← LendHub1 decision on this page
Audit log
Every state-changing event for LendHub: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.
- #1publishby system:backfill2026-05-28 16:22:06ZScore: ? → ? (no score change)anchoranchored
- chain
- ●mainnet-betaslot 422,755,653
- sig
2gSnKKb8qAwZ…RY9crxHKexplorer ↗- hash
5Qb6MVE8yiKp…dJHayoD4sha256 → base58
verifying row…full verify ↗canonical bytes (6213 B) ▸
{"actor":"system:backfill","investigation_id":"ec31964a-e60e-4b74-8653-c508cbe10f02","kind":"publish","page_slug":"lendhub","published_at":"2026-05-28T16:22:06.724Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"LendHub","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-lendhub-hack-january-2023","type":"other","url":""},{"credibility":3,"name":"https://www.certik.com/resources/blog/1IDWJfEBm6GK5sIIdfhfQn-lendhub-incident-analysis","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/lendhub","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://cryptopotato.com/lendhub-exploiter-moves-proceeds-to-tornadocash/","type":"other","url":""},{"credibility":3,"name":"https://www.certik.com/resources/blog/1IDWJfEBm6GK5sIIdfhfQn-lendhub-incident-analysis","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.theblock.co/post/202047/self-proclaimed-safest-defi-lender-loses-6-million-in-hack","type":"other","url":""},{"credibility":3,"name":"https://coincodecap.com/lendhub-the-safest-defi-lender-loses-6-million-in-a-hack","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://defillama.com/protocol/lendhub","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/the-heco-chain-announced-its-official-retirement-urging-users-to-convert-and-redeem-their-assets/","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/lendhub-loses-6m-to-hackers/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://hecochain.medium.com/introducing-lendhub-hecos-fastest-growing-lending-protocol-7716895a06c","type":"other","url":""},{"credibility":3,"name":"https://www.huobi.com/support/en-us/detail/104874608555069","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.certik.com/resources/blog/1IDWJfEBm6GK5sIIdfhfQn-lendhub-incident-analysis","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-lendhub-hack-january-2023","type":"other","url":""}]}],"sources_used":[{"credibility":2,"name":"Explained: The LendHub Hack (January 2023) — Halborn","type":"research","url":"https://www.halborn.com/blog/post/explained-the-lendhub-hack-january-2023"},{"credibility":2,"name":"Lendhub Incident Analysis — CertiK","type":"research","url":"https://www.certik.com/resources/blog/1IDWJfEBm6GK5sIIdfhfQn-lendhub-incident-analysis"},{"credibility":1,"name":"Self-proclaimed 'safest' DeFi lender loses $6 million in hack — The Block","type":"news_article","url":"https://www.theblock.co/post/202047/self-proclaimed-safest-defi-lender-loses-6-million-in-hack"},{"credibility":2,"name":"Lendhub protocol exploiters spotted shifting $3.85M into Tornado Cash — CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/lendhub-protocol-exploiters-spotted-shifting-3-85m-into-tornado-cash"},{"credibility":2,"name":"Lendhub Exploiter Moves Proceeds to TornadoCash — CryptoPotato","type":"news_article","url":"https://cryptopotato.com/lendhub-exploiter-moves-proceeds-to-tornadocash/"},{"credibility":2,"name":"LendHub loses $6m to hackers — Crypto.news","type":"news_article","url":"https://crypto.news/lendhub-loses-6m-to-hackers/"},{"credibility":2,"name":"LendHub — DefiLlama (TVL and protocol status)","type":"on_chain","url":"https://defillama.com/protocol/lendhub"},{"credibility":2,"name":"Introducing LendHub — HECO Chain Medium","type":"official","url":"https://hecochain.medium.com/introducing-lendhub-hecos-fastest-growing-lending-protocol-7716895a06c"},{"credibility":2,"name":"HECO Chain retirement announcement — Crypto.news","type":"news_article","url":"https://crypto.news/the-heco-chain-announced-its-official-retirement-urging-users-to-convert-and-redeem-their-assets/"},{"credibility":2,"name":"Hackers of Crypto Platform Lendhub Move $3.85 Million Into Tornado Cash — Bitcoinist","type":"news_article","url":"https://bitcoinist.com/lendhub-hackers-move-3-85-million-in-crypto/"}],"summary":"LendHub was a decentralized cross-chain lending protocol operating primarily on the Huobi Eco Chain (HECO) and Binance Smart Chain (BSC). On January 12, 2023, the protocol suffered an approximately $6 million exploit caused by an operational failure to remove a deprecated IBSV cToken from its market, allowing an attacker to drain funds by arbitraging the two coexisting token versions. The protocol's TVL collapsed to near zero following the exploit, stolen funds were laundered through Tornado Cash, and the protocol is no longer considered operational.","timeline":[{"date":"2021-05-06","event":"LendHub launched on Huobi Global and promoted as HECO chain's fastest-growing lending protocol.","source":""},{"date":"2023-01-11","event":"The exploiter received 100 ETH from Tornado Cash on Ethereum and began staging the attack.","source":""},{"date":"2023-01-12","event":"LendHub exploited for approximately $6 million via deprecated IBSV cToken arbitrage vulnerability. TVL collapsed from $6 million to $90,305.","source":""},{"date":"2023-01-13","event":"LendHub acknowledged the exploit via Twitter. SlowMist, CertiK, and Halborn published analyses.","source":""},{"date":"2023-01-12","event":"Over 1,100 ETH (~$1.79 million) transferred to Tornado Cash within hours of the exploit.","source":""},{"date":"2023-02-27","event":"PeckShield and Beosin alert that a further 2,415 ETH (~$3.85 million) was moved to Tornado Cash from the attacker wallet, bringing the total laundered amount to approximately $5.7 million.","source":""},{"date":"2024-11-10","event":"HECO chain announced official retirement; users urged to convert and redeem assets by January 10, 2025.","source":""},{"date":"2025-01-10","event":"HECO chain redemption deadline passed. LendHub TVL reached $0 on DefiLlama; protocol considered effectively defunct.","source":""}]},"v":1}Verify offline (run on your own machine)python -m src.verify_decision 47cb0f8f-217e-4cc1-8f3f-4e50c66792a8
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine —
python -m src.verify_decision <event_id>.