← Kalax1 decision on this page
Audit log
Every state-changing event for Kalax: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.
- #1publishby system:backfill2026-05-30 04:05:58ZScore: ? → ? (no score change)anchoranchored
- chain
- ●mainnet-betaslot 423,080,264
- sig
2FsFRm9M8ojX…oQTXob1mexplorer ↗- hash
4f8wm5PZK8Qr…W6dkserNsha256 → base58
verifying row…full verify ↗canonical bytes (5202 B) ▸
{"actor":"system:backfill","investigation_id":"f281421a-6092-476f-8aee-de0d6906d956","kind":"publish","page_slug":"kalax","published_at":"2026-05-30T04:05:58.263Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Kalax","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://defillama.com/protocol/kalax","type":"other","url":""},{"credibility":3,"name":"https://blastscan.io/token/0x2F67F59b3629Bf24962290DB9edE0CD4127e606D","type":"other","url":""},{"credibility":3,"name":"https://cybro.medium.com/how-to-avoid-scams-in-defi-8f3728e23d9d","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://cybro.medium.com/how-to-avoid-scams-in-defi-8f3728e23d9d","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/kalax","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/@Kalax.io/kalax-a-solid-choice-for-fund-security-4a49b2298d66","type":"other","url":""},{"credibility":3,"name":"https://beosin.com/report","type":"other","url":""},{"credibility":3,"name":"https://cybro.medium.com/how-to-avoid-scams-in-defi-8f3728e23d9d","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/@Kalax.io/kalax-launches-ambassador-program-9e677df92314","type":"other","url":""},{"credibility":3,"name":"https://x.com/kalax_io","type":"other","url":""},{"credibility":3,"name":"https://cybro.medium.com/how-to-avoid-scams-in-defi-8f3728e23d9d","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://blastscan.io/token/0x2F67F59b3629Bf24962290DB9edE0CD4127e606D","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/kalax","type":"other","url":""},{"credibility":3,"name":"https://www.coinbase.com/price/kalax","type":"other","url":""},{"credibility":3,"name":"https://www.coingecko.com/en/coins/kalax","type":"other","url":""},{"credibility":3,"name":"https://blastplorer.info/address/0x8273d96954c5cfb35aa6372e66f0ceede69cdc80","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/markets/2024/02/26/blast-ecosystem-sees-first-apparent-scam-as-riskonblast-rug-pulls-13m-ether","type":"other","url":""},{"credibility":3,"name":"https://ambcrypto.com/blast-l2-loses-97-of-tvl-assessing-its-odds-of-recovery/","type":"other","url":""},{"credibility":3,"name":"https://thedefiant.io/news/blockchains/blast-tvl-plunges-another-30-as-users-abandon-the-network","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/chain/Blast","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://defillama.com/protocol/kalax","type":"other","url":""},{"credibility":3,"name":"https://chainabuse.com/reports","type":"other","url":""}]}],"sources_used":[],"summary":"Kalax (ticker: KALA) was a non-custodial yield aggregator deployed on the Blast and Scroll blockchains in 2024 that marketed itself as an auto-compounding protocol for DEXs and lending markets. Despite commissioning a Beosin security audit and publishing promotional security guarantees, the project's founders are alleged to have executed an exit scam on October 14, 2024, abandoning the protocol and deleting all official social media accounts after draining user funds from protocol vaults. The kalax.io domain subsequently redirected to an unrelated gambling site, with no team communications issued to affected depositors.","timeline":[{"date":"2024-02-26","event":"Blast Layer 2 launches publicly and experiences its first major rug pull (RiskOnBlast), establishing the ecosystem's vulnerability to anonymous-team exit scams.","source":""},{"date":"2024-05-01","event":"Kalax launches as a yield aggregator on Blast, marketing auto-compounding vaults and APYs of 100-1000%.","source":""},{"date":"2024-05-21","event":"Beosin Security completes a smart contract audit of Kalax (report dated 202405211051).","source":""},{"date":"2024-06-01","event":"Kalax publishes 'Kalax: A Solid Choice for Fund Security' on Medium, promoting the Beosin audit and brake mechanism as evidence of protocol safety.","source":""},{"date":"2024-06-15","event":"Blast ecosystem promotional accounts identify Kalax as the project with the largest TVL percentage increase that week, driving additional retail depositors.","source":""},{"date":"2024-07-01","event":"Kalax launches an Ambassador Program, incentivizing community members to promote the protocol on social media in exchange for rewards.","source":""},{"date":"2024-10-14","event":"Kalax founders allegedly execute an exit scam, draining user funds from protocol vaults. The @Kalax_io X account is subsequently deleted and the kalax.io website becomes inaccessible.","source":""},{"date":"2024-10-15","event":"Post-incident, the kalax.io domain redirects to an unrelated gambling site. No team communication or compensation is offered.","source":""}]},"v":1}Verify offline (run on your own machine)python -m src.verify_decision 7487d807-bad8-4172-8846-a25cc4e8f9a1
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine —
python -m src.verify_decision <event_id>.