Skip to main content
Sign in
Mobius Token1 decision on this page

Audit log

Every state-changing event for Mobius Token: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

  1. #1publishby system:backfill
    2026-05-27 20:30:15Z
    Score: ?? (no score change)
    anchoranchored
    chain
    mainnet-betaslot 422,575,045
    sig
    4oXGRXNDFEWT…wjgpzCDBexplorer ↗
    hash
    3mPKunr7MRh2…pLnBRW4tsha256 → base58
    verifying row…full verify ↗
    canonical bytes (4574 B) ▸
    {"actor":"system:backfill","investigation_id":"18c18006-b61a-4fbf-a97d-6e612808d7d7","kind":"publish","page_slug":"mobius-token","published_at":"2026-05-27T20:30:15.862Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Mobius Token","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://cointelegraph.com/news/mobius-token-exploit-bnb-chain-2-1m-loss","type":"other","url":""},{"credibility":3,"name":"https://www.certik.com/resources/blog/mobius-token-incident-analysis","type":"other","url":""},{"credibility":3,"name":"https://www.quillaudits.com/blog/hack-analysis/mobius-token-exploit-breakdown","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-mobius-hack-may-2025","type":"other","url":""},{"credibility":3,"name":"https://beincrypto.com/mobius-defi-hack-on-bnb-chain/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.quillaudits.com/blog/hack-analysis/mobius-token-exploit-breakdown","type":"other","url":""},{"credibility":3,"name":"https://www.certik.com/resources/blog/mobius-token-incident-analysis","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-mobius-hack-may-2025","type":"other","url":""},{"credibility":3,"name":"https://quillaudits.medium.com/mobius-token-exploit-breakdown-2-1m-lost-due-to-poor-logic-4c5ea5febdec","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.certik.com/resources/blog/mobius-token-incident-analysis","type":"other","url":""},{"credibility":3,"name":"https://www.quillaudits.com/blog/hack-analysis/mobius-token-exploit-breakdown","type":"other","url":""},{"credibility":3,"name":"https://beincrypto.com/mobius-defi-hack-on-bnb-chain/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://beincrypto.com/mobius-defi-hack-on-bnb-chain/","type":"other","url":""},{"credibility":3,"name":"https://www.certik.com/resources/blog/mobius-token-incident-analysis","type":"other","url":""},{"credibility":3,"name":"https://www.cryptopolitan.com/mobius-suffers-hack-on-bnb-chain/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://thespotlite.net/mobius-finance-mot-airdrop-is-it-real-or-a-scam-full-details","type":"other","url":""},{"credibility":3,"name":"https://cryptorank.io/news/feed/a08b2-mobius-exploited-for-2-1m-while-scammers-breach-ledgers-social-media","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.certik.com/resources/blog/mobius-token-incident-analysis","type":"other","url":""}]}],"sources_used":[],"summary":"Mobius Token (ticker: MBU) is a DeFi token that operated on BNB Chain. On May 11, 2025, an attacker exploited a critical decimal-precision bug in the project's unaudited smart contract, minting approximately 9.73 quadrillion MBU tokens with a deposit of only 0.001 BNB and draining $2.15 million in USDT from the protocol's liquidity pools. The stolen funds were laundered through Tornado Cash, no official team response was issued, and no funds have been recovered.","timeline":[{"date":"2025-05-04","event":"Attacker wallet 0xB32A53Af96F7735D47F4b76C525BD5Eb02B42600 funded via Tornado Cash with 10 BNB; same wallet allegedly exploited MHT Trade on this date.","source":""},{"date":"2025-05-08","event":"Mobius Token contract reportedly funded in preparation for the exploit.","source":""},{"date":"2025-05-11","event":"At 07:31 UTC, attacker deployed malicious contract 0x631adFF068D484Ce531Fb519Cda4042805521641 on BNB Chain.","source":""},{"date":"2025-05-11","event":"At 07:33 UTC, exploit executed: 0.001 WBNB deposited, approximately 9.73 quadrillion MBU tokens minted via decimal inflation bug, and $2,152,219.99 in USDT drained from PancakeSwap liquidity pools.","source":""},{"date":"2025-05-11","event":"Security firm Cyvers publicly flagged the exploit in real time on X (Twitter). CertiK, QuillAudits, and Halborn published post-mortem analyses.","source":""},{"date":"2025-05-11","event":"Attacker laundered approximately 2,100 BNB through Tornado Cash in 21 batches of 100 BNB. MBU token price collapses to near zero.","source":""},{"date":"2025-05-11","event":"No official statement released by the Mobius Token team. No fund recovery reported.","source":""}]},"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision 8433b4e5-f458-445e-b18e-dc52e6b04ef1
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine — python -m src.verify_decision <event_id>.