Audit log

Every state-changing event for Growth DeFi: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-28 18:46:29Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 422,777,494

   sig

   4F9pyrbZuNtN…JdLxdam2copyexplorer ↗

   hash

   6YLjnYQ583RH…icaqjU3ocopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (7939 B) ▸

   {"actor":"system:backfill","investigation_id":"34c018b1-ccde-499e-9f0d-f53bb4537f22","kind":"publish","page_slug":"growth-defi","published_at":"2026-05-28T18:46:28.951Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Growth DeFi","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://coinbureau.com/review/growth-defi-gro/","type":"other","url":""},{"credibility":3,"name":"https://growthdefi.medium.com/mor-capital-efficiency-for-bsc-a-novel-way-to-borrow-and-get-paid-for-doing-so-by-growth-20c97b542633","type":"other","url":""},{"credibility":3,"name":"https://www.crowdfundinsider.com/2021/09/180372-growth-defi-integrates-chainlink-price-feeds-to-support-lending-liquidation-other-services-for-mor-stablecoin-release/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://growthdefi.medium.com/raave-farming-contract-exploit-explained-f3b6f0b3c1b3","type":"other","url":""},{"credibility":3,"name":"https://www.quadrigainitiative.com/casestudy/growthdefihack.php","type":"other","url":""},{"credibility":3,"name":"https://smartcontractshacking.com/hacks/growth-defi-hack-2021","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://consensys.net/diligence/audits/2020/12/growth-defi-v1/","type":"other","url":""},{"credibility":3,"name":"https://diligence.consensys.io/audits/2021/06/growthdefi-wheat/","type":"other","url":""},{"credibility":3,"name":"https://www.certik.com/projects/growthdefi","type":"other","url":""},{"credibility":3,"name":"https://smartcontractshacking.com/hacks/growth-defi-hack-2021","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://growthdefi.medium.com/the-future-of-raave-58be3063dfdb","type":"other","url":""},{"credibility":3,"name":"https://brittanyd.medium.com/raave-to-groot-whats-next-for-growth-defi-bda76c7d9a6f","type":"other","url":""},{"credibility":3,"name":"https://www.quadrigainitiative.com/casestudy/growthdefihack.php","type":"other","url":""},{"credibility":3,"name":"https://growthdeficommunity.medium.com/growth-defi-community-recap-february-2021-f0ca4d9c9064","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://defillama.com/protocol/growth-defi","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/currencies/growthdefi/","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/currencies/growthdefi-new/","type":"other","url":""},{"credibility":3,"name":"https://www.bitdegree.org/crypto-tracker/top-bsc-dapps/growth-defi","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://en.wikipedia.org/wiki/ZachXBT","type":"other","url":""},{"credibility":3,"name":"https://twitter.com/zachxbt","type":"other","url":""}]}],"sources_used":[{"credibility":2,"name":"rAAVE Farming Contract Exploit Explained — Growth DeFi Medium","type":"official","url":"https://growthdefi.medium.com/raave-farming-contract-exploit-explained-f3b6f0b3c1b3"},{"credibility":2,"name":"Growth DeFi Hack (2021) — $1.4M Lost | Smart Contract Hacking","type":"research","url":"https://smartcontractshacking.com/hacks/growth-defi-hack-2021"},{"credibility":2,"name":"Feb 2021 - Growth DeFi Hack - $1.3m | Quadriga Initiative","type":"research","url":"https://www.quadrigainitiative.com/casestudy/growthdefihack.php"},{"credibility":2,"name":"Growth DeFi — DefiLlama Protocol Page","type":"on_chain","url":"https://defillama.com/protocol/growth-defi"},{"credibility":1,"name":"Growth DeFi V1 Audit — Consensys Diligence","type":"research","url":"https://consensys.net/diligence/audits/2020/12/growth-defi-v1/"},{"credibility":1,"name":"GrowthDeFi WHEAT Audit — Consensys Diligence","type":"research","url":"https://diligence.consensys.io/audits/2021/06/growthdefi-wheat/"},{"credibility":2,"name":"Growth DeFi — CertiK Security Leaderboard","type":"research","url":"https://www.certik.com/projects/growthdefi"},{"credibility":2,"name":"Growth DeFi Integrates Chainlink Price Feeds — Crowdfund Insider","type":"news_article","url":"https://www.crowdfundinsider.com/2021/09/180372-growth-defi-integrates-chainlink-price-feeds-to-support-lending-liquidation-other-services-for-mor-stablecoin-release/"},{"credibility":2,"name":"Growth DeFi GRO Token — CoinMarketCap","type":"other","url":"https://coinmarketcap.com/currencies/growthdefi/"},{"credibility":2,"name":"Growth DeFi xGRO Token — CoinMarketCap","type":"other","url":"https://coinmarketcap.com/currencies/growthdefi-new/"},{"credibility":3,"name":"rAAVE to gROOT: What's Next for Growth DeFi — Medium","type":"community_report","url":"https://brittanyd.medium.com/raave-to-groot-whats-next-for-growth-defi-bda76c7d9a6f"},{"credibility":3,"name":"Growth DeFi Community Recap February 2021 — Medium","type":"community_report","url":"https://growthdeficommunity.medium.com/growth-defi-community-recap-february-2021-f0ca4d9c9064"},{"credibility":2,"name":"Growth Defi Review: GRO Worth It? — Coin Bureau","type":"news_article","url":"https://coinbureau.com/review/growth-defi-gro/"},{"credibility":2,"name":"The Future of rAAVE — Growth DeFi Medium","type":"official","url":"https://growthdefi.medium.com/the-future-of-raave-58be3063dfdb"},{"credibility":2,"name":"MOR Capital Efficiency for BSC — Growth DeFi Medium","type":"official","url":"https://growthdefi.medium.com/mor-capital-efficiency-for-bsc-a-novel-way-to-borrow-and-get-paid-for-doing-so-by-growth-20c97b542633"}],"summary":"Growth DeFi is a Binance Smart Chain (BSC) yield aggregator and DeFi ecosystem founded in 2020, offering the GRO governance token, the WHEAT yield optimizer, and the MOR overcollateralized stablecoin. On February 8, 2021, the protocol suffered a flashloan price oracle exploit targeting its stkGRO/rAAVE staking contract, resulting in approximately $1.3–1.4 million in stolen funds with no full recovery. As of 2026, the protocol has an extremely low TVL of roughly $22,000 and the GRO token trades at near-zero valuations, indicating near-complete abandonment.","timeline":[{"date":"2020-08-26","event":"GRO token launches at approximately $19.66; Growth DeFi protocol goes live on Ethereum.","source":""},{"date":"2020-11-23","event":"Consensys Diligence begins V1 smart contract audit, completed December 11, 2020. Audit raises concerns about owner role permissions and DAO transition planning.","source":""},{"date":"2021-02-08","event":"Critical flashloan price oracle exploit drains approximately $1.3–1.4 million (~801 ETH) from the stkGRO/rAAVE staking contract. Attacker: 0x5e05bc89ae5f21b48500d9685526e0dab421a04b. No funds recovered.","source":""},{"date":"2021-02-09","event":"Growth DeFi team announces SAFE token airdrop compensation plan for affected stkGRO/rAAVE holders and announces migration from rAAVE to gROOT on BSC.","source":""},{"date":"2021-06-01","event":"Consensys Diligence completes second audit covering GrowthDeFi WHEAT protocol.","source":""},{"date":"2021-09-01","event":"Growth DeFi integrates Chainlink price feeds on BSC for MOR stablecoin collateral pricing and liquidation processing.","source":""},{"date":"2021-11-18","event":"CertiK delivers audit of the Growth DeFi MOR contract.","source":""},{"date":"2022-01-20","event":"Growth DeFi onboarded to CertiK security leaderboard; Skynet trust score not activated.","source":""},{"date":"2023-05-25","event":"Multiple price aggregators report last received price data for GRO token, indicating near-complete cessation of trading activity.","source":""},{"date":"2026-05-28","event":"Protocol TVL stands at approximately $22,249 (DefiLlama); GRO and xGRO tokens trade at near-zero valuations with negligible volume.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 31cf0e83-7ee6-4dac-9e1c-8698f325b4b5copy
2. #2rescoreby systemsystem

   2026-10-27 05:34:45Z
   Score: 28 → 50 (+22)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 28 → 50. Problems weighed by who is responsible: incidents the subject suffered −6.4, concerns that are not fraud −3.2, problems around the subject, caused by others −2.4; legitimacy credit long-running +10; no longer operating, so capped at 50.
   anchoranchored

   chain

   ●mainnet-betaslot 461,953,940

   sig

   FWv3WuurtcdN…FPsmUvDWcopyexplorer ↗

   hash

   4fuzMUKKiEGm…joYRPhN9copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (681 B) ▸

   {"actor":"system","decided_at":"2026-10-27T05:34:45.892Z","decision":"rescore","investigation_id":"34c018b1-ccde-499e-9f0d-f53bb4537f22","new_score":50,"page_slug":"growth-defi","prev_score":28,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 28 → 50. Problems weighed by who is responsible: incidents the subject suffered −6.4, concerns that are not fraud −3.2, problems around the subject, caused by others −2.4; legitimacy credit long-running +10; no longer operating, so capped at 50.","score_delta":22,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision b9ce3389-cb85-416c-9857-fa8db977664fcopy
3. #3reviewby reviewerreviewer

   2026-11-02 05:37:46Z
   Score: 50 → 50 (no score change)
   The exploit narrative is broadly consistent with the REKT account, but the summary and timeline mislabel it as a 'flashloan price oracle' exploit. The page's own section describes a fake-token validation flaw. The attacker address, the 801 ETH total and the current TVL figure could not be verified because the primary sources blocked access. The ZachXBT section has no support. Few claims were independently checked, so this review is limited.
   anchoranchored

   chain

   ●mainnet-betaslot 464,380,336

   sig

   3fpKZ24fqpf1…gkCZpvK5copyexplorer ↗

   hash

   EhRLByfStMmd…yrNGE1GYcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1290 B) ▸

   {"actor":"reviewer","artifact_identity":"e5e77b5f6dd464e4c07d00bc5f5a7058","blocked_count":2,"decided_at":"2026-11-02T05:37:46.230Z","decision":"review","disputed_pct":0.75,"findings_hash":"5eGzduX19JBWVB1a3rRg47raAgKj38iURoNGMEr3JjxZ","investigation_id":"34c018b1-ccde-499e-9f0d-f53bb4537f22","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":50,"page_content_hash":"8c6a182b5d1d36e16a33323d32b3db7f7a93fa4094de8b740333230954b067e1","page_slug":"growth-defi","prev_score":50,"reason":"The exploit narrative is broadly consistent with the REKT account, but the summary and timeline mislabel it as a 'flashloan price oracle' exploit. The page's own section describes a fake-token validation flaw. The attacker address, the 801 ETH total and the current TVL figure could not be verified because the primary sources blocked access. The ZachXBT section has no support. Few claims were independently checked, so this review is limited.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":4,"sequence_num":3,"subject_status":"unknown","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 234045da-654b-422f-910b-ebea083ccd97copy
4. #4review reviseby judgejudge

   2026-11-02 05:37:46Z
   Score: 50 → 50 (no score change)
   Of the four claims the reviewer could check (two more were excluded because the sources blocked access), two were disputed and one had no support, which puts the page in the highest dispute band. The summary and timeline call the February 2021 exploit a 'flashloan price oracle' attack (claim_findings[0], [1]), but the page's own exploit section and the REKT account describe a fake-token validation flaw, which the review confirmed (claim_findings[2]). The ZachXBT section has no supporting source (claim_findings[5]), though the page itself admits this. Because the reviewer's confidence is low (0.4), the exploit itself is confirmed, and the errors are mislabeling rather than fabricated events, the penalty is softened from denial to a revision at the top of the significant band.
   anchoranchored

   chain

   ●mainnet-betaslot 464,380,339

   sig

   3B7jGmQYMDXB…QsJEjBxjcopyexplorer ↗

   hash

   J6ro89g7abwh…nk432spicopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (2399 B) ▸

   {"actor":"judge","artifact_identity":"e5e77b5f6dd464e4c07d00bc5f5a7058","band_override":{"actual_delta":-30,"actual_verdict":"review_revise","disputed_pct":0.75,"expected_delta_range":[-50,-30],"expected_verdict":"review_deny","rationale":"Of the four claims the reviewer could check (two more were excluded because the sources blocked access), two were disputed and one had no support, which puts the page in the highest dispute band. The summary and timeline call the February 2021 exploit a 'flashloan price oracle' attack (claim_findings[0], [1]), but the page's own exploit section and the REKT account describe a fake-token validation flaw, which the review confirmed (claim_findings[2]). The ZachXBT section has no supporting source (claim_findings[5]), though the page itself admits this. Because the reviewer's confidence is low (0.4), the exploit itself is confirmed, and the errors are mislabeling rather than fabricated events, the penalty is softened from denial to a revision at the top of the significant band."},"blocked_count":2,"decided_at":"2026-11-02T05:37:46.230Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.75,"investigation_id":"34c018b1-ccde-499e-9f0d-f53bb4537f22","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":50,"page_slug":"growth-defi","prev_score":50,"reason":"Of the four claims the reviewer could check (two more were excluded because the sources blocked access), two were disputed and one had no support, which puts the page in the highest dispute band. The summary and timeline call the February 2021 exploit a 'flashloan price oracle' attack (claim_findings[0], [1]), but the page's own exploit section and the REKT account describe a fake-token validation flaw, which the review confirmed (claim_findings[2]). The ZachXBT section has no supporting source (claim_findings[5]), though the page itself admits this. Because the reviewer's confidence is low (0.4), the exploit itself is confirmed, and the errors are mislabeling rather than fabricated events, the penalty is softened from denial to a revision at the top of the significant band.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":4,"sequence_num":4,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 12a910ff-fd22-435e-b66b-79908807afe9copy