Skip to main content
Sign in
Jimbos Protocol1 decision on this page

Audit log

Every state-changing event for Jimbos Protocol: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

  1. #1publishby system:backfill
    2026-05-28 15:33:58Z
    Score: ?? (no score change)
    anchoranchored
    chain
    mainnet-betaslot 422,748,357
    sig
    4J5RBSYANTpv…5mKbFFVhexplorer ↗
    hash
    Z5HQcuvn7ayx…YfSizFCCsha256 → base58
    verifying row…full verify ↗
    canonical bytes (7852 B) ▸
    {"actor":"system:backfill","investigation_id":"bac1a051-a905-472d-8f30-1c63ac9db652","kind":"publish","page_slug":"jimbos-protocol","published_at":"2026-05-28T15:33:58.214Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Jimbos Protocol","sections":[{"content":"","heading":"Overview","severity":"medium","sources":[{"credibility":2,"name":"Arbitrum Based Jimbos Protocol Scurries for Revival After $7M Exploit — CoinDesk","type":"news_article","url":"https://www.coindesk.com/tech/2023/05/29/arbitrum-based-jimbos-protocol-scurries-for-revival-after-7m-exploit"},{"credibility":2,"name":"Jimbos Protocol exploited for $7.5 million three days after V2 launch — CoinMarketCap","type":"news_article","url":"https://coinmarketcap.com/headlines/news/jimbos-protocol-exploited-for-7-5-million-three-days-after-v2-launch/"}]},{"content":"","heading":"Flash Loan Exploit — May 2023","severity":"critical","sources":[{"credibility":1,"name":"Jimbos Protocol hit in $7.5m DeFi flash loan attack — The Register","type":"news_article","url":"https://www.theregister.com/2023/05/30/jimbos_protocol_defi_attack/"},{"credibility":2,"name":"Explained: The Jimbos Protocol Hack (May 2023) — Halborn","type":"research","url":"https://www.halborn.com/blog/post/explained-the-jimbos-protocol-hack-may-2023"},{"credibility":2,"name":"Decoding Jimbo's Protocol $7.5M Exploit — QuillAudits","type":"research","url":"https://quillaudits.medium.com/decoding-jimbos-protocol-7-5m-exploit-quillaudits-772ad1db6c07"},{"credibility":2,"name":"A Detailed Analysis of Arbitrum-based Jimbos Protocol's $7.5M Hack — Numen Cyber Labs","type":"research","url":"https://medium.com/numen-cyber-labs/a-detailed-analysis-of-arbitrum-based-jimbos-protocol-7-5-million-hack-36af84faee2"},{"credibility":2,"name":"Jimbos Protocol hacked for over $7.5 million using flash loan exploit — CryptoNews","type":"news_article","url":"https://cryptonews.com/news/jimbos-protocol-hacked-for-over-75-million-using-flash-loan-exploit/"}]},{"content":"","heading":"Funds Laundering via Tornado Cash","severity":"critical","sources":[{"credibility":2,"name":"Jimbos Protocol's attacker washed loot with Tornado Cash — CoinPaper","type":"news_article","url":"https://coinpaper.com/2274/jimbos-protocol-s-attacker-launders-7-5-million-with-tornado-cash"},{"credibility":2,"name":"Jimbos Protocol attacker launders $7.5 million with Tornado Cash — CoinMarketCap Community","type":"news_article","url":"https://coinmarketcap.com/community/articles/64fef90cc67b5c6867be4b78/"}]},{"content":"","heading":"Bounty Offer and Law Enforcement Engagement","severity":"high","sources":[{"credibility":1,"name":"Jimbos Protocol to Work With U.S. Homeland Security to Help Recover $7.5M — CoinDesk","type":"news_article","url":"https://www.coindesk.com/tech/2023/05/31/jimbos-protocol-to-work-with-us-homeland-security-to-help-recover-75m-from-flash-loan-exploit"},{"credibility":2,"name":"Jimbos Protocol Announces $800K Reward to Catch Exploiter — BeInCrypto","type":"news_article","url":"https://beincrypto.com/jimbos-protocol-announced-800k-reward/"},{"credibility":2,"name":"Jimbos Protocol Offers Deadline to Exploiters Before Onboarding Law Enforcement — CryptoPotato","type":"news_article","url":"https://cryptopotato.com/hacked-liquidity-protocol-jimbos-offers-deadline-to-exploiters-before-onboarding-law-enforcement/"},{"credibility":2,"name":"Jimbos Protocol offers $800K bounty to the public after hacker ignores deal — CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/jimbos-protocol-offers-open-bounty-after-hacker-ignores-deal"}]},{"content":"","heading":"Smart Contract Security and Design Risks","severity":"high","sources":[{"credibility":2,"name":"Explained: The Jimbos Protocol Hack (May 2023) — Halborn Security","type":"research","url":"https://www.halborn.com/blog/post/explained-the-jimbos-protocol-hack-may-2023"},{"credibility":2,"name":"Jimbo's Protocol Hack Analysis — BlockApex","type":"research","url":"https://blockapex.io/jimbos-protocol/"},{"credibility":2,"name":"The $7.5 Million Flash Loan Unveiled: Analyzing Jimbo's Protocol Attack — AuditOne","type":"research","url":"https://www.auditone.io/blog-posts/the-7-5-million-flash-loan-unveiled-analyzing-jimbos-protocol-attack"},{"credibility":2,"name":"Jimbos' $7.5M Exploit Analyzed — Olympix","type":"research","url":"https://olympix.security/blog/jimbos-7-5m-exploit-analyzed"}]},{"content":"","heading":"Token Impact and Protocol Status","severity":"high","sources":[{"credibility":2,"name":"Arbitrum-based Jimbos Protocol hacked for $7.5M, JIMBO price drops 40% — Bitcoin Insider","type":"news_article","url":"https://www.bitcoininsider.org/article/215830/arbitrum-based-jimbos-protocol-hacked-75m-jimbo-price-drops-40"},{"credibility":1,"name":"JIMBO Token Tracker — Arbiscan","type":"on_chain","url":"https://arbiscan.io/token/0xccb97ae0c1bc4ce196b6460395af7df5ee1212bc"},{"credibility":2,"name":"Jimbos Protocol exploited — Web3 Is Going Great","type":"community_report","url":"https://www.web3isgoinggreat.com/?id=jimbos-protocol-exploited"}]}],"sources_used":[],"summary":"Jimbos Protocol was an Arbitrum-based DeFi liquidity protocol designed to provide a semi-stable floor price for its native JIMBO token. On May 28, 2023, just three days after launching its V2, the protocol was exploited via a flash loan attack that drained approximately 4,090 ETH (~$7.5 million) by exploiting a lack of slippage control in the JimboController contract. The attacker rejected a $800,000 bounty offer, laundered the full amount through Tornado Cash, and remains unidentified; no funds have been recovered.","timeline":[{"date":"2023-05-01","event":"Jimbos Protocol launches initial version on Arbitrum","source":"CoinDesk","source_url":"https://www.coindesk.com/tech/2023/05/29/arbitrum-based-jimbos-protocol-scurries-for-revival-after-7m-exploit"},{"date":"2023-05-25","event":"Jimbos Protocol V2 launches on Arbitrum","source":"The Block","source_url":"https://www.theblock.co/post/232419/jimbos-protocol-exploited-for-7-5-million-three-days-after-v2-launch"},{"date":"2023-05-28","event":"Attacker exploits lack of slippage control in JimboController shift() function via flash loan, draining 4,090 ETH (~$7.5M). JIMBO token drops ~40%.","source":"The Register","source_url":"https://www.theregister.com/2023/05/30/jimbos_protocol_defi_attack/"},{"date":"2023-05-28","event":"Stolen ETH bridged from Arbitrum to Ethereum mainnet via Stargate and Celer Network","source":"Halborn Security","source_url":"https://www.halborn.com/blog/post/explained-the-jimbos-protocol-hack-may-2023"},{"date":"2023-05-28","event":"Jimbos Protocol team sends on-chain message to attacker offering to let them keep 10% if 90% is returned","source":"CryptoPotato","source_url":"https://cryptopotato.com/hacked-liquidity-protocol-jimbos-offers-deadline-to-exploiters-before-onboarding-law-enforcement/"},{"date":"2023-05-31","event":"Jimbos Protocol opens case with U.S. Department of Homeland Security (New York branch) and additional jurisdictions","source":"CoinDesk","source_url":"https://www.coindesk.com/tech/2023/05/31/jimbos-protocol-to-work-with-us-homeland-security-to-help-recover-75m-from-flash-loan-exploit"},{"date":"2023-06-01","event":"Jimbos Protocol announces $800,000 public bounty for information identifying the exploiter after hacker ignores private deal","source":"CoinTelegraph","source_url":"https://cointelegraph.com/news/jimbos-protocol-offers-open-bounty-after-hacker-ignores-deal"},{"date":"2023-09-01","event":"PeckShield reports that all $7.5M in stolen funds has been laundered through Tornado Cash; attacker remains unidentified","source":"CoinPaper","source_url":"https://coinpaper.com/2274/jimbos-protocol-s-attacker-launders-7-5-million-with-tornado-cash"}]},"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision 56c1d2f7-e19a-4623-9689-236e1a388dcc
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine — python -m src.verify_decision <event_id>.