Audit log

Every state-changing event for Hundred Finance: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-28 17:31:37Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 422,766,148

   sig

   4ktnJY5z59gM…5uQmZRebcopyexplorer ↗

   hash

   8vHro1ZtL5nh…RkgwnM96copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (6895 B) ▸

   {"actor":"system:backfill","investigation_id":"af09701f-259c-4f20-9652-cbb81aeffcb5","kind":"publish","page_slug":"hundred-finance","published_at":"2026-05-28T17:31:37.463Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Hundred Finance","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.cryptocurrencyguide.org/what-is-compound-fork-hundred-finance-and-can-it-regain-momentum/","type":"other","url":""},{"credibility":3,"name":"https://hundred.finance","type":"other","url":""},{"credibility":3,"name":"https://docs.hundred.finance/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://beincrypto.com/hundred-finance-loses-6-5-million-in-defi-reentrancy-attack/","type":"other","url":""},{"credibility":3,"name":"https://www.vidma.io/blog/the-agave-and-hundred-finance-hack-a-11-7m-reentrancy-exploit","type":"other","url":""},{"credibility":3,"name":"https://www.sharkteam.org/report/analysis/20220317001A_en.pdf","type":"other","url":""},{"credibility":3,"name":"https://medium.com/immunefi/a-poc-of-the-hundred-finance-heist-4121f23a098","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://rekt.news/hundred-rekt2","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-hundred-finance-hack-april-2023","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/hundred-finance-loses-7-million-in-optimism-hack","type":"other","url":""},{"credibility":3,"name":"https://blockapex.io/hundred-finance-hack-analysis/","type":"other","url":""},{"credibility":3,"name":"https://www.numencyber.com/hundred-finance-exploit-7-million/","type":"other","url":""},{"credibility":3,"name":"https://blocksec.com/blog/6-hundred-finance-incident-catalyzing-the-wave-of-precision-related-exploits-in-vulnerable-forked-protocols","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.web3isgoinggreat.com/single/hundred-finance-shuts-down","type":"other","url":""},{"credibility":3,"name":"https://x.com/HundredFinance/status/1689358397898887168","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/136918/hacker-exploits-hundred-finance-protocol-in-7-4-million-heist","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-hundred-finance-hack-april-2023","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.dlnews.com/articles/defi/hundred-finance-hacker-moves-crypto-from-curve-finance/","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/hundred-finance-hacker-moves-assets-year-after-exploit","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://blocksec.com/blog/6-hundred-finance-incident-catalyzing-the-wave-of-precision-related-exploits-in-vulnerable-forked-protocols","type":"other","url":""},{"credibility":3,"name":"https://www.vidma.io/blog/the-agave-and-hundred-finance-hack-a-11-7m-reentrancy-exploit","type":"other","url":""},{"credibility":3,"name":"https://medium.com/immunefi/a-poc-of-the-hundred-finance-heist-4121f23a098","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.web3isgoinggreat.com/single/hundred-finance-shuts-down","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/currencies/hundred-finance/","type":"other","url":""},{"credibility":3,"name":"https://x.com/HundredFinance/status/1689358397898887168","type":"other","url":""}]}],"sources_used":[],"summary":"Hundred Finance was a multi-chain DeFi lending protocol forked from Compound V2 that suffered at least two major security exploits totaling approximately $13.6 million in direct losses, alongside a related $11 million joint attack with Agave Finance on Gnosis Chain. The protocol was unable to recover stolen funds and shut down in August 2023 following a governance vote, with remaining treasury funds allocated toward partial victim compensation. Stolen funds remained unrecovered as of 2024, with the April 2023 attacker moving assets through decentralized exchanges more than a year after the exploit.","timeline":[{"date":"2021-06-01","event":"Hundred Finance launched on Ethereum Kovan testnet, followed by mainnet deployment; positions itself as a Compound V2 fork supporting multiple chains.","source":"CryptoCurrencyGuide","source_url":"https://www.cryptocurrencyguide.org/what-is-compound-fork-hundred-finance-and-can-it-regain-momentum/"},{"date":"2021-12-01","event":"Vote-escrow governance mechanism (mveHND) introduced, modeled on Curve Finance contracts.","source":"Hundred Finance Docs","source_url":"https://hundred.finance/docs-sub/protocol-management/the-hnd-and-mvehnd-tokens"},{"date":"2022-03-16","event":"Hundred Finance exploited on Gnosis Chain via reentrancy attack; approximately $6.2 million stolen. Simultaneous attack on Agave Finance drains additional $5.5 million. Combined losses: approximately $11.7 million. Stolen funds routed through Tornado Cash.","source":"BeInCrypto / Vidma","source_url":"https://beincrypto.com/hundred-finance-loses-6-5-million-in-defi-reentrancy-attack/"},{"date":"2023-04-15","event":"Hundred Finance exploited on Optimism via flash loan and exchange rate manipulation of empty hWBTC market; approximately $7.4 million stolen. Attacker address: 0x155da45d374a286d383839b1ef27567a15e67528.","source":"Rekt News / CoinTelegraph","source_url":"https://rekt.news/hundred-rekt2"},{"date":"2023-04-17","event":"Hundred Finance offers $500,000 public bounty for information on the attacker and issues on-chain ultimatum offering 10% reward (~$740,000) for return of 90% of funds within 24 hours. No response received.","source":"Halborn / Decrypt","source_url":"https://www.halborn.com/blog/post/explained-the-hundred-finance-hack-april-2023"},{"date":"2023-08-09","event":"HND token holders vote 99% in favor of shutting down the protocol. Treasury funds directed toward partial victim compensation. Project officially ceases lending operations.","source":"Web3 Is Going Great / Hundred Finance Twitter","source_url":"https://www.web3isgoinggreat.com/single/hundred-finance-shuts-down"},{"date":"2024-05-01","event":"April 2023 attacker begins moving stolen funds more than a year after the exploit, withdrawing approximately $800,000 in ETH and USDT from Curve Finance and converting assets via Uniswap. No funds returned to victims.","source":"DL News / CoinTelegraph","source_url":"https://www.dlnews.com/articles/defi/hundred-finance-hacker-moves-crypto-from-curve-finance/"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision c7b21deb-1136-445a-a5f2-77062e2a01c4copy
2. #2rescoreby systemsystem

   2026-10-10 18:42:14Z
   Score: 8 → 50 (+42)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 8 → 50. Problems weighed by who is responsible: incidents the subject suffered −9.6, concerns that are not fraud −3.2, problems around the subject, caused by others −2.4; legitimacy credit long-running +4; no longer operating, so capped at 50.
   anchoranchored

   chain

   ●mainnet-betaslot 455,361,644

   sig

   2EyT5dz6pZK1…dFqscxn2copyexplorer ↗

   hash

   DDd5qnYS9A7c…k39Lz8Czcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (682 B) ▸

   {"actor":"system","decided_at":"2026-10-10T18:42:14.349Z","decision":"rescore","investigation_id":"af09701f-259c-4f20-9652-cbb81aeffcb5","new_score":50,"page_slug":"hundred-finance","prev_score":8,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 8 → 50. Problems weighed by who is responsible: incidents the subject suffered −9.6, concerns that are not fraud −3.2, problems around the subject, caused by others −2.4; legitimacy credit long-running +4; no longer operating, so capped at 50.","score_delta":42,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 2ccfa2a3-39f7-4922-bd4b-cf5102250253copy
3. #3reviewby reviewerreviewer

   2026-11-03 23:46:24Z
   Score: 50 → 50 (no score change)
   The core narrative (two exploits of about $6.2M and $7.4M, the August 2023 shutdown vote at 99%, the 2024 fund movement through Curve and Uniswap) is supported by the sources I read. One unsupported speculative motive, that the attacker avoided Tornado Cash because of regulatory scrutiny, should be removed. The claim of victim distributions overstates the source, which describes only intended compensation. The March 2022 attack date is reported as March 15 by most outlets and March 16 by BeInCrypto.
   anchoranchored

   chain

   ●mainnet-betaslot 465,088,641

   sig

   Un7wzSi2gwze…bmAPcv5zcopyexplorer ↗

   hash

   2akzaBYYs8qh…ZuVRZ2Vscopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1322 B) ▸

   {"actor":"reviewer","artifact_identity":"eb4453f0a93abef9d225d2314545d5c1","decided_at":"2026-11-03T23:46:24.659Z","decision":"review","disputed_pct":0.1667,"findings_hash":"D8LNyM9XLCXqD9YZmddsAiMfHQw1GMUz1hCTjurZdbZJ","investigation_id":"af09701f-259c-4f20-9652-cbb81aeffcb5","judge_def_hash":"750934ecb48272224909b7430fab271676d391380fbc821acbe7ee7e4cac2fa3","new_score":50,"page_content_hash":"01a0a9ed165f39036df543fea3ba657dda198fa02c544b9837d4366a372dd914","page_slug":"hundred-finance","prev_score":50,"reason":"The core narrative (two exploits of about $6.2M and $7.4M, the August 2023 shutdown vote at 99%, the 2024 fund movement through Curve and Uniswap) is supported by the sources I read. One unsupported speculative motive, that the attacker avoided Tornado Cash because of regulatory scrutiny, should be removed. The claim of victim distributions overstates the source, which describes only intended compensation. The March 2022 attack date is reported as March 15 by most outlets and March 16 by BeInCrypto.","reviewer_def_hash":"3839668b232611e5b26db72079d64745f8e57e919b8a379e79b44ba4a52c845b","score_delta":0,"sequence_num":3,"subject_status":"shut_down","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 324a33e4-34f0-4ec8-9a8c-6e79b0224101copy
4. #4review reviseby judgejudge

   2026-11-03 23:46:24Z
   Score: 50 → 50 (no score change)
   One of six checked claims (claim_findings[0]) was disputed, about 17%, which falls in the minor-issues band. That claim gives a regulatory motive for the attacker avoiding Tornado Cash that the cited DL News article does not support. Two further claims were only partly supported: claim_findings[3] states victim distributions were paid when the source describes only intended compensation, and claim_findings[4] has a source-dependent March 2022 attack date. The core account (the two exploits, their loss figures and the August 2023 shutdown vote) was confirmed, no omissions were found, and the reviewer's confidence is moderate, so the penalty is kept at the lower end of the band.
   anchoranchored

   chain

   ●mainnet-betaslot 465,088,647

   sig

   3FiE8kk1drAx…uLn5punLcopyexplorer ↗

   hash

   34Ar2s31DWS4…Lr49GHUScopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1334 B) ▸

   {"actor":"judge","artifact_identity":"eb4453f0a93abef9d225d2314545d5c1","band_override":null,"decided_at":"2026-11-03T23:46:24.659Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.1667,"investigation_id":"af09701f-259c-4f20-9652-cbb81aeffcb5","judge_def_hash":"750934ecb48272224909b7430fab271676d391380fbc821acbe7ee7e4cac2fa3","new_score":50,"page_slug":"hundred-finance","prev_score":50,"reason":"One of six checked claims (claim_findings[0]) was disputed, about 17%, which falls in the minor-issues band. That claim gives a regulatory motive for the attacker avoiding Tornado Cash that the cited DL News article does not support. Two further claims were only partly supported: claim_findings[3] states victim distributions were paid when the source describes only intended compensation, and claim_findings[4] has a source-dependent March 2022 attack date. The core account (the two exploits, their loss figures and the August 2023 shutdown vote) was confirmed, no omissions were found, and the reviewer's confidence is moderate, so the penalty is kept at the lower end of the band.","reviewer_def_hash":"3839668b232611e5b26db72079d64745f8e57e919b8a379e79b44ba4a52c845b","score_delta":0,"sequence_num":4,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 1eb8df35-43d5-43ae-b91f-914012217b6acopy