Audit log

Every state-changing event for Mixin Network: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-20 18:22:04Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 421,038,840

   sig

   5KaK61UotHGE…brBks8grcopyexplorer ↗

   hash

   HSkTP6mqhaGF…WnjUPRWJcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (6356 B) ▸

   {"actor":"system:backfill","investigation_id":"e12ac5bb-f642-49d6-8467-1c72ad1d83bb","kind":"publish","page_slug":"mixin-network","published_at":"2026-05-20T18:22:04.502Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Mixin Network","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://cryptopotato.com/mixin-a-multi-layer-decentralized-network-that-offers-cross-chain-solutions-lightning-fast-transactions/"},{"credibility":3,"name":"","type":"other","url":"https://www.aicoin.com/en/article/367445"},{"credibility":3,"name":"","type":"other","url":"https://tokeninsight.com/en/news/mixin-founder-feng-xiaodong-will-compensate-up-to-50-of-losses"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://www.elliptic.co/blog/mixin-network-hacked-for-200-million"},{"credibility":3,"name":"","type":"other","url":"https://www.coindesk.com/tech/2023/09/25/mixin-network-losses-nearly-200m-in-hack"},{"credibility":3,"name":"","type":"other","url":"https://www.bleepingcomputer.com/news/security/mixin-network-suspends-operations-following-200-million-hack/"},{"credibility":3,"name":"","type":"other","url":"https://techcrunch.com/2023/09/25/hackers-steal-200-million-from-crypto-company-mixin/"},{"credibility":3,"name":"","type":"other","url":"https://www.halborn.com/blog/post/explained-the-mixin-network-hack-september-2023"},{"credibility":3,"name":"","type":"other","url":"https://www.securityweek.com/200-million-in-cryptocurrency-stolen-in-mixin-network-hack/"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://www.merklescience.com/blog/hack-track-mixin-flow-of-funds-analysis"},{"credibility":3,"name":"","type":"other","url":"https://www.elliptic.co/blog/mixin-network-hacked-for-200-million"},{"credibility":3,"name":"","type":"other","url":"https://decrypt.co/358032/3-million-ethereum-mixin-network-hack-tornado-cash"},{"credibility":3,"name":"","type":"other","url":"https://financefeeds.com/mixin-network-hacker-moves-2005-eth-to-tornado-cash-after-2-years-of-silence/"},{"credibility":3,"name":"","type":"other","url":"https://finance.yahoo.com/news/3-85-million-ethereum-mixin-175053959.html"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://www.theblock.co/post/252716/mixin-network-founder-says-just-half-users-assets-are-safe-after-200-million-hack"},{"credibility":3,"name":"","type":"other","url":"https://bitcoinist.com/mixin-network-offers-hacker-20-million-bug-bounty/"},{"credibility":3,"name":"","type":"other","url":"https://www.bitget.com/news/detail/12560603893640"},{"credibility":3,"name":"","type":"other","url":"https://support.mixin.one/en/article/what-is-mdt-token-77n05i/"},{"credibility":3,"name":"","type":"other","url":"https://www.dlnews.com/articles/defi/questions-swirl-around-hack-at-hong-kong-network-mixin/"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://mixin.one/features/compliance"},{"credibility":3,"name":"","type":"other","url":"https://www.bankinfosecurity.com/cryptohack-roundup-200m-mixin-network-hack-a-23185"},{"credibility":3,"name":"","type":"other","url":"https://www.coindesk.com/policy/2025/12/25/hong-kong-regulators-target-2026-legislation-for-virtual-asset-dealer-and-custodian-rules"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://www.halborn.com/blog/post/explained-the-mixin-network-hack-september-2023"},{"credibility":3,"name":"","type":"other","url":"https://www.elliptic.co/blog/mixin-network-hacked-for-200-million"},{"credibility":3,"name":"","type":"other","url":"https://financefeeds.com/mixin-network-hacker-moves-2005-eth-to-tornado-cash-after-2-years-of-silence/"},{"credibility":3,"name":"","type":"other","url":"https://www.dlnews.com/articles/defi/questions-swirl-around-hack-at-hong-kong-network-mixin/"}]}],"sources_used":[],"summary":"Mixin Network is a Hong Kong-based layer-2 cross-chain payment protocol that suffered the largest single crypto hack of 2023 when attackers compromised its cloud service provider's database and drained approximately $200 million in ETH, BTC, and USDT. The network remains operational but has only partially compensated users, the majority of stolen funds remain unrecovered, and a dormant attacker wallet moved funds to Tornado Cash in February 2026.","timeline":[{"date":"2017-11-01","event":"Feng Xiaodong establishes the Mixin blockchain team in Hong Kong with fewer than 20 people.","source":""},{"date":"2023-09-23","event":"Attacker compromises the database of Mixin Network's cloud service provider; approximately $200 million in ETH, BTC, and USDT drained via 10,000+ unauthorized withdrawal transactions.","source":""},{"date":"2023-09-25","event":"Mixin Network publicly discloses the breach, suspends all deposits and withdrawals, and contacts SlowMist and Google for investigation support.","source":""},{"date":"2023-09-25","event":"Founder Feng Xiaodong holds live briefing; announces 50% immediate stablecoin repayment and 50% via future bond tokens (MDT).","source":""},{"date":"2023-09-26","event":"Mixin offers attacker a $20 million bug bounty for return of stolen funds. Offer is not accepted.","source":""},{"date":"2023-09-26","event":"Elliptic, Merkle Science, and Lookonchain publish on-chain analysis confirming asset breakdown: 59,807 ETH, 891 BTC, 23.57M USDT. Attacker immediately swaps USDT to DAI on Uniswap.","source":""},{"date":"2024-02-01","event":"Mixin Kernel officially launches Mixin Debt Token (MDT) in three tranches (MDTu, MDTe, MDTb) as the mechanism for the 50% deferred repayment.","source":""},{"date":"2025-10-01","event":"Mixin provides repayment update: MDTu (~$23 million) targeted for full repayment by September 2026; no timeline disclosed for MDTe or MDTb.","source":""},{"date":"2026-02-12","event":"Dormant attacker wallet moves 2,005 ETH ($3.85 million) through three newly created wallets to Tornado Cash — first movement of stolen funds in over two years. Remaining balance: approximately 57,849 ETH and 891 BTC.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 86d13ed4-4331-42fd-9970-04f8407b485ecopy
2. #2rescoreby systemsystem

   2026-10-10 18:49:29Z
   Score: 10 → 63 (+53)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 10 → 63. Problems weighed by who is responsible: incidents the subject suffered −6.4, concerns that are not fraud −3.2, problems around the subject, caused by others −2.4; legitimacy credit long-running +10.
   anchoranchored

   chain

   ●mainnet-betaslot 455,369,545

   sig

   4CjBriHrovfE…yB5ztsRCcopyexplorer ↗

   hash

   BUQAxam3S4nT…BcgEjaAPcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (645 B) ▸

   {"actor":"system","decided_at":"2026-10-10T18:49:29.437Z","decision":"rescore","investigation_id":"e12ac5bb-f642-49d6-8467-1c72ad1d83bb","new_score":63,"page_slug":"mixin-network","prev_score":10,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 10 → 63. Problems weighed by who is responsible: incidents the subject suffered −6.4, concerns that are not fraud −3.2, problems around the subject, caused by others −2.4; legitimacy credit long-running +10.","score_delta":53,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 0b4c6ebf-0f48-4282-bfbe-80b45658416dcopy
3. #3reviewby reviewerreviewer

   2026-10-27 19:06:27Z
   Score: 63 → 63 (no score change)
   The core hack facts (date, ~$200M, asset breakdown, Merkle exploiter data, February 2026 Tornado Cash movement and remaining balances) match the sources I fetched. The main defect is that the October 2025 repayment update is cited to a Bitget article that is actually the February 2024 MDT launch piece and does not contain the claim. The Merkle publication date in the timeline is imprecise (the article is dated September 27). The MDTu September 2026 deadline has passed with no status given. Background and biography claims were largely not checked.
   anchoranchored

   chain

   ●mainnet-betaslot 462,182,888

   sig

   3qpiswQ312Af…Twozxy8hcopyexplorer ↗

   hash

   HxHPUKwK5bY8…rWiKd7eVcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1402 B) ▸

   {"actor":"reviewer","artifact_identity":"dec8d6e9058c56f9e49231664db7a84e","decided_at":"2026-10-27T19:06:27.681Z","decision":"review","disputed_pct":0.2,"findings_hash":"4TAmztKup9YtWMD6HJVRw5t5VKGuKK1iAYsb5jZLjWad","investigation_id":"e12ac5bb-f642-49d6-8467-1c72ad1d83bb","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":63,"omissions":{"material":0,"total":1},"page_content_hash":"bb41194e517ccbd894ba92db3f70515d6f79f0c76112a9259c44a9ad9c0e7223","page_slug":"mixin-network","prev_score":63,"reason":"The core hack facts (date, ~$200M, asset breakdown, Merkle exploiter data, February 2026 Tornado Cash movement and remaining balances) match the sources I fetched. The main defect is that the October 2025 repayment update is cited to a Bitget article that is actually the February 2024 MDT launch piece and does not contain the claim. The Merkle publication date in the timeline is imprecise (the article is dated September 27). The MDTu September 2026 deadline has passed with no status given. Background and biography claims were largely not checked.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"sequence_num":3,"subject_status":"operating","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 7052882f-a834-499f-9f7f-c0689776341fcopy
4. #4review reviseby judgejudge

   2026-10-27 19:06:27Z
   Score: 63 → 63 (no score change)
   The core hack facts (date, roughly $200M loss, asset breakdown, exploiter data, and the February 2026 Tornado Cash movement) were confirmed against sources (claim_findings[0-4]). Two of ten checked claims (20%) were disputed or unverifiable: the October 2025 repayment update is cited to a Bitget article from February 2024 that does not contain it (claim_findings[5]), and the no-enforcement claim could not be verified (claim_findings[9]). The MDTu September 2026 deadline has also passed without the page saying whether it was met, a minor omission. The subject is still operating, so the page is not contradicted. Several background claims were not checked, which limits confidence.
   anchoranchored

   chain

   ●mainnet-betaslot 462,182,893

   sig

   368dWtDQVxkL…mcqiBEwScopyexplorer ↗

   hash

   4SirrSzACJgo…XTn9zPVHcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1330 B) ▸

   {"actor":"judge","artifact_identity":"dec8d6e9058c56f9e49231664db7a84e","band_override":null,"decided_at":"2026-10-27T19:06:27.681Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.2,"investigation_id":"e12ac5bb-f642-49d6-8467-1c72ad1d83bb","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":63,"page_slug":"mixin-network","prev_score":63,"reason":"The core hack facts (date, roughly $200M loss, asset breakdown, exploiter data, and the February 2026 Tornado Cash movement) were confirmed against sources (claim_findings[0-4]). Two of ten checked claims (20%) were disputed or unverifiable: the October 2025 repayment update is cited to a Bitget article from February 2024 that does not contain it (claim_findings[5]), and the no-enforcement claim could not be verified (claim_findings[9]). The MDTu September 2026 deadline has also passed without the page saying whether it was met, a minor omission. The subject is still operating, so the page is not contradicted. Several background claims were not checked, which limits confidence.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"sequence_num":4,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 81f74af1-3c9c-4872-9f0d-206be9253e7fcopy