← Merlin DEXreviewed 2026-11-02 · 11 claims checked
Fact-check findings
What an automated fact-checker found when it re-read Merlin DEX against the sources the page cites. Only the most recent review is shown.
Read this first
These findings are produced by an automated reviewer, and its results vary between runs: the same page, checked three times on the same day, came back with 15%, 20% and 34% of its claims disputed, mostly because each run extracted a different number of claims. Treat what follows as leads, not rulings.
“Disputed” means the reviewer could not reconcile the claim with the evidence it cited. It does not mean the claim is false. “Unverifiable” means no reachable source settled it either way.
Nothing here changes the page on its own. A proposed correction is applied only after a human moderator approves it; until then the page reads as it did when reviewed.
disputed
1 claimThe reviewer could not reconcile the claim with the evidence it cited. This is a lead, not a ruling that the claim is false.
- #2[disputed][awaiting moderator]in section: Incident Overview: Insider Rug Pull
“One page dates the incident to April 26-27, 2023.”
reviewerPage text refers to 'one page' and 'merged pages', which is internal editorial residue rather than a sourced assertionReputable sources agree on April 26. The sentence cites no identifiable source and is a leftover from merging pages. Removal is the smallest accurate edit.
unverifiable
3 claimsNo source the reviewer could reach confirms or contradicts the claim.
- #6[unverifiable][awaiting moderator]in section: Compensation and Fund Recovery
“described as the first time the firm had elected to pay restitution after a client defrauded investors”
reviewerMerlin and CertiK would commit up to $2 million; first time CertiK paid restitutionThe cited CoinDesk article has the plan and the 20% bounty but not the 'first time' characterization. I did not check the other cited sources for it. - #9[unverifiable][awaiting moderator]in section: Incident Overview: Insider Rug Pull
“PeckShield analysis showed approximately $850,000 USDC bridged from zkSync to Ethereum mainnet, converted to ETH via PancakeSwap and routed through intermediate addresses, with $133,800 USDC sent to MEXC Global and $31,000 USDC to Binance.”
reviewerPeckShield flagged the outflow; $133,800 USDC to MEXC and $31,000 to Binance; two addresses withdrew about $850k and $844kThe $850k bridging is corroborated; the exchange-level amounts did not appear in the sources I fetched. The CoinDesk link to 0x2744... does not say whose address it is. - #11[unverifiable][awaiting moderator]in section: Investigative Context and Industry Implications
“On-chain investigator ZachXBT reportedly flagged Merlin DEX as part of broader monitoring of DeFi rug pulls and insider exploits, although no dedicated ZachXBT thread on Merlin has been publicly indexed”
reviewerZachXBT flagged Merlin DEX as part of broader monitoringThe only citation is a generic profile URL. The page itself admits no thread exists, so the attribution rests on nothing. Consider removing the claim and the citation.citedx.com/zachxbt
partially supported
4 claimsThe cited evidence supports part of the claim but not all of it.
- #3[partially supported][awaiting moderator]in section: CertiK Audit Failure and Controversy
“Reports differ on when the audit was completed: April 14, 2023 (about 12 days before the exploit) according to DL News, and April 24, 2023 according to an unsourced timeline entry on one of the merged pages.”
reviewerThe audit date is disputed between April 14 (DL News) and April 24 (an unsourced merged-page entry); this is merge residueApril 14 is supported. The April 24 alternative has no source I could find and refers to an unsourced merged page, so it should not be presented as a competing report. - #4[partially supported][awaiting moderator]in the timeline
“CertiK completes its security audit of Merlin DEX (April 14 according to DL News; April 24 according to an unsourced entry on a merged page), awarding a Skynet score of 90/100.”
reviewerTimeline repeats the unsourced April 24 audit dateScore and April 14 date supported; the unsourced alternative should be dropped. - #8[partially supported][awaiting moderator]in section: Alleged Perpetrators and Law Enforcement
“Merlin's remaining team publicly attributed the theft to its back-end development contractors, described as developers based in Serbia who had been hired to build the protocol's core infrastructure”
reviewerBack-end developers were based in Serbia and Merlin shared their GitHub profiles with Serbian law enforcement; named GitHub handles are flaggedThe Serbia claim is supported only as an unverified allegation by Merlin, a single secondary compilation. The page does hedge it. Naming specific GitHub accounts and past employers of private individuals rests on unverified allegations (the compilation itself says so); I could not independently check the handle-level detail. - #10[partially supported][awaiting moderator]in section: Compensation and Fund Recovery
“The protocol was effectively defunct after the incident, with no evidence of resumed operations or a successor product under the same brand.”
reviewerAudit finding that the protocol has been defunct since and no successor existsConsistent with DefiLlama's deprecated listing (via search snippet only).
confirmed
3 claimsThe cited evidence supports the claim as written.
- #1[confirmed][no action needed]in section: Incident Overview: Insider Rug Pull
“On April 26, 2023, approximately $1.82 million in user funds, primarily USDC and WETH, was drained from Merlin DEX's liquidity pools within hours of the public launch of the Liquidity Generation Event (LGE) for its MAGE governance token on zkSync Era.”
reviewerAbout $1.82 million was drained on April 26, 2023 during the MAGE LGE on zkSync EraDate and amount are corroborated. The USDC/WETH split is not detailed in CoinDesk, but is minor. - #5[confirmed][no action needed]in section: CertiK Audit Failure and Controversy
“CertiK's Skynet score for the project was downgraded from 90 to 38 after the incident.”
reviewerSkynet score of 90 downgraded to 38 after incident; Brooks cites about 150 human auditors; Ohtamaa criticism; Arbix $10M, Akropolis, SaddleRelated claims in the same paragraph are also supported by DL News. - #7[confirmed][no action needed]in section: Compensation and Fund Recovery
“On May 4, 2023, CertiK announced it had frozen $160,000 of the stolen assets with help from exchange partners, about 8.8% of the $1.82 million taken.”
reviewerCertiK froze $160,000 on May 4, 2023; 8.8% of the stolen total; team members refused identity verification; CertiK gave information to US and UK agencies160/1820 is 8.8%. The article says 'other team members', not specifically 'two of four', so that detail is not checked here.
How this fits together. The reviewer reads the published page and its cited sources and records one finding per claim. A human moderator decides whether each proposed correction is applied; those decisions, and the score changes they cause, appear in the audit log. Earlier review runs are not shown here; only the latest reflects the page as it stands.