Audit log

Every state-changing event for Malone Lam: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

1. #1publishby system:backfill

   2026-05-16 04:29:03Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 420,047,394

   sig

   4Q3YVb3a6YmS…MiiUM7Vpcopyexplorer ↗

   hash

   C4mGZqqGv2e9…Y8zMKztHcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (4546 B) ▸

   {"actor":"system:backfill","investigation_id":"b28b65b7-e922-4f73-9afb-5d75276ac7e5","kind":"publish","page_slug":"malone","published_at":"2026-05-16T04:29:03.927Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Malone Lam","sections":[{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]}],"sources_used":[],"summary":"Malone Lam Yu Xuan (born July 19, 2004), a Singaporean national residing in Miami and Los Angeles, is the alleged ringleader of a crypto theft and money laundering enterprise responsible for stealing over $263 million across multiple victims between 2023 and 2025. He was arrested by the FBI on September 18, 2024, and faces RICO conspiracy charges in what prosecutors describe as the first Bitcoin-related RICO prosecution in U.S. history. As of early 2026, he remains in pretrial detention while negotiating a plea deal.","timeline":[{"date":"2023-10-01","event":"Criminal enterprise allegedly begins operating, targeting cryptocurrency holders using hacked databases and social engineering.","source":"","source_url":"https://www.justice.gov/usao-dc/pr/additional-12-defendants-charged-rico-conspiracy-over-263-million-cryptocurrency-thefts"},{"date":"2024-06-23","event":"Mark Cuban's wallet markcuban.eth is allegedly targeted in a social engineering attack linked by ZachXBT to the same device indicators later found in the $243M theft.","source":"","source_url":"https://x.com/zachxbt/status/1923465312529416702"},{"date":"2024-07-01","event":"Second victim in New Mexico targeted in an armed home invasion burglary of a hardware cryptocurrency wallet.","source":"","source_url":"https://www.justice.gov/usao-dc/pr/additional-12-defendants-charged-rico-conspiracy-over-263-million-cryptocurrency-thefts"},{"date":"2024-08-18","event":"Malone Lam and co-conspirators steal 4,100+ Bitcoin (approx. $230–243M) from a Genesis creditor in Washington, D.C., via social engineering impersonating Google and Gemini support.","source":"","source_url":"https://www.coindesk.com/business/2024/09/19/police-arrests-two-people-related-to-243m-crypto-heist-targeting-genesis-creditor"},{"date":"2024-09-18","event":"Malone Lam arrested by FBI in Miami after discarding phone in Biscayne Bay; Jeandiel Serrano arrested in Los Angeles the same day.","source":"","source_url":"https://therecord.media/doj-charges-hackers-for-230-million-crypto-heist"},{"date":"2024-09-19","event":"Initial federal indictment unsealed against Lam and Serrano, charging conspiracy to steal and launder cryptocurrency.","source":"","source_url":"https://www.justice.gov/usao-dc/pr/indictment-charges-two-230-million-cryptocurrency-scam"},{"date":"2025-03-01","event":"Veer Chetal arrested; separately, Chetal's parents are targeted in a violent kidnapping attempt in Danbury, Connecticut, connected to the stolen funds.","source":"","source_url":"https://therecord.media/california-man-pleads-guilty-rico-charges-crypto-theft"},{"date":"2025-05-01","event":"Superseding indictment unsealed against 12 additional defendants (17 total) expanding the RICO conspiracy charges and adding new theft incidents. Total alleged stolen value revised to over $263 million.","source":"","source_url":"https://www.justice.gov/usao-dc/pr/additional-12-defendants-charged-rico-conspiracy-over-263-million-cryptocurrency-thefts"},{"date":"2025-12-01","event":"Danish Zulfiqar, identified by ZachXBT as a British co-conspirator, reportedly arrested in Dubai.","source":"","source_url":"https://www.theblock.co/post/381481/crypto-sleuth-zachxbt-claims-british-threat-actor-tied-to-243-million-genesis-creditor-theft-likely-arrested"},{"date":"2025-12-17","event":"Status hearing in D.C. federal court; Lam's attorney reports ongoing plea negotiations with the U.S. government.","source":"","source_url":"https://www.gate.com/news/detail/17190206"},{"date":"2026-04-27","event":"Co-defendant Evan Tangeman, 22, sentenced to 70 months in federal prison for money laundering tied to the $263M RICO enterprise.","source":"","source_url":"https://www.theblock.co/post/398899/22-year-old-sentenced-to-70-months-for-money-laundering-tied-to-263-million-crypto-syndicate"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 318e71a5-748a-4176-b346-ad8ddb645fe8copy
2. #2reviewby reviewerreviewer

   2026-06-03 03:16:19Z
   Score: 0 → 0 (no score change)
   The core factual claims about Malone Lam — identity, nationality, arrest date, RICO charges, the August 18 2024 Genesis creditor theft, and the December 2025 plea hearing — are well-supported by credible sources including DOJ press releases and major news outlets. The primary accuracy issues are date precision errors: the Veer Chetal timeline entry (2025-03-01) conflates his March 25, 2025 arrest with the parents' kidnapping that occurred August 25, 2024; the Evan Tangeman sentencing date (2026-04-27) reflects the article publication date rather than the actual sentencing date (April 24, 2026); and the Danish Zulfiqar arrest entry is dated December 1 when the ZachXBT report appeared December 5, 2025. No claims are outright disputed or unverifiable. The page's seven content sections are entirely blank, which is a significant structural gap.
   anchoranchored

   chain

   ●mainnet-betaslot 423,943,449

   sig

   3H7H1wHCpENV…YUkrSe8ncopyexplorer ↗

   hash

   Fdonvq5MXzwZ…goHvLQkXcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1191 B) ▸

   {"actor":"reviewer","decided_at":"2026-06-03T03:16:19.064Z","decision":"review","investigation_id":"b28b65b7-e922-4f73-9afb-5d75276ac7e5","new_score":0,"page_slug":"malone","prev_score":0,"reason":"The core factual claims about Malone Lam — identity, nationality, arrest date, RICO charges, the August 18 2024 Genesis creditor theft, and the December 2025 plea hearing — are well-supported by credible sources including DOJ press releases and major news outlets. The primary accuracy issues are date precision errors: the Veer Chetal timeline entry (2025-03-01) conflates his March 25, 2025 arrest with the parents' kidnapping that occurred August 25, 2024; the Evan Tangeman sentencing date (2026-04-27) reflects the article publication date rather than the actual sentencing date (April 24, 2026); and the Danish Zulfiqar arrest entry is dated December 1 when the ZachXBT report appeared December 5, 2025. No claims are outright disputed or unverifiable. The page's seven content sections are entirely blank, which is a significant structural gap.","score_delta":0,"sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 642625bc-5637-4b22-98c8-773c21f4d108copy
3. #3review reviseby judgejudge

   2026-06-03 03:16:19Z
   Score: 0 → 0 (-5)
   No claims are outright disputed (disputed_pct = 0.0%), and all 12 confirmed claims are backed by Tier 1 or Tier 2 sources including DOJ press releases, The Record, CoinDesk, and NBC News. The four partially_supported findings (claim_findings[9], [13], [15], [17]) are date-precision errors of days to weeks — not core allegation failures — and do not justify denial. However, two high-priority coverage gaps prevent approval: the page body consists of seven completely blank sections with no headings or content, and on-chain forensic evidence (wallet addresses, laundering techniques documented by DOJ and ZachXBT) is entirely absent. A page with no body sections cannot be considered complete regardless of timeline accuracy. The score modifier is held to the minimum band given the strong factual foundation and high reviewer confidence (0.87).
   anchoranchored

   chain

   ●mainnet-betaslot 423,943,452

   sig

   4vrfCD1bHLbk…FvTRyncEcopyexplorer ↗

   hash

   9EXEgZHjVzKA…HkxTTvxqcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1192 B) ▸

   {"actor":"judge","decided_at":"2026-06-03T03:16:19.064Z","decision":"review_revise","investigation_id":"b28b65b7-e922-4f73-9afb-5d75276ac7e5","new_score":0,"page_slug":"malone","prev_score":0,"reason":"No claims are outright disputed (disputed_pct = 0.0%), and all 12 confirmed claims are backed by Tier 1 or Tier 2 sources including DOJ press releases, The Record, CoinDesk, and NBC News. The four partially_supported findings (claim_findings[9], [13], [15], [17]) are date-precision errors of days to weeks — not core allegation failures — and do not justify denial. However, two high-priority coverage gaps prevent approval: the page body consists of seven completely blank sections with no headings or content, and on-chain forensic evidence (wallet addresses, laundering techniques documented by DOJ and ZachXBT) is entirely absent. A page with no body sections cannot be considered complete regardless of timeline accuracy. The score modifier is held to the minimum band given the strong factual foundation and high reviewer confidence (0.87).","score_delta":-5,"sequence_num":3,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision a4bdbe60-8524-4c4c-b456-946a84c3bcb7copy