← Metawin2 decisions on this page
Audit log
Every state-changing event for Metawin: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.
- #1publishby system:backfill2026-05-19 00:20:37ZScore: ? → ? (no score change)anchoranchored
- chain
- ●mainnet-betaslot 420,660,342
- sig
4sL3xW1cYYZ3…9PipEsSzexplorer ↗- hash
7h6qPR5s2Mmr…wZcwAkCesha256 → base58
verifying row…full verify ↗canonical bytes (3103 B) ▸
{"actor":"system:backfill","investigation_id":"37e6a6aa-31c7-4f17-9e4b-d5f0f85fdc2c","kind":"publish","page_slug":"metawin","published_at":"2026-05-19T00:20:37.799Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Metawin","sections":[{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[]}],"sources_used":[],"summary":"Metawin is an offshore crypto casino and gaming platform licensed under the Anjouan (Comoros) gaming authority, operated by Asobi N.V. from Curacao, and founded by Richard 'Skel' Skelhorn. On November 3, 2024, the platform suffered a significant hot wallet exploit across Ethereum and Solana blockchains resulting in approximately $4 million in stolen funds, with blockchain investigator ZachXBT tracing the stolen assets to KuCoin and a nested HitBTC service across more than 115 attacker-linked addresses. The CEO subsequently claimed to have personally covered the losses, restoring withdrawals for approximately 95% of affected users, though the platform's offshore jurisdictional status and the underlying security vulnerability raise ongoing concerns.","timeline":[{"date":"2023-01-01","event":"MetaWin Limited registered in the UK (company number 15072116) with Raman Dandyan listed as beneficial owner (75%+). Exact incorporation date approximated from available records.","source":"","source_url":"https://fintelegram.com/metawin-metawin-bcgame-crypto-casino-regulation/"},{"date":"2024-11-03","event":"Metawin hot wallets on Ethereum and Solana blockchains exploited via the platform's frictionless withdrawal system. Approximately $4 million in cryptocurrency stolen. CEO Richard Skelhorn confirms the breach and suspends withdrawals.","source":"","source_url":"https://www.theblock.co/post/324251/crypto-casino-metawin-loses-4-million-to-exploit-of-ethereum-solana-hot-wallets"},{"date":"2024-11-03","event":"ZachXBT begins on-chain tracing in collaboration with Metawin CEO. Over 115 attacker-linked wallet addresses identified across Ethereum and Solana. Stolen funds traced to KuCoin and a nested HitBTC service.","source":"","source_url":"https://www.chainabuse.com/report/094193aa-aba7-4af8-b7e6-84f0a6b608db"},{"date":"2024-11-04","event":"CEO Richard Skelhorn states via Discord that he will personally cover the $4 million loss from his own funds. Platform reports 95% of users have had withdrawal capabilities restored. Law enforcement engagement announced.","source":"","source_url":"https://www.gamblingnews.com/news/metawin-hit-by-4m-cyber-heist-most-funds-recovered/"},{"date":"2024-11-04","event":"Multiple crypto news outlets (The Block, CoinDesk, Cryptopolitan, Brave New Coin) report on the exploit. ZachXBT's Chainabuse report on attacker Solana addresses published.","source":"","source_url":"https://bravenewcoin.com/insights/crypto-casino-platform-metawin-hacked"}]},"v":1}Verify offline (run on your own machine)python -m src.verify_decision a9ced25c-10f9-4613-888a-d8f8b2012fae - #2rescoreby systemsystem2026-10-10 18:48:37ZScore: 23 → 56 (+33)Rescored under Scoring v2, the published formula (avoid.net/scoring): 23 → 56. Problems weighed by who is responsible: incidents the subject suffered −6.4, concerns that are not fraud −3.2, problems around the subject, caused by others −1.6; legitimacy credit long-running +2.anchoranchored
- chain
- ●mainnet-betaslot 455,368,447
- sig
24K22NTwpBbc…9NYZjPfhexplorer ↗- hash
4BdGBfz2tao9…BuDUNgnqsha256 → base58
verifying row…full verify ↗canonical bytes (638 B) ▸
{"actor":"system","decided_at":"2026-10-10T18:48:37.267Z","decision":"rescore","investigation_id":"37e6a6aa-31c7-4f17-9e4b-d5f0f85fdc2c","new_score":56,"page_slug":"metawin","prev_score":23,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 23 → 56. Problems weighed by who is responsible: incidents the subject suffered −6.4, concerns that are not fraud −3.2, problems around the subject, caused by others −1.6; legitimacy credit long-running +2.","score_delta":33,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}Verify offline (run on your own machine)python -m src.verify_decision f97fb950-a3ad-4c8c-bbb3-e30499486d16
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine —
python -m src.verify_decision <event_id>.