Audit log

Every state-changing event for Hedera: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-29 16:12:48Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 422,972,325

   sig

   2LE4WijwS4e9…qvuebXR4copyexplorer ↗

   hash

   5kRX1frdY1d4…wZ5TPsVQcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (7113 B) ▸

   {"actor":"system:backfill","investigation_id":"09206d5c-aa4a-4fbb-82ef-48f4c5313be8","kind":"publish","page_slug":"hedera","published_at":"2026-05-29T16:12:48.626Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Hedera","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://en.wikipedia.org/wiki/Hedera_(distributed_ledger)","type":"other","url":""},{"credibility":3,"name":"https://hedera.com/blog/analysis-remediation-of-the-precompile-attack-on-the-hedera-network/","type":"other","url":""},{"credibility":3,"name":"https://www.bitget.com/academy/hedera-hbar-blockchain","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://hedera.com/blog/analysis-remediation-of-the-precompile-attack-on-the-hedera-network/","type":"other","url":""},{"credibility":3,"name":"https://www.theblock.co/post/218714/hedera-confirms-hackers-stole-tokens-from-dexs-exploiting-a-bug-in-smart-contract-service","type":"other","url":""},{"credibility":3,"name":"https://medium.com/pangolin-exchange/postmortem-the-march-9th-hack-on-hedera-6b5f9963c4fa","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/business/2023/03/09/hedera-turns-off-services-after-network-irregularities","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.ic3.gov/PSA/2025/PSA250603","type":"other","url":""},{"credibility":3,"name":"https://www.fbi.gov/investigate/cyber/alerts/2025/cybercriminals-defraud-hedera-hashgraph-network-non-custodial-wallet-users-through-nonfungible-token-airdrops-disguised-as-free-rewards","type":"other","url":""},{"credibility":3,"name":"https://www.bleepingcomputer.com/news/security/fbi-warns-of-nft-airdrop-scams-targeting-hedera-hashgraph-wallets/","type":"other","url":""},{"credibility":3,"name":"https://www.hashpack.app/community-blog/hederas-march-9-exploiter-a-prolific-scammer-within-the-hedera-ecosystem","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://hederacouncil.org/","type":"other","url":""},{"credibility":3,"name":"https://hedera.com/blog/a-new-era-for-hedera/","type":"other","url":""},{"credibility":3,"name":"https://arxiv.org/pdf/2311.06865","type":"other","url":""},{"credibility":3,"name":"https://allincrypto.com/understanding-hederas-governing-council-and-its-impact-on-decentralization/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.disruptionbanking.com/2025/09/26/hbars-price-vs-adoption-dissecting-whats-holding-the-token-back/","type":"other","url":""},{"credibility":3,"name":"https://www.bitget.com/academy/hbar-hedera-guide","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/currencies/hedera/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://hedera.com/blog/hedera-governing-council-votes-to-purchase-hashgraph-ip-commits-to-open-source-worlds-most-advanced-distributed-ledger-technology/","type":"other","url":""},{"credibility":3,"name":"https://www.prnewswire.com/news-releases/hedera-governing-council-votes-to-purchase-hashgraph-ip-commits-to-open-source-worlds-most-advanced-distributed-ledger-technology-301463865.html","type":"other","url":""},{"credibility":3,"name":"https://cryptobriefing.com/legal-analysis-can-patent-law-protect-hedera-hashgraph/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://coinpedia.org/news/clarity-act-could-permanently-end-the-secs-war-against-xrp-ada-hbar-and-xlm/","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/sec-deadline-grayscale-spot-hbar-etf-decision-2025/","type":"other","url":""},{"credibility":3,"name":"https://www.sec.gov/Archives/edgar/data/2084948/000095017025113803/hbar-20250909.htm","type":"other","url":""},{"credibility":3,"name":"https://help.hedera.com/hc/en-us/articles/360002542738-Will-regulators-deem-hbars-to-be-securities","type":"other","url":""}]}],"sources_used":[],"summary":"Hedera is a public distributed ledger technology platform using a patented hashgraph consensus mechanism, launched to mainnet in September 2019. In March 2023, the network suffered a protocol-level exploit in its Smart Contract Service that drained approximately $600,000 in liquidity pool tokens from three decentralized exchanges, requiring a full mainnet proxy shutdown for 41 hours. The platform operates under a council governance model comprising up to 39 global enterprises, which provides institutional stability but draws criticism for centralization relative to permissionless blockchains.","timeline":[{"date":"2016-01-01","event":"Swirlds, Inc. granted three U.S. patents protecting the hashgraph consensus algorithm invented by Dr. Leemon Baird.","source":""},{"date":"2019-09-16","event":"Hedera mainnet launched for open public access with HBAR as the native token.","source":""},{"date":"2021-09-15","event":"HBAR reached its all-time high price of approximately $0.57 USD.","source":""},{"date":"2022-01-19","event":"Hedera Governing Council voted to purchase the hashgraph intellectual property from Swirlds, Inc. and committed to releasing it under the Apache 2.0 open-source license.","source":""},{"date":"2022-08-05","event":"Hedera codebase transitioned to open source under Apache 2.0, completing the IP acquisition and open-sourcing commitment.","source":""},{"date":"2022-11-01","event":"Prolific scammer (account '2015717') allegedly began mass airdrop phishing campaigns targeting Hedera wallet users, sending fraudulent memos to tens of thousands of accounts.","source":""},{"date":"2023-03-09","event":"Attacker exploited a delegatecall precompile bug in Hedera's Smart Contract Service, stealing approximately $600,000 in tokens (DAI, USDT, USDC, WHBAR) from liquidity pools at Pangolin, SaucerSwap, and HeliSwap. Mainnet proxy access disabled at 20:18 UTC.","source":""},{"date":"2023-03-11","event":"Hedera mainnet upgraded with patch (version 0.34.5) blocking delegateCall to HTS precompile contracts; full service restored at 02:04 UTC, 41 hours after initial attack discovery.","source":""},{"date":"2024-11-15","event":"Hedera Governing Council approved governance reforms, reducing board size from seven to five members with two unaffiliated seats.","source":""},{"date":"2025-01-01","event":"HBAR reached approximately $0.40, a multi-year high driven by post-election crypto rally, before declining over 70% by end of Q1 2025.","source":""},{"date":"2025-10-01","event":"Canary Capital HBAR ETF launched, accumulating approximately $93 million in net inflows.","source":""},{"date":"2025-06-03","event":"FBI Internet Crime Complaint Center (IC3) issued formal public service announcement warning of cybercriminals defrauding Hedera Hashgraph non-custodial wallet users through NFT airdrop phishing schemes.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 9726716e-8133-4d32-9e5d-3a464e7a6be6copy
2. #2reviewby reviewerreviewer

   2026-06-09 20:26:16Z
   Score: 55 → 55 (no score change)
   The Hedera investigation page is factually solid overall, with all 16 atomic claims confirmed or partially supported. The four partially-supported findings involve minor inaccuracies: the ATH date is off by one day (Sep 16 not Sep 15); the 'full mainnet shutdown' language overstates what was actually a proxy access restriction; the DAI token attribution in the exploit is stated by Hedera but not independently corroborated by the Pangolin post-mortem; and the '70% decline by end of Q1 2025' claim overstates the pace of decline (price was roughly 50-55% off peak by March 31, 2025). No claims were found to contradict reputable current sources, and no link rot was detected on checked URLs.
   anchoranchored

   chain

   ●mainnet-betaslot 425,399,900

   sig

   2e6oD2zjStLC…HwtDq49fcopyexplorer ↗

   hash

   ANyd8dAUds6Z…5PG8d4cWcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1036 B) ▸

   {"actor":"reviewer","decided_at":"2026-06-09T20:26:16.360Z","decision":"review","investigation_id":"09206d5c-aa4a-4fbb-82ef-48f4c5313be8","new_score":55,"page_slug":"hedera","prev_score":55,"reason":"The Hedera investigation page is factually solid overall, with all 16 atomic claims confirmed or partially supported. The four partially-supported findings involve minor inaccuracies: the ATH date is off by one day (Sep 16 not Sep 15); the 'full mainnet shutdown' language overstates what was actually a proxy access restriction; the DAI token attribution in the exploit is stated by Hedera but not independently corroborated by the Pangolin post-mortem; and the '70% decline by end of Q1 2025' claim overstates the pace of decline (price was roughly 50-55% off peak by March 31, 2025). No claims were found to contradict reputable current sources, and no link rot was detected on checked URLs.","score_delta":0,"sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 17711e73-b0c7-48b7-bb31-a7d5f0f193b7copy
3. #3review approveby judgejudge

   2026-06-09 20:26:16Z
   Score: 55 → 55 (no score change)
   All 16 reviewed claims were either confirmed or partially supported — zero claims were disputed by the reviewer. The four partially-supported findings (claim_findings[2], [6], [10], [13]) involve minor peripheral inaccuracies: a 1-day ATH date error, a proxy-vs-full-mainnet characterization nuance, an unconfirmed DAI token attribution, and a ~50-55% actual Q1 decline versus the stated 70%. None of these concern core allegations of fraud or security. No link rot or stale citations were detected. One high-priority coverage gap on HBAR regulatory status is noted and warrants expansion in a future revision, but an open coverage gap does not warrant denial or revision under current policy.
   anchoranchored

   chain

   ●mainnet-betaslot 425,399,903

   sig

   5J3tYLc67M4Z…KMbcHWJocopyexplorer ↗

   hash

   GBEJZi1nBiN7…Q3gKQPWvcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1040 B) ▸

   {"actor":"judge","decided_at":"2026-06-09T20:26:16.360Z","decision":"review_approve","investigation_id":"09206d5c-aa4a-4fbb-82ef-48f4c5313be8","new_score":55,"page_slug":"hedera","prev_score":55,"reason":"All 16 reviewed claims were either confirmed or partially supported — zero claims were disputed by the reviewer. The four partially-supported findings (claim_findings[2], [6], [10], [13]) involve minor peripheral inaccuracies: a 1-day ATH date error, a proxy-vs-full-mainnet characterization nuance, an unconfirmed DAI token attribution, and a ~50-55% actual Q1 decline versus the stated 70%. None of these concern core allegations of fraud or security. No link rot or stale citations were detected. One high-priority coverage gap on HBAR regulatory status is noted and warrants expansion in a future revision, but an open coverage gap does not warrant denial or revision under current policy.","score_delta":0,"sequence_num":3,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision f3783a6c-1a62-414f-8760-ea31b51ce094copy
4. #4reviewby reviewerreviewer

   2026-10-16 23:33:58Z
   Score: 55 → 55 (no score change)
   The page's core narrative -- hashgraph architecture, the March 2023 Smart Contract Service exploit, the 2025 FBI phishing warning, council governance, token economics, IP history, and SEC/ETF status -- is substantially well-sourced and most individual figures (dollar amounts, dates, token amounts, patent and IP-transfer dates, ETF deadlines) check out against the cited primary sources. However, three claims directly contradict the sources used to support them or the primary record: the summary's framing of a '41-hour mainnet proxy shutdown' (the 41 hours actually runs from discovery to full remediation, not the length of the shutdown itself, which was closer to 30 hours); the claim that the HashPack-documented phishing-scam account is 'distinct from the March 2023 protocol exploit' when HashPack's own article (titled 'Hedera's March 9 Exploiter') identifies that account as the March 9 attacker; and the claim that Harmon and Baird's departure was 'concurrent' with the August 2022 open-source completion, when their departure took effect roughly three months earlier (May 1, 2022). A specific governance detail (board reduced from seven to five members with two unaffiliated seats in November 2024) could not be confirmed from any source consulted despite real 'Phase 4' governance reforms occurring around that date. The magnitude of HBAR's Q1 2025 price decline is overstated (claimed 'over 70%' vs. an observed ~56-63%). Four citations have gone dead or now redirect to unrelated content (two Bitget academy pages, the HashPack community-blog post, and the help.hedera.com securities FAQ, which now redirects to a generic FAQ with no securities content).
   anchoranchored

   chain

   ●mainnet-betaslot 457,822,106

   sig

   4UbsnhXD3wtg…S9a1CA5Ccopyexplorer ↗

   hash

   9xUQaaMb8Ckv…VBZNU648copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (2262 B) ▸

   {"actor":"reviewer","artifact_identity":"5816e7b775196189fa137f12ebf7161c","decided_at":"2026-10-16T23:33:58.160Z","decision":"review","disputed_pct":0.1224,"findings_hash":"9dhsbTzvpTfFQVPucyeXQTjNJAQntA8x64vQNXZhyS3T","investigation_id":"09206d5c-aa4a-4fbb-82ef-48f4c5313be8","mode":"findings_only","new_score":55,"page_content_hash":"d9b5ea827e7bf7aae2776e399c6f5b0d9d2ba533ea2faec8b60461dbab6f21a6","page_slug":"hedera","prev_score":55,"reason":"The page's core narrative -- hashgraph architecture, the March 2023 Smart Contract Service exploit, the 2025 FBI phishing warning, council governance, token economics, IP history, and SEC/ETF status -- is substantially well-sourced and most individual figures (dollar amounts, dates, token amounts, patent and IP-transfer dates, ETF deadlines) check out against the cited primary sources. However, three claims directly contradict the sources used to support them or the primary record: the summary's framing of a '41-hour mainnet proxy shutdown' (the 41 hours actually runs from discovery to full remediation, not the length of the shutdown itself, which was closer to 30 hours); the claim that the HashPack-documented phishing-scam account is 'distinct from the March 2023 protocol exploit' when HashPack's own article (titled 'Hedera's March 9 Exploiter') identifies that account as the March 9 attacker; and the claim that Harmon and Baird's departure was 'concurrent' with the August 2022 open-source completion, when their departure took effect roughly three months earlier (May 1, 2022). A specific governance detail (board reduced from seven to five members with two unaffiliated seats in November 2024) could not be confirmed from any source consulted despite real 'Phase 4' governance reforms occurring around that date. The magnitude of HBAR's Q1 2025 price decline is overstated (claimed 'over 70%' vs. an observed ~56-63%). Four citations have gone dead or now redirect to unrelated content (two Bitget academy pages, the HashPack community-blog post, and the help.hedera.com securities FAQ, which now redirects to a generic FAQ with no securities content).","score_delta":0,"sequence_num":4,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision c42ba3c0-32e6-4355-af20-8aa9562d822ccopy
5. #5rescoreby systemsystem

   2026-10-27 06:02:36Z
   Score: 55 → 57 (+2)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 55 → 57. Problems weighed by who is responsible: concerns that are not fraud −12.8, incidents the subject suffered −3.2, problems around the subject, caused by others −1.6; legitimacy credit long-running +10.
   anchoranchored

   chain

   ●mainnet-betaslot 461,961,827

   sig

   5EkyM7C8Er7H…Z5LUGnWtcopyexplorer ↗

   hash

   RksDCPLa2A54…zMYnVMqscopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (638 B) ▸

   {"actor":"system","decided_at":"2026-10-27T06:02:36.591Z","decision":"rescore","investigation_id":"09206d5c-aa4a-4fbb-82ef-48f4c5313be8","new_score":57,"page_slug":"hedera","prev_score":55,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 55 → 57. Problems weighed by who is responsible: concerns that are not fraud −12.8, incidents the subject suffered −3.2, problems around the subject, caused by others −1.6; legitimacy credit long-running +10.","score_delta":2,"score_model":"v2","sequence_num":5,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 499498e2-d38f-41d0-82ea-3533d4547a76copy