainnet-betaslot 422,847,469
- sig
5QaTnJkuQPmH…ob5PgVabexplorer ↗- hash
CTerKynDpwsh…FDUV35kvsha256 → base58
verifying row…full verify ↗canonical bytes (5036 B) ▸
{"actor":"system:backfill","investigation_id":"688e79fa-eb82-48bc-936a-f1fca1c23495","kind":"publish","page_slug":"goonfi","published_at":"2026-05-29T02:28:26.802Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"GoonFi","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://defillama.com/protocol/goonfi","type":"other","url":""},{"credibility":3,"name":"https://www.helius.dev/blog/solanas-proprietary-amm-revolution","type":"other","url":""},{"credibility":3,"name":"https://medium.com/coinmonks/centralization-again-4a8c774b2bdd","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://smartcontractshacking.com/hacks/goonfi-hack-2026","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/goonfi","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://incrypted.com/en/how-dark-pools-are-changing-defi-and-what-it-means-industry/","type":"other","url":""},{"credibility":3,"name":"https://medium.com/coinmonks/centralization-again-4a8c774b2bdd","type":"other","url":""},{"credibility":3,"name":"https://www.helius.dev/blog/solanas-proprietary-amm-revolution","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://incrypted.com/en/how-dark-pools-are-changing-defi-and-what-it-means-industry/","type":"other","url":""},{"credibility":3,"name":"https://x.com/smyyguy/status/1941500890336329733","type":"other","url":""},{"credibility":3,"name":"https://medium.com/coinmonks/centralization-again-4a8c774b2bdd","type":"other","url":""},{"credibility":3,"name":"https://www.benzinga.com/Opinion/25/10/48120742/defi-new-landlords","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://solscan.io/token/6kKBtdEoStQoHg1cTmjiXkRvEpyin1gadJctCoRPiT6f","type":"other","url":""},{"credibility":3,"name":"https://cryptorank.io/price/goonfi","type":"other","url":""},{"credibility":3,"name":"https://www.coingecko.com/en/coins/goonfi","type":"other","url":""},{"credibility":3,"name":"https://dexscreener.com/solana/8hbubwoji41pnxjoqhgtjimhpwmtoeytoqmy8h4be5cz","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://smartcontractshacking.com/hacks/goonfi-hack-2026","type":"other","url":""},{"credibility":3,"name":"https://incrypted.com/en/how-dark-pools-are-changing-defi-and-what-it-means-industry/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://smartcontractshacking.com/hacks/goonfi-hack-2026","type":"other","url":""},{"credibility":3,"name":"https://incrypted.com/en/how-dark-pools-are-changing-defi-and-what-it-means-industry/","type":"other","url":""},{"credibility":3,"name":"https://www.helius.dev/blog/solanas-proprietary-amm-revolution","type":"other","url":""}]}],"sources_used":[],"summary":"GoonFi is a proprietary automated market maker (Prop AMM) operating on Solana, launched in June 2025 with no public team, no frontend, and no published smart-contract audit. On March 28, 2026, a protocol logic vulnerability was exploited via mispricing arbitrage, resulting in approximately $254,000 in losses with no recovery reported. The protocol has been flagged by ZachXBT and is cited by researchers as representative of a broader Solana centralization concern, wherein anonymous, closed-source market makers capture an outsized share of DEX volume with minimal accountability.","timeline":[{"date":"2025-01-01","event":"ZeroFi, an early Solana Prop AMM peer, begins operations on Solana ahead of GoonFi's launch.","source":""},{"date":"2025-06-01","event":"GoonFi launches on Solana as a proprietary AMM with a single active trading pair (SOL-USD), no public team, and no frontend.","source":""},{"date":"2025-07-04","event":"Dan Smith (X: @smyyguy) publicly notes GoonFi's emergence, citing $25–50 million in daily volume on a single SOL-USD pair.","source":""},{"date":"2025-07-01","event":"Data shows 99.2% of GoonFi volume is aggregator-driven via Jupiter, indicating near-total routing dependency.","source":""},{"date":"2025-08-26","event":"GF token reaches its all-time high price before beginning a sustained decline.","source":""},{"date":"2026-03-28","event":"GoonFi exploited via mispricing arbitrage attack on Solana; approximately $254,000 drained. Funds allegedly moved through mixers. No recovery reported. Post-mortem published by 'cetipo' on X.","source":""},{"date":"2026-03-28","event":"ZachXBT flags GoonFi following the exploit. No public team response or compensation plan issued.","source":""},{"date":"2026-05-28","event":"GoonFi DEX cumulative volume stands at approximately $29.8 billion per DeFiLlama, while GF token 24-hour trading volume is approximately $702. Protocol TVL remains at $0.","source":""}]},"v":1}Verify offline (run on your own machine)python -m src.verify_decision 4a9d83b3-de28-4095-aee7-08c3dc4790e5
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine —
python -m src.verify_decision <event_id>.