Audit log

Every state-changing event for Meter.io — Passport Bridge Block Validation Exploit (September 2026): moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-09-25 17:12:21Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 450,416,372

   sig

   wrKaCh8t3Egt…PWFy6C22copyexplorer ↗

   hash

   94r5eWUgArs1…wiwb7z7Vcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (16249 B) ▸

   {"actor":"system:backfill","investigation_id":"c3a7fc22-c67a-4dc2-a6f6-d0ce0a0dc365","kind":"publish","page_slug":"meter-io-passport-bridge-block-validation-exploit-september-2026","published_at":"2026-09-25T17:12:21.111Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Meter.io — Passport Bridge Block Validation Exploit (September 2026)","sections":[{"content":"The exploit was detected by security firm Blockaid on September 24, 2026 (UTC+8). According to Meter's own public communications reported by CoinGabbar and CryptoNews.net, the attack began on September 23, 2026 at 21:14 UTC. Meter subsequently clarified that the incident was not limited to the Passport bridge on BNB Chain but involved an abuse of a block validation vulnerability on the Meter mainnet itself. The attacker used that flaw to mint approximately $2.3 million in unbacked wMTRG tokens across roughly two transactions, and sold part of the proceeds on PancakeSwap. Two attacker addresses were publicly disclosed by the Meter team: 0xee2eeeed4ed8580669ed924abeb49f27f7d0bd65 and 0x44cf94496091150865e192a86c07b90a9760b43d. A third address — 0xEe2EEEED4Ed8580669ED924abEb49f27f7D0Bd65 — was flagged by Blockaid and attributed to the exploiter. The exploit was reported as still active when Blockaid issued its initial alert.","heading":"Incident Overview","severity":"critical","sources":[{"credibility":2,"name":"Meter Passport Exploit Reportedly Mints $2.3 Million in Unbacked MTRG — Crypto Times","type":"news_article","url":"https://www.cryptotimes.io/2026/09/24/meter-passport-exploit-reportedly-mints-2-3-million-in-unbacked-mtrg/"},{"credibility":2,"name":"Crypto Hack News Today: Meter Lost $2.3M in Exploit — CoinGabbar","type":"news_article","url":"https://www.coingabbar.com/en/crypto-hack-news-today-meter-exploit-mtrg-crash-bitget-hack"},{"credibility":2,"name":"Another Hack Has Occurred in the Cryptocurrency Market — CryptoNews.net","type":"news_article","url":"https://cryptonews.net/news/security/33492414/"},{"credibility":2,"name":"Meter Exploit: $2.3M Unbacked MTRG Minted on BNB Chain — Phemex News","type":"news_article","url":"https://phemex.com/news/article/meter-protocol-under-active-exploit-on-bnb-chain-as-attacker-mints-23m-in-unbacked-tokens-97771"},{"credibility":2,"name":"Blockaid: Meter Exploited, $2.3M in Unsecured Wrapped MTRG Minted — KuCoin News","type":"news_article","url":"https://www.kucoin.com/news/flash/blockaid-meter-exploited-2-3m-in-unsecured-wrapped-mtrg-minted"},{"credibility":1,"name":"Meter Passport Bridge Exploiter Address — Etherscan","type":"on_chain","url":"https://etherscan.io/address/0x8d3d13cac607B7297Ff61A5E1E71072758AF4D01"}]},{"content":"Meter's team stated that the root cause was a block validation vulnerability on the Meter mainnet — not solely a bridge-level flaw. The attacker exploited this vulnerability to mint unbacked MTR and MTRG tokens on the Meter mainnet, then leveraged the Passport bridge's cross-chain channel to create corresponding unbacked wMTRG on BNB Chain. The affected bridge contract address reported by Blockaid was 0xbd2949f67dcdc549c6ebe98696449fa79d988a9f. The attacker liquidated a portion of the illicitly minted tokens on PancakeSwap. A post-mortem with full technical details had not been published as of the initial reporting window. The Meter team indicated that a recovery plan was being worked out and that transactions after block number 100731417 on the Meter mainnet may not be considered valid during that process.","heading":"Technical Mechanism","severity":"critical","sources":[{"credibility":2,"name":"Crypto Hack News Today: Meter Lost $2.3M in Exploit — CoinGabbar","type":"news_article","url":"https://www.coingabbar.com/en/crypto-hack-news-today-meter-exploit-mtrg-crash-bitget-hack"},{"credibility":2,"name":"Another Hack Has Occurred in the Cryptocurrency Market — CryptoNews.net","type":"news_article","url":"https://cryptonews.net/news/security/33492414/"},{"credibility":2,"name":"Meter Passport Exploit Reportedly Mints $2.3 Million in Unbacked MTRG — Crypto Times","type":"news_article","url":"https://www.cryptotimes.io/2026/09/24/meter-passport-exploit-reportedly-mints-2-3-million-in-unbacked-mtrg/"}]},{"content":"The minting and sale of unbacked wMTRG caused significant price dislocations. According to CoinGabbar, the MTRG token fell approximately 71.7% in a single day, dropping from $0.00991494 to $0.002682, with token market capitalization reported at approximately $391,067 at the lows. Phemex News reported MTR declining approximately 9.67% and MTRG approximately 13.79% at the time of their article, suggesting the severity of price impact varied depending on the measurement window. Meter's team publicly advised users against buying MTR or MTRG on any centralized exchange or decentralized exchange during and after the incident. The team also stated it was working with centralized exchanges to pause deposits and withdrawals of affected tokens.","heading":"Market and Price Impact","severity":"high","sources":[{"credibility":2,"name":"Crypto Hack News Today: Meter Lost $2.3M in Exploit — CoinGabbar","type":"news_article","url":"https://www.coingabbar.com/en/crypto-hack-news-today-meter-exploit-mtrg-crash-bitget-hack"},{"credibility":2,"name":"Meter Exploit: $2.3M Unbacked MTRG Minted on BNB Chain — Phemex News","type":"news_article","url":"https://phemex.com/news/article/meter-protocol-under-active-exploit-on-bnb-chain-as-attacker-mints-23m-in-unbacked-tokens-97771"}]},{"content":"Meter paused both its mainnet and the Passport bridge following the exploit. The team publicly disclosed the two attacker wallet addresses and stated it was working with exchanges, security companies, and law enforcement to track the attacker's funds. According to CryptoNews.net, Meter offered the attacker a 10% reward for returning stolen funds within 72 hours, framing it as a white-hat recovery operation — a common post-exploit negotiation tactic. The team confirmed that chain state was preserved, and indicated that transactions made after block number 100731417 may not be honored in the recovery process. As of reporting, no specific recovery timeline or reimbursement plan for affected users had been published. The Crypto Times noted it had not received an official comment from Meter at the time of publication. Users were also cautioned against fake recovery websites.","heading":"Meter Team Response and Recovery","severity":"high","sources":[{"credibility":2,"name":"Another Hack Has Occurred in the Cryptocurrency Market — CryptoNews.net","type":"news_article","url":"https://cryptonews.net/news/security/33492414/"},{"credibility":2,"name":"Crypto Hack News Today: Meter Lost $2.3M in Exploit — CoinGabbar","type":"news_article","url":"https://www.coingabbar.com/en/crypto-hack-news-today-meter-exploit-mtrg-crash-bitget-hack"},{"credibility":2,"name":"Meter Passport Exploit Reportedly Mints $2.3 Million in Unbacked MTRG — Crypto Times","type":"news_article","url":"https://www.cryptotimes.io/2026/09/24/meter-passport-exploit-reportedly-mints-2-3-million-in-unbacked-mtrg/"}]},{"content":"The September 2026 incident is the second major exploit of Meter Passport infrastructure. In February 2022, Meter's Passport bridge suffered a $4.4 million exploit caused by a \"wrong trust assumption\" in the bridge's smart contract code. That vulnerability allowed an attacker to call the underlying ERC-20 deposit function directly to fake a BNB or ETH transfer, minting large amounts of BNB and wETH without corresponding deposits. The attacker sold the stolen BNB on SushiSwap, causing a 77% crash in the price of BNB on Moonriver. The cascade also left Hundred Finance with approximately $3.3 million in under-collateralized loans. Meter committed to reimbursing affected parties from the 2022 incident and set aside $4.4 million in MTRG tokens to cover initial losses. The recurrence of a minting-based exploit rooted in validation failures — four years after the first incident — raises questions about the thoroughness of Meter's ongoing security posture and audit coverage. No formal public audit report specifically addressing the vulnerability class exploited in September 2026 had been identified at the time of this investigation.","heading":"Pattern of Repeat Vulnerability: February 2022 Precedent","severity":"critical","sources":[{"credibility":1,"name":"Latest DeFi bridge exploit results in $4.4M losses for Meter — CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/latest-defi-bridge-exploit-results-in-4-4m-losses-for-meter"},{"credibility":2,"name":"Explained: The Meter.io Hack (February 2022) — Halborn","type":"research","url":"https://www.halborn.com/blog/post/explained-the-meter-io-hack-february-2022"},{"credibility":2,"name":"DeFi Hack Analysis: $4M+ Lost Via Meter Passport Bridge Exploit — Crowdfund Insider","type":"news_article","url":"https://www.crowdfundinsider.com/2022/02/186752-defi-hack-analysis-4m-lost-via-meters-passport-bridge-exploit-days-after-wormhole-portal-breach/"},{"credibility":2,"name":"Feb 2022 — Meter.io Minting Exploit $4.4M — Quadriga Initiative Case Study","type":"research","url":"https://www.quadrigainitiative.com/casestudy/meteriomintingexploit.php"}]},{"content":"During and immediately after the incident, Meter explicitly warned users not to buy MTR or MTRG tokens on any platform — centralized or decentralized — due to the risk of purchasing unbacked or artificially inflated supply. The team stated that transactions after block 100731417 on the Meter mainnet may not be honored, creating uncertainty for users who transacted during the window between the exploit start and the mainnet pause. No compensation plan for token holders who purchased at inflated prices — or who suffered losses due to the price crash — had been announced as of initial reporting. Meter indicated it was coordinating with exchanges to halt deposits and withdrawals. Users were also cautioned against scam recovery websites, a common secondary risk in the immediate aftermath of DeFi exploits.","heading":"User and Counterparty Risk","severity":"high","sources":[{"credibility":2,"name":"Crypto Hack News Today: Meter Lost $2.3M in Exploit — CoinGabbar","type":"news_article","url":"https://www.coingabbar.com/en/crypto-hack-news-today-meter-exploit-mtrg-crash-bitget-hack"},{"credibility":2,"name":"Another Hack Has Occurred in the Cryptocurrency Market — CryptoNews.net","type":"news_article","url":"https://cryptonews.net/news/security/33492414/"}]}],"sources_used":[{"credibility":2,"name":"Meter Passport Exploit Reportedly Mints $2.3 Million in Unbacked MTRG — Crypto Times","type":"news_article","url":"https://www.cryptotimes.io/2026/09/24/meter-passport-exploit-reportedly-mints-2-3-million-in-unbacked-mtrg/"},{"credibility":2,"name":"Meter Exploit: $2.3M Unbacked MTRG Minted on BNB Chain — Phemex News","type":"news_article","url":"https://phemex.com/news/article/meter-protocol-under-active-exploit-on-bnb-chain-as-attacker-mints-23m-in-unbacked-tokens-97771"},{"credibility":2,"name":"Crypto Hack News Today: Meter Lost $2.3M in Exploit — CoinGabbar","type":"news_article","url":"https://www.coingabbar.com/en/crypto-hack-news-today-meter-exploit-mtrg-crash-bitget-hack"},{"credibility":2,"name":"Another Hack Has Occurred in the Cryptocurrency Market — CryptoNews.net","type":"news_article","url":"https://cryptonews.net/news/security/33492414/"},{"credibility":2,"name":"Blockaid: Meter Exploited, $2.3M in Unsecured Wrapped MTRG Minted — KuCoin News","type":"news_article","url":"https://www.kucoin.com/news/flash/blockaid-meter-exploited-2-3m-in-unsecured-wrapped-mtrg-minted"},{"credibility":2,"name":"Security Alert: Meter Passport on BNB Chain Under Attack — KuCoin News","type":"news_article","url":"https://www.kucoin.com/news/flash/security-alert-meter-passport-on-bnb-chain-under-attack-2-3m-wmtrg-minted"},{"credibility":1,"name":"Meter Passport Bridge Exploiter Address — Etherscan","type":"on_chain","url":"https://etherscan.io/address/0x8d3d13cac607B7297Ff61A5E1E71072758AF4D01"},{"credibility":1,"name":"Latest DeFi bridge exploit results in $4.4M losses for Meter — CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/latest-defi-bridge-exploit-results-in-4-4m-losses-for-meter"},{"credibility":2,"name":"Explained: The Meter.io Hack (February 2022) — Halborn","type":"research","url":"https://www.halborn.com/blog/post/explained-the-meter-io-hack-february-2022"},{"credibility":2,"name":"DeFi Hack Analysis: $4M+ Lost Via Meter Passport Bridge Exploit — Crowdfund Insider","type":"news_article","url":"https://www.crowdfundinsider.com/2022/02/186752-defi-hack-analysis-4m-lost-via-meters-passport-bridge-exploit-days-after-wormhole-portal-breach/"},{"credibility":2,"name":"Feb 2022 — Meter.io Minting Exploit $4.4M — Quadriga Initiative Case Study","type":"research","url":"https://www.quadrigainitiative.com/casestudy/meteriomintingexploit.php"},{"credibility":2,"name":"Meter Bridge Exploit: A Wake-Up Call for DeFi Security — Vidma","type":"research","url":"https://www.vidma.io/blog/meter-bridge-exploit-a-wake-up-call-for-defi-security"}],"summary":"On September 23, 2026, an attacker exploited a block validation vulnerability on the Meter mainnet to mint approximately $2.3 million in unbacked wrapped MTRG (wMTRG) tokens via the Meter Passport bridge on BNB Chain, then sold a portion on PancakeSwap. Meter paused its mainnet and Passport bridge in response, warned users against all MTR/MTRG transactions, and disclosed that transactions after block 100731417 may not be honored during recovery. This is the second major exploit of the Meter Passport bridge infrastructure; the first, in February 2022, resulted in approximately $4.4 million in losses.","timeline":[{"date":"2022-02-05","event":"First major Meter Passport exploit: attacker exploits a 'wrong trust assumption' in bridge smart contract code, minting approximately $4.4 million in BNB and wETH. Hundred Finance suffers an additional ~$3.3 million in cascading losses. Meter commits to reimbursing affected parties.","source":"CoinTelegraph","source_url":"https://cointelegraph.com/news/latest-defi-bridge-exploit-results-in-4-4m-losses-for-meter"},{"date":"2026-09-23","event":"Second Meter Passport exploit begins at 21:14 UTC (some sources report 18:14 UTC). Attacker exploits a block validation vulnerability on the Meter mainnet to mint approximately $2.3 million in unbacked wMTRG across roughly two transactions on the BNB Chain bridge.","source":"CoinGabbar / CryptoNews.net","source_url":"https://www.coingabbar.com/en/crypto-hack-news-today-meter-exploit-mtrg-crash-bitget-hack"},{"date":"2026-09-23","event":"Attacker sells portion of illicitly minted wMTRG on PancakeSwap. MTRG price begins to collapse, ultimately falling approximately 71.7% from $0.00991494 to $0.002682.","source":"CoinGabbar","source_url":"https://www.coingabbar.com/en/crypto-hack-news-today-meter-exploit-mtrg-crash-bitget-hack"},{"date":"2026-09-24","event":"Security firm Blockaid issues public alert identifying the ongoing attack on Meter Passport's BNB Chain deployment. KuCoin relays multiple Blockaid flash alerts. Meter pauses mainnet and Passport bridge.","source":"KuCoin News (Blockaid alerts)","source_url":"https://www.kucoin.com/news/flash/blockaid-meter-exploited-2-3m-in-unsecured-wrapped-mtrg-minted"},{"date":"2026-09-24","event":"Meter publicly discloses two attacker wallet addresses, warns users against all MTR/MTRG transactions, and states that transactions after block 100731417 may not be honored. Team announces it is working with exchanges, security firms, and law enforcement. A 10% white-hat bounty is reportedly offered to the attacker.","source":"CryptoNews.net / CoinGabbar","source_url":"https://cryptonews.net/news/security/33492414/"},{"date":"2026-09-24","event":"Crypto Times, Phemex News, and CoinGabbar publish incident reports. No recovery timeline or user compensation plan announced. Post-mortem not yet published.","source":"Crypto Times","source_url":"https://www.cryptotimes.io/2026/09/24/meter-passport-exploit-reportedly-mints-2-3-million-in-unbacked-mtrg/"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision a2a21a35-2258-4adc-bf18-b37066139cb1copy
2. #2reviewby reviewerreviewer

   2026-10-27 18:28:27Z
   Score: 18 → 18 (no score change)
   Most core facts are supported by secondary outlets: the $2.3M unbacked wMTRG, the roughly two mints, the PancakeSwap sales, block 100731417, the 10% bounty, the MTRG price figures and the 2022 precedent. Two defects need fixing. The 'third address' is the first address in different letter case, so it is a duplicate. The Etherscan source in the incident overview is the 2022 exploiter wallet. The bridge contract address and the Phemex percentage declines could not be verified. The start time (21:14 vs 18:14) is conflicted. The page is a snapshot of the first two days and has no follow-up.
   anchoranchored

   chain

   ●mainnet-betaslot 462,172,165

   sig

   23zRWJ8WQPmJ…9LKN8GC2copyexplorer ↗

   hash

   7eRDB284FFmz…f8U6hzNscopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1534 B) ▸

   {"actor":"reviewer","artifact_identity":"5176d31f4e74f0332b6697b9b4dfc880","blocked_count":1,"decided_at":"2026-10-27T18:28:26.925Z","decision":"review","disputed_pct":0.2667,"findings_hash":"DdM66oet3hEQQJnPCK8Ttpxs3VJuZYSoCrxsQkz7u5cS","investigation_id":"c3a7fc22-c67a-4dc2-a6f6-d0ce0a0dc365","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":18,"omissions":{"material":0,"total":1},"page_content_hash":"5678909f54ffc1022441b23b7c088d5747e1e02b591e779825e7fca42f7d9353","page_slug":"meter-io-passport-bridge-block-validation-exploit-september-2026","prev_score":18,"reason":"Most core facts are supported by secondary outlets: the $2.3M unbacked wMTRG, the roughly two mints, the PancakeSwap sales, block 100731417, the 10% bounty, the MTRG price figures and the 2022 precedent. Two defects need fixing. The 'third address' is the first address in different letter case, so it is a duplicate. The Etherscan source in the incident overview is the 2022 exploiter wallet. The bridge contract address and the Phemex percentage declines could not be verified. The start time (21:14 vs 18:14) is conflicted. The page is a snapshot of the first two days and has no follow-up.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":15,"sequence_num":2,"subject_status":"exploited","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 9e74d364-7e88-464d-b34c-5d292efd2c23copy
3. #3review reviseby judgejudge

   2026-10-27 18:28:27Z
   Score: 18 → 6 (-12)
   Of 15 scored claims (one unreadable source excluded), 4 were disputed or could not be verified, about 27%, which falls in the minor-issues band. The core incident facts (the $2.3M unbacked wMTRG, the block 100731417 notice, the 10% bounty, the MTRG price drop, the 2022 precedent) are supported by secondary outlets. However, claim_findings[0] shows the 'third' attacker address is the first address in different letter case, and claim_findings[1] shows the Etherscan exploiter link belongs to the 2022 incident, not 2026. The bridge contract address and Phemex percentages could not be verified (claim_findings[7], [10]), and the start time conflicts between sources (claim_findings[2]). Two high-priority coverage gaps remain: no first-party Meter source and no on-chain transaction evidence. The omission of follow-up since 24 Sept is minor, and the subject status does not contradict the page.
   anchoranchored

   chain

   ●mainnet-betaslot 462,172,170

   sig

   2kA2Lx469uLz…PgKSrC2Acopyexplorer ↗

   hash

   7ktMsFJYsZY1…aFpzXYR4copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1633 B) ▸

   {"actor":"judge","artifact_identity":"5176d31f4e74f0332b6697b9b4dfc880","band_override":null,"blocked_count":1,"decided_at":"2026-10-27T18:28:26.925Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.2667,"investigation_id":"c3a7fc22-c67a-4dc2-a6f6-d0ce0a0dc365","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":6,"page_slug":"meter-io-passport-bridge-block-validation-exploit-september-2026","prev_score":18,"reason":"Of 15 scored claims (one unreadable source excluded), 4 were disputed or could not be verified, about 27%, which falls in the minor-issues band. The core incident facts (the $2.3M unbacked wMTRG, the block 100731417 notice, the 10% bounty, the MTRG price drop, the 2022 precedent) are supported by secondary outlets. However, claim_findings[0] shows the 'third' attacker address is the first address in different letter case, and claim_findings[1] shows the Etherscan exploiter link belongs to the 2022 incident, not 2026. The bridge contract address and Phemex percentages could not be verified (claim_findings[7], [10]), and the start time conflicts between sources (claim_findings[2]). Two high-priority coverage gaps remain: no first-party Meter source and no on-chain transaction evidence. The omission of follow-up since 24 Sept is minor, and the subject status does not contradict the page.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":-12,"scored_claims":15,"sequence_num":3,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision ef43b055-800f-407c-93df-a5f7ae5a5d97copy