Fact-check findings
What an automated fact-checker found when it re-read Kiln against the sources the page cites. Only the most recent review is shown.
These findings are produced by an automated reviewer, and its results vary between runs: the same page, checked three times on the same day, came back with 15%, 20% and 34% of its claims disputed, mostly because each run extracted a different number of claims. Treat what follows as leads, not rulings.
“Disputed” means the reviewer could not reconcile the claim with the evidence it cited. It does not mean the claim is false. “Unverifiable” means no reachable source settled it either way.
Nothing here changes the page on its own. A proposed correction is applied only after a human moderator approves it; until then the page reads as it did when reviewed.
unverifiable
3 claimsNo source the reviewer could reach confirms or contradicts the claim.
- #3[unverifiable][awaiting moderator]in the timeline
“embeds eight hidden authorization instructions in an apparently routine SOL unstaking transaction through the Kiln Connect API”
reviewerAttack embedded eight hidden authorization instructionsThe detail is not in the official post; I did not fetch the QuillAudits article, so the figure is not independently confirmed. - #6[unverifiable][awaiting moderator]in the timeline
“Kiln publishes post-incident service re-enablement and security remediation details.”
reviewerKiln published re-enablement and remediation details on 2025-09-16The cited CoinDesk source does not support this clause, and the Kiln post appears to be later than Sept 16. - #7[unverifiable][awaiting moderator]in section: Ethereum Validator Mass Exit and Network Impact
“Preston Van Loon, a known Ethereum core contributor, publicly described Kiln's decision as 'the most responsible decision to be made after a suspected leak of validator keys.'”
reviewerPreston Van Loon called the exit the most responsible decisionI did not fetch the X post; no other source checked confirms the quote.
partially supported
1 claimThe cited evidence supports part of the claim but not all of it.
- #8[partially supported][awaiting moderator]in section: Kiln's Incident Response and Security Remediation
“The CISA separately issued an advisory on September 23, 2025 regarding a widespread npm supply chain compromise affecting 2.6 billion weekly downloads”
reviewerCISA advisory Sept 23, 2025 on npm compromise affecting 2.6 billion weekly downloadsDate confirmed; the download figure is not in the cited CISA page. The material is also tangential to Kiln, since the page itself says it was a distinct event.
confirmed
4 claimsThe cited evidence supports the claim as written.
- #1[confirmed][no action needed]in section: Supply Chain Attack — September 2025
“The initial intrusion vector was the compromise of a GitHub access token belonging to a Kiln infrastructure engineer.”
reviewerIntrusion began with a compromised GitHub access token of a Kiln infrastructure engineerMatches Kiln's own incident report. - #2[confirmed][no action needed]in section: Supply Chain Attack — September 2025
“The injected instructions specifically targeted staking accounts holding balances exceeding 150,000 SOL.”
reviewerPayload targeted accounts with balances above 150,000 SOLSupported by the official post. - #4[confirmed][no action needed]in the timeline
“Kiln initiates exit from all Ethereum validators as a precautionary measure.”
reviewerKiln exited all Ethereum validators on Sept 9 (about 1.6M ETH)Date and amount match CoinDesk. - #5[confirmed][no action needed]in the timeline
“CoinDesk reports approximately 2.5 million ETH (~$11.25 billion) waiting in the Ethereum exit queue, with wait times above 46 days.”
reviewerExit queue about 2.5M ETH (~$11.25B), wait over 46 days, longest in historyConfirmed.