← Infini Protocol1 decision on this page
Audit log
Every state-changing event for Infini Protocol: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.
- #1publishby system:backfill2026-05-30 19:10:25ZScore: ? → ? (no score change)anchoranchored
- chain
- ●mainnet-betaslot 423,217,210
- sig
3dGTruB63732…KGxLcYbtexplorer ↗- hash
CxMgg9iMyWrj…dRiqFMuWsha256 → base58
verifying row…full verify ↗canonical bytes (6492 B) ▸
{"actor":"system:backfill","investigation_id":"a922f0f3-2563-41e5-a465-a63ac7499e6a","kind":"publish","page_slug":"infini-protocol","published_at":"2026-05-30T19:10:25.827Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Infini Protocol","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.infini.money/","type":"other","url":""},{"credibility":3,"name":"https://www.aicoin.com/en/article/465480","type":"other","url":""},{"credibility":3,"name":"https://www.globenewswire.com/news-release/2026/05/01/3286168/0/en/Infini-Secures-MSB-Registration-in-Canada-Advancing-Its-Global-AI-Financial-Operating-System-for-Next-Generation-Enterprises.html","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://rekt.news/infini-rekt","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-infini-hack-february-2025","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/307513/crypto-neo-bank-infini-50-million-exploit","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/markets/2025/02/24/payments-card-issuer-infini-offers-reward-for-return-of-funds-after-usd49-million-exploit","type":"other","url":""},{"credibility":3,"name":"https://coinjournal.net/news/what-we-know-about-the-49-5-million-infini-exploit-so-far/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://rekt.news/infini-rekt","type":"other","url":""},{"credibility":3,"name":"https://www.livebitcoinnews.com/suspected-infini-hacker-routes-32-7m-in-eth-through-tornado-cash/","type":"other","url":""},{"credibility":3,"name":"https://cryptorank.io/news/feed/d350b-infini-hacker-eth-laundering-tornado","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/infini-exploiter-resurfaces-to-buy-eth-dip/","type":"other","url":""},{"credibility":3,"name":"https://crypto-economy.com/infini-hacker-launders-millions-using-tornado-cash-amid-regulatory-heat/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/markets/2025/02/24/payments-card-issuer-infini-offers-reward-for-return-of-funds-after-usd49-million-exploit","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/infini-founder-reaffirms-20-bounty-and-legal-immunity-to-infini-hacker-for-return-of-stolen-funds/","type":"other","url":""},{"credibility":3,"name":"https://bitcoinethereumnews.com/finance/infini-offers-hacker-9-9m-to-return-stolen-funds/","type":"other","url":""},{"credibility":3,"name":"https://defi-planet.com/2025/03/infini-founder-appeals-to-hacker-with-bounty-offer-following-49-5m-heist/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-infini-hack-february-2025","type":"other","url":""},{"credibility":3,"name":"https://www.quillaudits.com/blog/hack-analysis/how-infini-lost-49-million-in-a-defi-hack","type":"other","url":""},{"credibility":3,"name":"https://rekt.news/infini-rekt","type":"other","url":""},{"credibility":3,"name":"https://coinjournal.net/news/what-we-know-about-the-49-5-million-infini-exploit-so-far/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.globenewswire.com/news-release/2026/05/01/3286168/0/en/Infini-Secures-MSB-Registration-in-Canada-Advancing-Its-Global-AI-Financial-Operating-System-for-Next-Generation-Enterprises.html","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/307513/crypto-neo-bank-infini-50-million-exploit","type":"other","url":""},{"credibility":3,"name":"https://www.bankinfosecurity.com/cryptohack-roundup-49m-infini-exploit-a-27613","type":"other","url":""}]}],"sources_used":[],"summary":"Infini is a Hong Kong-based stablecoin neobank offering yield, payments, and enterprise treasury tools built on DeFi infrastructure. In February 2025, the platform suffered a $49.5 million exploit when a former contract developer who had secretly retained administrative privileges drained the Morpho MEVCapital USDC Vault across two transactions. Founder Christian Li pledged personal coverage of losses and offered a 20% bounty to the attacker; as of mid-2026 the stolen funds have not been recovered, with the exploiter laundering proceeds through Tornado Cash.","timeline":[{"date":"2024-11-01","event":"Malicious exploiter contract deployed by the former developer, embedding a privileged admin role (0x8e0b) approximately 114 days before the attack.","source":""},{"date":"2025-02-23","event":"Exploit initiated late Sunday evening. Attacker funded wallet with 1 ETH from Tornado Cash and drained $11.45 million in USDC from Morpho MEVCapital vault (first transaction).","source":""},{"date":"2025-02-24","event":"Second drain of $38.06 million USDC executed; total stolen reaches approximately $49.5 million. Stolen USDC converted to DAI, then swapped to roughly 17,696 ETH. Cyvers, PeckShield, and CertiK detect and report the exploit. Infini acknowledges the breach approximately 8 hours after initial detection.","source":""},{"date":"2025-02-24","event":"Founder Christian Li publicly accepts personal responsibility and pledges to cover all losses. Infini offers the attacker a 20% bounty (~$9.9M) and legal immunity for return of funds within 48 hours.","source":""},{"date":"2025-03-01","event":"Christian Li reaffirms 20% bounty offer and legal immunity. No funds have been returned.","source":""},{"date":"2025-07-17","event":"Alleged Infini hacker moves 3,000 ETH through Tornado Cash in the first identified laundering tranche post-exploit.","source":""},{"date":"2025-08-11","event":"Infini issues a final ultimatum to the hacker, demanding return of the full $49.5 million by August 13, 2025 at 20:00 GMT+8. The deadline passes without compliance.","source":""},{"date":"2026-02-01","event":"Alleged exploiter purchases approximately 6,316 ETH and immediately routes proceeds into Tornado Cash, per PeckShield and CertiK monitoring.","source":""},{"date":"2026-05-01","event":"Infini secures MSB registration with Canada's FINTRAC, covering foreign exchange, money transfer, remittance, and virtual currency services, signaling continued business operations.","source":""}]},"v":1}Verify offline (run on your own machine)python -m src.verify_decision 8f5390d7-727d-4f7c-a8ac-5070cd4bce67
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine —
python -m src.verify_decision <event_id>.