Skip to main content
Sign in
Kame Aggregator1 decision on this page

Audit log

Every state-changing event for Kame Aggregator: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

  1. #1publishby system:backfill
    2026-05-26 18:30:27Z
    Score: ?? (no score change)
    anchoranchored
    chain
    mainnet-betaslot 422,338,843
    sig
    29uPG38U7tYx…LBMS8ycMexplorer ↗
    hash
    BLtpgafuVgTL…MyfBpFiMsha256 → base58
    verifying row…full verify ↗
    canonical bytes (5126 B) ▸
    {"actor":"system:backfill","investigation_id":"fc3166bc-cdac-442b-a51b-eae4fce81fe4","kind":"publish","page_slug":"kame-aggregator","published_at":"2026-05-26T18:30:27.431Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Kame Aggregator","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://kameagg.substack.com/p/post-mortem-kame-aggregator-exploit","type":"other","url":""},{"credibility":3,"name":"https://revoke.cash/exploits/kame","type":"other","url":""},{"credibility":3,"name":"https://quadrigainitiative.com/casestudy/kameaggregatorswapfunctionarbitraryexecutorcallbug.php","type":"other","url":""},{"credibility":3,"name":"https://blockonomi.com/kame-aggregator-on-sei-hit-by-1m-exploit-hacker-returns-185-eth","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://kameagg.substack.com/p/post-mortem-kame-aggregator-exploit","type":"other","url":""},{"credibility":3,"name":"https://quadrigainitiative.com/casestudy/kameaggregatorswapfunctionarbitraryexecutorcallbug.php","type":"other","url":""},{"credibility":3,"name":"https://blog.verichains.io/p/the-hidden-danger-of-unlimited-token","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.cryptopolitan.com/kame-aggregator-recovers-185-eth/","type":"other","url":""},{"credibility":3,"name":"https://coinedition.com/kame-aggregator-185eth-recovery-sei-hack/","type":"other","url":""},{"credibility":3,"name":"https://revoke.cash/exploits/kame","type":"other","url":""},{"credibility":3,"name":"https://www.mexc.com/news/95334","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.mexc.com/news/95334","type":"other","url":""},{"credibility":3,"name":"https://phemex.com/news/article/kame-aggregator-recovers-185-eth-posthack-plans-user-compensation-18436","type":"other","url":""},{"credibility":3,"name":"https://revoke.cash/exploits/kame","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://stouy.com/kame-dex-aggregator-on-sei-guide/","type":"other","url":""},{"credibility":3,"name":"https://web3.bitget.com/en/dapp/kame-aggregator-31324","type":"other","url":""},{"credibility":3,"name":"https://tracxn.com/d/companies/kame/__8YJXssv554ck8xcBPEZIFCjFYJLEEmiehR6l3qua8rU/founders-and-board-of-directors","type":"other","url":""},{"credibility":3,"name":"https://alphagrowth.io/kame-aggregator","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://revoke.cash/exploits/kame","type":"other","url":""},{"credibility":3,"name":"https://kameagg.substack.com/p/post-mortem-kame-aggregator-exploit","type":"other","url":""}]}],"sources_used":[],"summary":"Kame Aggregator is a decentralized exchange (DEX) aggregator protocol built on the Sei blockchain, launched in late May 2025, designed to route token swaps across multiple liquidity sources for optimal pricing. On September 13, 2025, the protocol suffered a critical smart contract exploit in which approximately $1.325 million was drained from 830 user wallets via an arbitrary external call vulnerability in its swap() function. The primary exploiter returned approximately $946,000 after negotiations, while secondary exploiters retained approximately $357,000; the team initiated a compensation program that reached over $1 million USDC in distributions by November 2025.","timeline":[{"date":"2025-05-01","event":"Kame Aggregator launches on the Sei blockchain as the network's first native DEX aggregator, aggregating liquidity from 12+ sources.","source":""},{"date":"2025-09-13","event":"Critical exploit in the AggregationRouter swap() function; attackers abuse arbitrary external call vulnerability and unlimited token approvals to drain approximately $1.325 million from 830 user wallets.","source":""},{"date":"2025-09-13","event":"Kame team detects exploit and immediately alerts users across X, Telegram, and Discord to revoke token approvals. Platform temporarily closes.","source":""},{"date":"2025-09-13","event":"Kame team establishes direct contact with primary exploiter and begins negotiation.","source":""},{"date":"2025-09-14","event":"Primary exploiter accepts 20% bounty offer and transfers 185 ETH (~$946,195) to Kame's recovery wallet via on-chain Ethereum transaction.","source":""},{"date":"2025-09-14","event":"White hat hackers recover an additional approximately $21,900 from the exploit.","source":""},{"date":"2025-09-14","event":"Kame publishes post-mortem detailing the vulnerability, affected contracts, and five-point remediation plan.","source":""},{"date":"2025-10-01","event":"Kame begins rolling out compensation distributions to affected users in multiple stages.","source":""},{"date":"2025-11-01","event":"Cumulative compensation distributions exceed $1,031,115 USDC across all stages; team states commitment to 100% reimbursement.","source":""}]},"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision 79d1743d-2e5f-4f65-8e46-82b8ea40b6bd
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine — python -m src.verify_decision <event_id>.