Audit log

Every state-changing event for JUDAO: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-30 12:21:50Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 423,155,407

   sig

   2tZgHSPfo65r…tEBVzAhEcopyexplorer ↗

   hash

   7TfYUPiRkkmJ…t5WWzLnXcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (9465 B) ▸

   {"actor":"system:backfill","investigation_id":"30044096-fa32-4ad7-ba26-1412435a79a3","kind":"publish","page_slug":"judao","published_at":"2026-05-30T12:21:49.998Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"JUDAO","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":2,"name":"T3 JUDAO pair explorer — DEXTools","type":"other","url":"https://www.dextools.io/app/bsc/pair-explorer/0x5d7b61e91cb59e90f7fae8d0fe2e73976161592f"},{"credibility":2,"name":"T3 JUDAO price and supply — Coinranking","type":"other","url":"https://coinranking.com/coin/MyG95gTX0vaR+t3judao-judao"},{"credibility":3,"name":"JuCoin announces JUDAO 3.0 ecosystem partnership — X (@Jucoinex)","type":"social_media","url":"https://x.com/Jucoinex/status/1948741315409444926"},{"credibility":2,"name":"JUDAO/USDT pool on PancakeSwap V3 (BSC) — GeckoTerminal","type":"on_chain","url":"https://www.geckoterminal.com/bsc/pools/0x628d9a4f8ed53b6e7725ee4647ece36ba44bdc20"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":2,"name":"JUDAO Hack Analysis — Verichains (LCD)","type":"research","url":"https://blog.verichains.io/p/judao-hack-analysic"},{"credibility":2,"name":"ExVulSec exploit alert on X — @exvulsec","type":"social_media","url":"https://x.com/exvulsec/status/2048947737568432328"},{"credibility":2,"name":"Wrong Fee Tier Set in January, $413K Gone by April (JUDAO section) — MEXC News","type":"news_article","url":"https://www.mexc.com/news/1060124"},{"credibility":2,"name":"Wrong Fee Tier Set in January, $413K Gone by April — Live Bitcoin News","type":"news_article","url":"https://www.livebitcoinnews.com/wrong-fee-tier-set-in-january-413k-gone-by-april/"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":2,"name":"JUDAO Hack Analysis — Verichains (LCD)","type":"research","url":"https://blog.verichains.io/p/judao-hack-analysic"},{"credibility":1,"name":"JUDAO token contract on BSCScan (no audit submitted)","type":"on_chain","url":"https://bscscan.com/address/0xf55DFF7898930a2D28cDbC39D615b1624ac86888"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":2,"name":"ZachXBT raises red flags about Token2049 sponsors (JuCoin flagged as 'sketchy') — Mitrade","type":"news_article","url":"https://www.mitrade.com/insights/news/live-news/article-3-724219-20250328"},{"credibility":2,"name":"ZachXBT raises red flags about Token2049 sponsors — Cryptopolitan","type":"news_article","url":"https://www.cryptopolitan.com/zachxbt-red-flags-token2049-sponsors/"},{"credibility":2,"name":"ZachXBT raises red flags about Token2049 sponsors — CryptoRank","type":"news_article","url":"https://cryptorank.io/news/feed/b4990-zachxbt-red-flags-token2049-sponsors"},{"credibility":3,"name":"JuCoin announces JUDAO 3.0 partnership — X (@Jucoinex)","type":"social_media","url":"https://x.com/Jucoinex/status/1948741315409444926"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":2,"name":"JuCoin Token Crash: Case Study in DeFi Systemic Risk — AiInvest","type":"news_article","url":"https://www.ainvest.com/news/jucoin-token-crash-case-study-defi-systemic-risk-future-capital-allocation-2509/"},{"credibility":2,"name":"Is JuCoin's JU Token a Sustained Web3 Winner? — AiInvest","type":"news_article","url":"https://www.ainvest.com/news/jucoin-ju-token-sustained-web3-winner-regulatory-driven-frenzy-2508/"},{"credibility":2,"name":"ZachXBT raises red flags about Token2049 sponsors — Mitrade","type":"news_article","url":"https://www.mitrade.com/insights/news/live-news/article-3-724219-20250328"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":2,"name":"JUDAO token pair — DEXTools (price data)","type":"on_chain","url":"https://www.dextools.io/app/bsc/pair-explorer/0x5d7b61e91cb59e90f7fae8d0fe2e73976161592f"},{"credibility":2,"name":"T3 JUDAO price history — Coinranking","type":"on_chain","url":"https://coinranking.com/coin/MyG95gTX0vaR+t3judao-judao"},{"credibility":2,"name":"JUDAO Hack Analysis — Verichains","type":"research","url":"https://blog.verichains.io/p/judao-hack-analysic"},{"credibility":1,"name":"JUDAO contract on BSCScan","type":"on_chain","url":"https://bscscan.com/address/0xf55DFF7898930a2D28cDbC39D615b1624ac86888"}]}],"sources_used":[{"credibility":2,"name":"JUDAO Hack Analysis — Verichains (LCD)","type":"research","url":"https://blog.verichains.io/p/judao-hack-analysic"},{"credibility":2,"name":"ExVulSec exploit alert — X (@exvulsec)","type":"social_media","url":"https://x.com/exvulsec/status/2048947737568432328"},{"credibility":2,"name":"Wrong Fee Tier Set in January, $413K Gone by April — MEXC News","type":"news_article","url":"https://www.mexc.com/news/1060124"},{"credibility":2,"name":"Wrong Fee Tier Set in January, $413K Gone by April — Live Bitcoin News","type":"news_article","url":"https://www.livebitcoinnews.com/wrong-fee-tier-set-in-january-413k-gone-by-april/"},{"credibility":2,"name":"T3 JUDAO pair explorer — DEXTools","type":"other","url":"https://www.dextools.io/app/bsc/pair-explorer/0x5d7b61e91cb59e90f7fae8d0fe2e73976161592f"},{"credibility":2,"name":"JUDAO/USDT pool — GeckoTerminal","type":"on_chain","url":"https://www.geckoterminal.com/bsc/pools/0x628d9a4f8ed53b6e7725ee4647ece36ba44bdc20"},{"credibility":2,"name":"T3 JUDAO price and supply — Coinranking","type":"other","url":"https://coinranking.com/coin/MyG95gTX0vaR+t3judao-judao"},{"credibility":1,"name":"JUDAO token contract — BSCScan","type":"on_chain","url":"https://bscscan.com/address/0xf55DFF7898930a2D28cDbC39D615b1624ac86888"},{"credibility":2,"name":"ZachXBT raises red flags about Token2049 sponsors — Mitrade","type":"news_article","url":"https://www.mitrade.com/insights/news/live-news/article-3-724219-20250328"},{"credibility":2,"name":"ZachXBT raises red flags about Token2049 sponsors — Cryptopolitan","type":"news_article","url":"https://www.cryptopolitan.com/zachxbt-red-flags-token2049-sponsors/"},{"credibility":3,"name":"JuCoin announces JUDAO 3.0 ecosystem partnership — X (@Jucoinex)","type":"social_media","url":"https://x.com/Jucoinex/status/1948741315409444926"},{"credibility":2,"name":"JuCoin Token Crash Case Study — AiInvest","type":"news_article","url":"https://www.ainvest.com/news/jucoin-token-crash-case-study-defi-systemic-risk-future-capital-allocation-2509/"},{"credibility":2,"name":"Is JuCoin's JU Token a Sustained Web3 Winner? — AiInvest","type":"news_article","url":"https://www.ainvest.com/news/jucoin-ju-token-sustained-web3-winner-regulatory-driven-frenzy-2508/"},{"credibility":3,"name":"JUDAO 3.0 project X account (@JUDAOGlobal)","type":"social_media","url":"https://x.com/JUDAOGlobal"}],"summary":"JUDAO is a deflationary BEP-20 token deployed on BNB Smart Chain and trading primarily on PancakeSwap, with a self-described 'T3 JUDAO' iteration launched in January 2026 and a separate 'JUDAO 3.0' variant announced as part of the JuCoin ecosystem via NordCore Labs. On April 28, 2026, the token's liquidity pool was drained of approximately $228,000 through a flash loan exploit that exploited a double-reserve-sync vulnerability in its custom transfer logic. The project's parent exchange JuCoin was independently flagged by on-chain investigator ZachXBT as 'sketchy' in March 2025, and JUDAO 3.0 has no verifiable audit, no identified founding team, and no smart contract security review on record.","timeline":[{"date":"2025-03-28","event":"ZachXBT flags JuCoin as 'sketchy' in a public warning about Token2049 platinum sponsors, citing ownership changes, regulatory pivots, and lack of team transparency. JuCoin subsequently announced JUDAO 3.0 as part of its ecosystem.","source":"Mitrade / ZachXBT on X","source_url":"https://www.mitrade.com/insights/news/live-news/article-3-724219-20250328"},{"date":"2025-09-17","event":"JuCoin's native JU token collapses approximately 75% within hours, falling from ~$24 to ~$6. JuCoin cites 'external liquidity factors' without providing substantive transparency.","source":"AiInvest","source_url":"https://www.ainvest.com/news/jucoin-token-crash-case-study-defi-systemic-risk-future-capital-allocation-2509/"},{"date":"2026-01-15","event":"T3 JUDAO (contract: 0xf55DFF7898930a2D28cDbC39D615b1624ac86888) deploys on BNB Smart Chain. The token reaches its all-time high of $0.00170 the following day.","source":"Coinranking","source_url":"https://coinranking.com/coin/MyG95gTX0vaR+t3judao-judao"},{"date":"2026-04-28","event":"Flash loan exploit drains the JUDAO liquidity pool. Attacker (0x5384B34C74024d6563B323351a4bBFA18432161B) flash-loans 2,295,723 USDT from Lista DAO: Moolah, exploits a double-sync vulnerability in JUDAO's _update() function, and extracts approximately $205,259 USDT plus 36 BNB (~$227,600 total). ExVulSec issues the first public alert on X.","source":"ExVulSec on X / Verichains","source_url":"https://blog.verichains.io/p/judao-hack-analysic"},{"date":"2026-04-28","event":"Verichains security firm publishes a technical post-mortem identifying the root cause as incorrect reserve accounting from a double sync() call in JUDAO's transfer function.","source":"Verichains","source_url":"https://blog.verichains.io/p/judao-hack-analysic"},{"date":"2026-04-28","event":"MEXC News reports on the JUDAO exploit, noting the pool had an alleged TVL of $22.3 million at the time of the attack.","source":"MEXC News","source_url":"https://www.mexc.com/news/1060124"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 21489889-7744-44e4-afb5-e7fdd8c28447copy
2. #2reviewby reviewerreviewer

   2026-10-27 06:44:36Z
   Score: 18 → 18 (no score change)
   The core exploit facts (date, ~$228K loss, root cause, attacker and contract addresses, tx hash) match the Verichains post-mortem, and the ZachXBT flag is supported by Mitrade. Weaknesses are an unconfirmed Lista DAO and 'BUSD-JUDAO' attribution, a dead MEXC link (410) cited as an 'independent' TVL source, and JuCoin background claims (JPEX/FIU, Sept 2025 crash) resting on weak or unread sources. The page omits JuCoin's June 2026 withdrawal freeze and reserve dispute. Several X and BscScan sources could not be read.
   anchoranchored

   chain

   ●mainnet-betaslot 461,973,596

   sig

   4pBPAG1T59b9…Z39w2M1kcopyexplorer ↗

   hash

   2XbysJJPNgTW…1KAmADZocopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1403 B) ▸

   {"actor":"reviewer","artifact_identity":"74b9ff04f35d31a157dca0025192ea7b","blocked_count":5,"decided_at":"2026-10-27T06:44:36.801Z","decision":"review","disputed_pct":0.1818,"findings_hash":"25vmkEVXKvNk5Zfct8Lu3FvE9XjfyhfPPTq2cixsNpbr","investigation_id":"30044096-fa32-4ad7-ba26-1412435a79a3","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":18,"omissions":{"material":1,"total":3},"page_content_hash":"d4b3120e554554de48154ec944fa650eebef8977795e682a6a217666d0fe12a7","page_slug":"judao","prev_score":18,"reason":"The core exploit facts (date, ~$228K loss, root cause, attacker and contract addresses, tx hash) match the Verichains post-mortem, and the ZachXBT flag is supported by Mitrade. Weaknesses are an unconfirmed Lista DAO and 'BUSD-JUDAO' attribution, a dead MEXC link (410) cited as an 'independent' TVL source, and JuCoin background claims (JPEX/FIU, Sept 2025 crash) resting on weak or unread sources. The page omits JuCoin's June 2026 withdrawal freeze and reserve dispute. Several X and BscScan sources could not be read.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":11,"sequence_num":2,"subject_status":"operating","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 834737ee-0ce8-42f9-a4d0-605de4b66b2fcopy
3. #3review reviseby judgejudge

   2026-10-27 06:44:37Z
   Score: 18 → 6 (-12)
   Of 16 claim findings, 5 were unreadable because the source blocked the reviewer (BscScan, X, Coinranking, AiInvest) and were left out, leaving 11. Two of those (claim_findings[8], [13]) could not be found, so about 18% are disputed or unverifiable. The core exploit facts (date, ~$228K loss, root cause, addresses, transaction hash) are confirmed by the Verichains post-mortem (claim_findings[0], [1]). The page needs revision for three reasons. The MEXC link is dead (claim_findings[4], [5]) and the 'independent' TVL claim is doubtful. The Lista DAO and BUSD-JUDAO details are not in the fetched sources (claim_findings[2], [9]). The page also omits the June 2026 JuCoin withdrawal and reserve dispute (omission_findings[0]).
   anchoranchored

   chain

   ●mainnet-betaslot 461,973,601

   sig

   4LYK6X9MKHeB…fSK8op6ocopyexplorer ↗

   hash

   374GjWB3r5Dc…81LtP5ygcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1868 B) ▸

   {"actor":"judge","artifact_identity":"74b9ff04f35d31a157dca0025192ea7b","band_override":null,"blocked_count":5,"decided_at":"2026-10-27T06:44:36.801Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.1818,"investigation_id":"30044096-fa32-4ad7-ba26-1412435a79a3","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":6,"page_slug":"judao","prev_score":18,"reason":"Of 16 claim findings, 5 were unreadable because the source blocked the reviewer (BscScan, X, Coinranking, AiInvest) and were left out, leaving 11. Two of those (claim_findings[8], [13]) could not be found, so about 18% are disputed or unverifiable. The core exploit facts (date, ~$228K loss, root cause, addresses, transaction hash) are confirmed by the Verichains post-mortem (claim_findings[0], [1]). The page needs revision for three reasons. The MEXC link is dead (claim_findings[4], [5]) and the 'independent' TVL claim is doubtful. The Lista DAO and BUSD-JUDAO details are not in the fetched sources (claim_findings[2], [9]). The page also omits the June 2026 JuCoin withdrawal and reserve dispute (omission_findings[0]).","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":-12,"scored_claims":11,"sequence_num":3,"severity_override":{"applied":false,"band":null,"from_band":"minor","reason":"The material omission (June 2026 withdrawal delays and disputed reserves at parent exchange JuCoin) concerns the parent exchange, not the JUDAO exploit itself. The reviewer found the subject operating, with no shutdown or sanction, and the source itself says the alert did not prove insolvency. The page stays in the minor band, and the omission is passed on as a required addition."},"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 2ec3d2f5-9e2e-4845-8e53-f03a42dccd0acopy