Audit log

Every state-changing event for Jimbos Protocol: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-28 15:33:58Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 422,748,357

   sig

   4J5RBSYANTpv…5mKbFFVhcopyexplorer ↗

   hash

   Z5HQcuvn7ayx…YfSizFCCcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (7852 B) ▸

   {"actor":"system:backfill","investigation_id":"bac1a051-a905-472d-8f30-1c63ac9db652","kind":"publish","page_slug":"jimbos-protocol","published_at":"2026-05-28T15:33:58.214Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Jimbos Protocol","sections":[{"content":"","heading":"Overview","severity":"medium","sources":[{"credibility":2,"name":"Arbitrum Based Jimbos Protocol Scurries for Revival After $7M Exploit — CoinDesk","type":"news_article","url":"https://www.coindesk.com/tech/2023/05/29/arbitrum-based-jimbos-protocol-scurries-for-revival-after-7m-exploit"},{"credibility":2,"name":"Jimbos Protocol exploited for $7.5 million three days after V2 launch — CoinMarketCap","type":"news_article","url":"https://coinmarketcap.com/headlines/news/jimbos-protocol-exploited-for-7-5-million-three-days-after-v2-launch/"}]},{"content":"","heading":"Flash Loan Exploit — May 2023","severity":"critical","sources":[{"credibility":1,"name":"Jimbos Protocol hit in $7.5m DeFi flash loan attack — The Register","type":"news_article","url":"https://www.theregister.com/2023/05/30/jimbos_protocol_defi_attack/"},{"credibility":2,"name":"Explained: The Jimbos Protocol Hack (May 2023) — Halborn","type":"research","url":"https://www.halborn.com/blog/post/explained-the-jimbos-protocol-hack-may-2023"},{"credibility":2,"name":"Decoding Jimbo's Protocol $7.5M Exploit — QuillAudits","type":"research","url":"https://quillaudits.medium.com/decoding-jimbos-protocol-7-5m-exploit-quillaudits-772ad1db6c07"},{"credibility":2,"name":"A Detailed Analysis of Arbitrum-based Jimbos Protocol's $7.5M Hack — Numen Cyber Labs","type":"research","url":"https://medium.com/numen-cyber-labs/a-detailed-analysis-of-arbitrum-based-jimbos-protocol-7-5-million-hack-36af84faee2"},{"credibility":2,"name":"Jimbos Protocol hacked for over $7.5 million using flash loan exploit — CryptoNews","type":"news_article","url":"https://cryptonews.com/news/jimbos-protocol-hacked-for-over-75-million-using-flash-loan-exploit/"}]},{"content":"","heading":"Funds Laundering via Tornado Cash","severity":"critical","sources":[{"credibility":2,"name":"Jimbos Protocol's attacker washed loot with Tornado Cash — CoinPaper","type":"news_article","url":"https://coinpaper.com/2274/jimbos-protocol-s-attacker-launders-7-5-million-with-tornado-cash"},{"credibility":2,"name":"Jimbos Protocol attacker launders $7.5 million with Tornado Cash — CoinMarketCap Community","type":"news_article","url":"https://coinmarketcap.com/community/articles/64fef90cc67b5c6867be4b78/"}]},{"content":"","heading":"Bounty Offer and Law Enforcement Engagement","severity":"high","sources":[{"credibility":1,"name":"Jimbos Protocol to Work With U.S. Homeland Security to Help Recover $7.5M — CoinDesk","type":"news_article","url":"https://www.coindesk.com/tech/2023/05/31/jimbos-protocol-to-work-with-us-homeland-security-to-help-recover-75m-from-flash-loan-exploit"},{"credibility":2,"name":"Jimbos Protocol Announces $800K Reward to Catch Exploiter — BeInCrypto","type":"news_article","url":"https://beincrypto.com/jimbos-protocol-announced-800k-reward/"},{"credibility":2,"name":"Jimbos Protocol Offers Deadline to Exploiters Before Onboarding Law Enforcement — CryptoPotato","type":"news_article","url":"https://cryptopotato.com/hacked-liquidity-protocol-jimbos-offers-deadline-to-exploiters-before-onboarding-law-enforcement/"},{"credibility":2,"name":"Jimbos Protocol offers $800K bounty to the public after hacker ignores deal — CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/jimbos-protocol-offers-open-bounty-after-hacker-ignores-deal"}]},{"content":"","heading":"Smart Contract Security and Design Risks","severity":"high","sources":[{"credibility":2,"name":"Explained: The Jimbos Protocol Hack (May 2023) — Halborn Security","type":"research","url":"https://www.halborn.com/blog/post/explained-the-jimbos-protocol-hack-may-2023"},{"credibility":2,"name":"Jimbo's Protocol Hack Analysis — BlockApex","type":"research","url":"https://blockapex.io/jimbos-protocol/"},{"credibility":2,"name":"The $7.5 Million Flash Loan Unveiled: Analyzing Jimbo's Protocol Attack — AuditOne","type":"research","url":"https://www.auditone.io/blog-posts/the-7-5-million-flash-loan-unveiled-analyzing-jimbos-protocol-attack"},{"credibility":2,"name":"Jimbos' $7.5M Exploit Analyzed — Olympix","type":"research","url":"https://olympix.security/blog/jimbos-7-5m-exploit-analyzed"}]},{"content":"","heading":"Token Impact and Protocol Status","severity":"high","sources":[{"credibility":2,"name":"Arbitrum-based Jimbos Protocol hacked for $7.5M, JIMBO price drops 40% — Bitcoin Insider","type":"news_article","url":"https://www.bitcoininsider.org/article/215830/arbitrum-based-jimbos-protocol-hacked-75m-jimbo-price-drops-40"},{"credibility":1,"name":"JIMBO Token Tracker — Arbiscan","type":"on_chain","url":"https://arbiscan.io/token/0xccb97ae0c1bc4ce196b6460395af7df5ee1212bc"},{"credibility":2,"name":"Jimbos Protocol exploited — Web3 Is Going Great","type":"community_report","url":"https://www.web3isgoinggreat.com/?id=jimbos-protocol-exploited"}]}],"sources_used":[],"summary":"Jimbos Protocol was an Arbitrum-based DeFi liquidity protocol designed to provide a semi-stable floor price for its native JIMBO token. On May 28, 2023, just three days after launching its V2, the protocol was exploited via a flash loan attack that drained approximately 4,090 ETH (~$7.5 million) by exploiting a lack of slippage control in the JimboController contract. The attacker rejected a $800,000 bounty offer, laundered the full amount through Tornado Cash, and remains unidentified; no funds have been recovered.","timeline":[{"date":"2023-05-01","event":"Jimbos Protocol launches initial version on Arbitrum","source":"CoinDesk","source_url":"https://www.coindesk.com/tech/2023/05/29/arbitrum-based-jimbos-protocol-scurries-for-revival-after-7m-exploit"},{"date":"2023-05-25","event":"Jimbos Protocol V2 launches on Arbitrum","source":"The Block","source_url":"https://www.theblock.co/post/232419/jimbos-protocol-exploited-for-7-5-million-three-days-after-v2-launch"},{"date":"2023-05-28","event":"Attacker exploits lack of slippage control in JimboController shift() function via flash loan, draining 4,090 ETH (~$7.5M). JIMBO token drops ~40%.","source":"The Register","source_url":"https://www.theregister.com/2023/05/30/jimbos_protocol_defi_attack/"},{"date":"2023-05-28","event":"Stolen ETH bridged from Arbitrum to Ethereum mainnet via Stargate and Celer Network","source":"Halborn Security","source_url":"https://www.halborn.com/blog/post/explained-the-jimbos-protocol-hack-may-2023"},{"date":"2023-05-28","event":"Jimbos Protocol team sends on-chain message to attacker offering to let them keep 10% if 90% is returned","source":"CryptoPotato","source_url":"https://cryptopotato.com/hacked-liquidity-protocol-jimbos-offers-deadline-to-exploiters-before-onboarding-law-enforcement/"},{"date":"2023-05-31","event":"Jimbos Protocol opens case with U.S. Department of Homeland Security (New York branch) and additional jurisdictions","source":"CoinDesk","source_url":"https://www.coindesk.com/tech/2023/05/31/jimbos-protocol-to-work-with-us-homeland-security-to-help-recover-75m-from-flash-loan-exploit"},{"date":"2023-06-01","event":"Jimbos Protocol announces $800,000 public bounty for information identifying the exploiter after hacker ignores private deal","source":"CoinTelegraph","source_url":"https://cointelegraph.com/news/jimbos-protocol-offers-open-bounty-after-hacker-ignores-deal"},{"date":"2023-09-01","event":"PeckShield reports that all $7.5M in stolen funds has been laundered through Tornado Cash; attacker remains unidentified","source":"CoinPaper","source_url":"https://coinpaper.com/2274/jimbos-protocol-s-attacker-launders-7-5-million-with-tornado-cash"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 56c1d2f7-e19a-4623-9689-236e1a388dcccopy
2. #2rescoreby systemsystem

   2026-10-10 18:42:26Z
   Score: 18 → 48 (+30)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 18 → 48. Problems weighed by who is responsible: incidents the subject suffered −20, concerns that are not fraud −6, problems around the subject, caused by others −0.8; the penalty for incidents it suffered is capped at 20.
   anchoranchored

   chain

   ●mainnet-betaslot 455,362,000

   sig

   3FZdB6gQd4cE…2ueYBLFFcopyexplorer ↗

   hash

   CCY5VrGWvwfn…JmQ72bo9copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (663 B) ▸

   {"actor":"system","decided_at":"2026-10-10T18:42:26.428Z","decision":"rescore","investigation_id":"bac1a051-a905-472d-8f30-1c63ac9db652","new_score":48,"page_slug":"jimbos-protocol","prev_score":18,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 18 → 48. Problems weighed by who is responsible: incidents the subject suffered −20, concerns that are not fraud −6, problems around the subject, caused by others −0.8; the penalty for incidents it suffered is capped at 20.","score_delta":30,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision c9577f96-7389-459e-9387-fbfab3b1e4dbcopy
3. #3reviewby reviewerreviewer

   2026-11-08 02:37:12Z
   Score: 48 → 48 (no score change)
   The core facts (exploit date, 4,090 ETH, ~$7.5M, flash loan, Tornado Cash laundering per PeckShield) are supported. One claim is stale: Tornado Cash is described as sanctioned, but OFAC delisted it in March 2025. The AAVE and Stargate/Celer details are not in The Register, and the V1-to-V2 gap is unsourced. The review was time-boxed and spot-checked only a few sources.
   anchoranchored

   chain

   ●mainnet-betaslot 466,749,725

   sig

   4suKbL1pJuJ5…D9tmEZJ9copyexplorer ↗

   hash

   FqGTnNoauR73…TVaDKzxpcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1226 B) ▸

   {"actor":"reviewer","artifact_identity":"e0df03a69d6e4f9bb0ffe26d129e3592","decided_at":"2026-11-08T02:37:11.955Z","decision":"review","disputed_pct":0.2857,"findings_hash":"7Mu2xgFSCfAXoczYbkn6AqiBJCgVHPtp23bqxtPJTgMb","investigation_id":"bac1a051-a905-472d-8f30-1c63ac9db652","judge_def_hash":"750934ecb48272224909b7430fab271676d391380fbc821acbe7ee7e4cac2fa3","new_score":48,"omissions":{"material":0,"total":1},"page_content_hash":"6d8a7ad56e606858fb54b89e3cdd29764cbf4811f9db3b52e3476335b644735e","page_slug":"jimbos-protocol","prev_score":48,"reason":"The core facts (exploit date, 4,090 ETH, ~$7.5M, flash loan, Tornado Cash laundering per PeckShield) are supported. One claim is stale: Tornado Cash is described as sanctioned, but OFAC delisted it in March 2025. The AAVE and Stargate/Celer details are not in The Register, and the V1-to-V2 gap is unsourced. The review was time-boxed and spot-checked only a few sources.","reviewer_def_hash":"3839668b232611e5b26db72079d64745f8e57e919b8a379e79b44ba4a52c845b","score_delta":0,"sequence_num":3,"subject_status":"exploited","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision cb6bf25a-4917-416e-9c8c-68dd07f26098copy
4. #4review reviseby judgejudge

   2026-11-08 02:37:12Z
   Score: 48 → 48 (no score change)
   The core facts of the page (28 May 2023 exploit, 4,090 ETH, about $7.5M, flash loan, laundering through Tornado Cash) were confirmed (claim_findings[3], [4]). Two of seven claims could not be verified (claim_findings[2] Stargate/Celer bridging, claim_findings[6] the V1-to-V2 gap), which gives a disputed share of about 29%. One claim is out of date: Tornado Cash is described as sanctioned although OFAC delisted it in March 2025 (claim_findings[0]). The reviewer spot-checked only a few sources and reported moderate confidence, so the penalty stays at the lower end of the minor band. The page already discloses the exploit and the one omission found (V1 abandonment) is minor.
   anchoranchored

   chain

   ●mainnet-betaslot 466,749,731

   sig

   2uoVQNASAwXH…gsTAVqhDcopyexplorer ↗

   hash

   CvEP77BGGLvy…eN13WnQYcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1329 B) ▸

   {"actor":"judge","artifact_identity":"e0df03a69d6e4f9bb0ffe26d129e3592","band_override":null,"decided_at":"2026-11-08T02:37:11.955Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.2857,"investigation_id":"bac1a051-a905-472d-8f30-1c63ac9db652","judge_def_hash":"750934ecb48272224909b7430fab271676d391380fbc821acbe7ee7e4cac2fa3","new_score":48,"page_slug":"jimbos-protocol","prev_score":48,"reason":"The core facts of the page (28 May 2023 exploit, 4,090 ETH, about $7.5M, flash loan, laundering through Tornado Cash) were confirmed (claim_findings[3], [4]). Two of seven claims could not be verified (claim_findings[2] Stargate/Celer bridging, claim_findings[6] the V1-to-V2 gap), which gives a disputed share of about 29%. One claim is out of date: Tornado Cash is described as sanctioned although OFAC delisted it in March 2025 (claim_findings[0]). The reviewer spot-checked only a few sources and reported moderate confidence, so the penalty stays at the lower end of the minor band. The page already discloses the exploit and the one omission found (V1 abandonment) is minor.","reviewer_def_hash":"3839668b232611e5b26db72079d64745f8e57e919b8a379e79b44ba4a52c845b","score_delta":0,"sequence_num":4,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 954fedf3-c7d8-4c0b-bed0-a76595729241copy
5. #5rescoreby systemsystem

   2026-11-08 02:37:13Z
   Score: 48 → 49 (+1)
   Recalculated after the fact-check of 2026-11-08. Rescored under Scoring v2, the published formula (avoid.net/scoring): 48 → 49. Problems weighed by who is responsible: incidents the subject suffered −20, concerns that are not fraud −6; the penalty for incidents it suffered is capped at 20; 2 section(s) set aside until a failed fact-check is resolved.
   anchoranchored

   chain

   ●mainnet-betaslot 466,749,739

   sig

   59Kr1Xpxa5BP…ttnqBbnUcopyexplorer ↗

   hash

   zqkugPnbdYtV…XsC7Ew2Scopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (721 B) ▸

   {"actor":"system","decided_at":"2026-11-08T02:37:11.955Z","decision":"rescore","investigation_id":"bac1a051-a905-472d-8f30-1c63ac9db652","new_score":49,"page_slug":"jimbos-protocol","prev_score":48,"reason":"Recalculated after the fact-check of 2026-11-08. Rescored under Scoring v2, the published formula (avoid.net/scoring): 48 → 49. Problems weighed by who is responsible: incidents the subject suffered −20, concerns that are not fraud −6; the penalty for incidents it suffered is capped at 20; 2 section(s) set aside until a failed fact-check is resolved.","score_delta":1,"score_model":"v2","sequence_num":5,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 1bdc87cc-52dc-422c-9183-f7da2c4a569bcopy