Audit log

Every state-changing event for LuBian: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

1. #1publishby system:backfill

   2026-05-25 17:34:25Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 422,113,830

   sig

   4YxE6B5vMmC9…9qo8KdXrcopyexplorer ↗

   hash

   AviMdoCbbw3w…rJu6pZwJcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (9054 B) ▸

   {"actor":"system:backfill","investigation_id":"21fb9497-fb27-4f88-a4d0-fb7f0bda296a","kind":"publish","page_slug":"lubian","published_at":"2026-05-25T17:34:25.475Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"LuBian","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://news.8btc.com/china-based-lubian-com-boasts-the-largest-compliant-bitcoin-mining-farm-in-iran","type":"other","url":""},{"credibility":3,"name":"https://rekt.news/the-one-that-got-away","type":"other","url":""},{"credibility":3,"name":"https://news.bitcoin.com/chinese-bitcoin-miners-develop-strong-relationships-and-crypto-mining-facilities-in-iran/","type":"other","url":""},{"credibility":3,"name":"https://compassmining.io/education/lubian-bitcoin-mining-private-pool-stopped","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.elliptic.co/blog/15-billion-us-seizure-reveals-prince-groups-connection-to-iran-china-bitcoin-mining-theft","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/policy/2025/10/14/u-s-targets-cambodian-pig-butchering-takes-usd14b-in-bitcoin-as-biggest-ever-seizure","type":"other","url":""},{"credibility":3,"name":"https://info.arkm.com/research/us-government-btc-seizure-lubian-chen-zhi-pig-butchering","type":"other","url":""},{"credibility":3,"name":"https://www.trmlabs.com/resources/blog/operation-prince-inside-the-global-effort-that-led-to-the-largest-forfeiture-in-us-history","type":"other","url":""},{"credibility":3,"name":"https://www.justice.gov/usao-edny/media/1416266/dl","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://milksad.info/posts/research-update-14/","type":"other","url":""},{"credibility":3,"name":"https://phemex.com/news/article/lubian-mining-pool-hack-in-2020-resulted-in-127000-bitcoin-theft-34164","type":"other","url":""},{"credibility":3,"name":"https://bitcoinnews.com/legal/127k-btc-stolen-lubian-bitcoin-mining-pool/","type":"other","url":""},{"credibility":3,"name":"https://rekt.news/the-one-that-got-away","type":"other","url":""},{"credibility":3,"name":"https://www.panewslab.com/en/articles/02a77211-26f7-4979-800a-2ccbc158dd8a","type":"other","url":""},{"credibility":3,"name":"https://info.arkm.com/research/us-government-btc-seizure-lubian-chen-zhi-pig-butchering","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.justice.gov/opa/pr/chairman-prince-group-indicted-operating-cambodian-forced-labor-scam-compounds-engaged","type":"other","url":""},{"credibility":3,"name":"https://www.cnbc.com/2025/10/14/bitcoin-doj-chen-zhi-pig-butchering-scam.html","type":"other","url":""},{"credibility":3,"name":"https://www.elliptic.co/blog/prince-group-targeted-with-crypto-sanctions-for-global-pig-butchering-operations","type":"other","url":""},{"credibility":3,"name":"https://www.trmlabs.com/resources/blog/operation-prince-inside-the-global-effort-that-led-to-the-largest-forfeiture-in-us-history","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/policy/2025/10/14/u-s-targets-cambodian-pig-butchering-takes-usd14b-in-bitcoin-as-biggest-ever-seizure","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://milksad.info/posts/research-update-14/","type":"other","url":""},{"credibility":3,"name":"https://www.panewslab.com/en/articles/4416d1a3-667f-4974-aa76-af0688f6297f","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/markets/2025/10/15/lubian-wallet-moves-over-usd1b-in-btc-after-3-years-of-inactivity","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.scworld.com/brief/us-dismisses-chinese-accusation-of-extensive-lubian-mining-pool-hack","type":"other","url":""},{"credibility":3,"name":"https://bitcoinmagazine.com/news/china-accuses-us-of-stealing-bitcoin","type":"other","url":""},{"credibility":3,"name":"https://www.elliptic.co/blog/15-billion-us-seizure-reveals-prince-groups-connection-to-iran-china-bitcoin-mining-theft","type":"other","url":""},{"credibility":3,"name":"https://www.insurancejournal.com/news/national/2025/11/13/847316.htm","type":"other","url":""},{"credibility":3,"name":"https://cryptobriefing.com/china-accuses-us-of-stealing-127k-bitcoin-lubian-mining-pool/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://finance.yahoo.com/news/lubian-wallet-breaks-3-silence-185909093.html","type":"other","url":""},{"credibility":3,"name":"https://www.financemagnates.com/trending/lubian-linked-wallet-moves-13b-after-dojs-largest-crypto-forfeiture/","type":"other","url":""},{"credibility":3,"name":"https://www.weex.com/news/detail/hacked-mining-pools-lubian-address-sees-large-outflow-again-with-a-total-of-about-183-billion-usd-worth-of-btc-withdrawn-200105","type":"other","url":""},{"credibility":3,"name":"https://news.bitcoin.com/us-government-may-have-quietly-seized-another-2-4b-in-bitcoin-linked-to-lubian-mining-pool/","type":"other","url":""},{"credibility":3,"name":"https://cryptonews.com/news/lubian-wallet-breaks-3-year-silence-with-1-3b-bitcoin-move-just-one-day-after-doj-crackdown-coincidence/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://news.8btc.com/china-based-lubian-com-boasts-the-largest-compliant-bitcoin-mining-farm-in-iran","type":"other","url":""},{"credibility":3,"name":"https://www.elliptic.co/blog/15-billion-us-seizure-reveals-prince-groups-connection-to-iran-china-bitcoin-mining-theft","type":"other","url":""},{"credibility":3,"name":"https://ofac.treasury.gov/sanctions-programs-and-country-information/iran-sanctions","type":"other","url":""}]}],"sources_used":[],"summary":"LuBian (lubian.com) was a China-based Bitcoin mining pool that briefly ranked among the world's six largest before ceasing operations in early 2021. The pool is alleged to have functioned as a money laundering vehicle for Chen Zhi's Prince Group, a transnational criminal organization that operated forced-labor pig-butchering scam compounds in Cambodia. In October 2025, the U.S. Department of Justice announced the largest forfeiture in its history — approximately 127,271 BTC (~$15 billion) — directly linked to LuBian and Chen Zhi's criminal enterprise.","timeline":[{"date":"2020-05-13","event":"LuBian ranked 6th largest Bitcoin mining pool globally, controlling approximately 6% of network hashrate, according to BTC.com data.","source":""},{"date":"2020-08-14","event":"Co-founder Liu Ping publicly confirms LuBian operates the largest compliant Bitcoin mining farm in Iran, with Chinese and Iranian investors and ties to Iranian government ministries.","source":""},{"date":"2020-12-28","event":"Approximately 127,272 BTC (~$3.5 billion at the time) drained from LuBian wallets in under two hours, exploiting a 32-bit entropy flaw in the pool's private key generation algorithm.","source":""},{"date":"2021-02-01","event":"LuBian ceases all public mining operations without explanation; last block mined approximately March 1, 2021.","source":""},{"date":"2023-08-01","event":"MilkySad vulnerability (CVE-2023-39910) disclosed; researchers identify LuBian's compromised wallet addresses as linked to the same cryptographic flaw.","source":""},{"date":"2024-04-01","event":"MilkySad publishes formal research update linking the December 2020 LuBian mass withdrawal to weakly generated private keys, identifying lubian.com as the former wallet holder.","source":""},{"date":"2024-06-01","event":"First large-scale wallet consolidation movements observed in addresses holding stolen LuBian funds, after years of dormancy; funds subsequently entered U.S. government custody.","source":""},{"date":"2025-08-02","event":"Arkham Intelligence publicly discloses the December 2020 LuBian theft, describing it as the largest cryptocurrency hack in history at $3.5 billion (now $14.8 billion).","source":""},{"date":"2025-10-14","event":"DOJ unseals indictment against Chen Zhi (Prince Group chairman) for wire fraud and money laundering; announces civil forfeiture of approximately 127,271 BTC (~$15 billion), the largest in U.S. government history, linked to LuBian.","source":""},{"date":"2025-10-15","event":"A LuBian-linked wallet dormant for over three years moves 9,757 BTC (~$1.1 billion) to new addresses, one day after DOJ announcement.","source":""},{"date":"2025-10-22","event":"Additional movement of approximately $1.83 billion in Bitcoin from LuBian-associated hacked addresses.","source":""},{"date":"2025-11-13","event":"China's National Computer Virus Emergency Response Center publishes report accusing the U.S. government of orchestrating the LuBian hack; U.S. denies all allegations.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision c69be6c1-5a6e-4393-9973-99d331f0541bcopy