← LML/USDT staking protocol1 decision on this page
Audit log
Every state-changing event for LML/USDT staking protocol: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.
- #1publishby system:backfill2026-05-29 15:54:26ZScore: ? → ? (no score change)anchoranchored
- chain
- ●mainnet-betaslot 422,969,541
- sig
449xyhqM7TzD…k1FuakBEexplorer ↗- hash
BVcBhbtzKVsz…zkLjrQQisha256 → base58
verifying row…full verify ↗canonical bytes (5493 B) ▸
{"actor":"system:backfill","investigation_id":"0ce55349-2674-40af-a2db-d43953880d85","kind":"publish","page_slug":"lmlusdt-staking-protocol","published_at":"2026-05-29T15:54:26.262Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"LML/USDT staking protocol","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.cryptotimes.io/2026/04/01/lml-staking-protocol-exploited-for-950k-on-bsc-token-crashes-99-6/","type":"other","url":""},{"credibility":3,"name":"https://en.cryptonomist.ch/2026/04/01/lml-protocol-bsc-staking/","type":"other","url":""},{"credibility":3,"name":"https://coinfomania.com/bsc-lml-protocol-hit-by-950k-price-manipulation-attack/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.cryptotimes.io/2026/04/01/lml-staking-protocol-exploited-for-950k-on-bsc-token-crashes-99-6/","type":"other","url":""},{"credibility":3,"name":"https://www.bitget.com/news/detail/12560605325066","type":"other","url":""},{"credibility":3,"name":"https://www.panewslab.com/en/articles/019d478c-6698-7558-9ba6-fcded9dc4486","type":"other","url":""},{"credibility":3,"name":"https://www.binance.com/en/square/post/307740210174225","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://en.cryptonomist.ch/2026/04/01/lml-protocol-bsc-staking/","type":"other","url":""},{"credibility":3,"name":"https://www.mexc.com/news/997020","type":"other","url":""},{"credibility":3,"name":"https://cryptonews.net/news/security/32637254/","type":"other","url":""},{"credibility":3,"name":"https://www.cryptotimes.io/2026/04/01/lml-staking-protocol-exploited-for-950k-on-bsc-token-crashes-99-6/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.cryptotimes.io/2026/04/01/lml-staking-protocol-exploited-for-950k-on-bsc-token-crashes-99-6/","type":"other","url":""},{"credibility":3,"name":"https://phemex.com/news/article/bscs-lmlusdt-staking-protocol-hit-by-price-manipulation-attack-70158","type":"other","url":""},{"credibility":3,"name":"https://www.kucoin.com/news/flash/bsc-chain-lml-usdt-staking-protocol-suffers-price-manipulation-attack-losses-reach-950-000","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.cryptotimes.io/2026/04/01/lml-staking-protocol-exploited-for-950k-on-bsc-token-crashes-99-6/","type":"other","url":""},{"credibility":3,"name":"https://coinfomania.com/bsc-lml-protocol-hit-by-950k-price-manipulation-attack/","type":"other","url":""},{"credibility":3,"name":"https://www.mexc.com/news/996835","type":"other","url":""},{"credibility":3,"name":"https://cryptonews.net/news/security/32636825/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://en.cryptonomist.ch/2026/04/01/lml-protocol-bsc-staking/","type":"other","url":""},{"credibility":3,"name":"https://www.panewslab.com/en/articles/019d478c-6698-7558-9ba6-fcded9dc4486","type":"other","url":""},{"credibility":3,"name":"https://coinfomania.com/bsc-lml-protocol-hit-by-950k-price-manipulation-attack/","type":"other","url":""},{"credibility":3,"name":"https://cryptonews.net/news/security/32637254/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.bitget.com/news/detail/12560605325066","type":"other","url":""},{"credibility":3,"name":"https://www.panewslab.com/en/articles/019d478c-6698-7558-9ba6-fcded9dc4486","type":"other","url":""},{"credibility":3,"name":"https://www.binance.com/en/square/post/307740210174225","type":"other","url":""},{"credibility":3,"name":"https://www.mexc.com/news/997020","type":"other","url":""}]}],"sources_used":[],"summary":"The LML/USDT staking protocol was a yield-bearing staking contract deployed on Binance Smart Chain (BSC) that suffered a catastrophic price manipulation exploit on April 1, 2026, resulting in approximately $950,000 in losses. An attacker aggregated flash loans totaling 309,529,000 USDT, artificially inflated the LML token price by purchasing nearly the entire circulating supply and burning it, then claimed outsized staking rewards against the manipulated price. Stolen funds — converted to 450.6 ETH — were subsequently laundered through Tornado Cash, and no public team response or recovery effort has been documented.","timeline":[{"date":"2026-04-01","event":"BlockSec Phalcon monitoring system detects suspicious activity targeting the LML/USDT staking protocol on BSC.","source":""},{"date":"2026-04-01","event":"Attacker executes price manipulation attack in a single transaction using 309,529,000 USDT in aggregated flash loans; LML token supply largely burned to address(0); reward payout function called 11 times at manipulated price.","source":""},{"date":"2026-04-01","event":"LML token crashes 99.66% on PancakeSwap, from approximately $50 to $0.1758 USDT.","source":""},{"date":"2026-04-01","event":"Attacker converts approximately $950,370 in stolen USDT to 450.6 ETH and begins routing funds through Tornado Cash in batches of 0.1 to 100 ETH.","source":""},{"date":"2026-04-01","event":"Security firms BlockSec and PeckShield publish public disclosures of the exploit; estimated loss confirmed at approximately $950,000.","source":""}]},"v":1}Verify offline (run on your own machine)python -m src.verify_decision f9036e50-cfa1-4455-9e59-9eec407685b9
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine —
python -m src.verify_decision <event_id>.