Skip to main content
Sign in
Moola Market1 decision on this page

Audit log

Every state-changing event for Moola Market: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

  1. #1publishby system:backfill
    2026-05-28 16:29:22Z
    Score: ?? (no score change)
    anchoranchored
    chain
    mainnet-betaslot 422,756,749
    sig
    5jLwHPec62aJ…cqjKdPVHexplorer ↗
    hash
    8Fo5LdaJnp9o…R7aXjQFNsha256 → base58
    verifying row…full verify ↗
    canonical bytes (7013 B) ▸
    {"actor":"system:backfill","investigation_id":"80ce65f2-212a-430a-8276-99c91b73c8af","kind":"publish","page_slug":"moola-market","published_at":"2026-05-28T16:29:22.447Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Moola Market","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/markets/2022/10/19/celo-protocol-moola-market-loses-over-10m-in-market-manipulation-attack","type":"other","url":""},{"credibility":3,"name":"https://www.anchain.ai/blog/moola-market-exploit","type":"other","url":""},{"credibility":3,"name":"https://www.certik.com/resources/blog/8ENVqveSYRcppTHOcxG29-moola-market","type":"other","url":""},{"credibility":3,"name":"https://rekt.news/moola-markets-rekt","type":"other","url":""},{"credibility":3,"name":"https://quillaudits.medium.com/moola-market-9-million-price-manipulation-attack-quillaudits-728485ee5782","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.anchain.ai/blog/moola-market-exploit","type":"other","url":""},{"credibility":3,"name":"https://rekt.news/moola-markets-rekt","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/markets/2022/10/19/celo-protocol-moola-market-loses-over-10m-in-market-manipulation-attack","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/moola-market-hacked-for-8-4million-93-1-of-stolen-funds-returned/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://cointelegraph.com/news/moola-market-attacker-returns-most-of-9m-looted-for-500k-bounty","type":"other","url":""},{"credibility":3,"name":"https://coinjournal.net/news/moola-market-hacker-returns-7-8-million-of-stolen-funds/","type":"other","url":""},{"credibility":3,"name":"https://quillaudits.medium.com/moola-market-9-million-price-manipulation-attack-quillaudits-728485ee5782","type":"other","url":""},{"credibility":3,"name":"https://rekt.news/moola-markets-rekt","type":"other","url":""},{"credibility":3,"name":"https://beincrypto.com/benevolent-moola-market-defi-hacker-returns-9m-exploited-funds/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://quillaudits.medium.com/moola-market-9-million-price-manipulation-attack-quillaudits-728485ee5782","type":"other","url":""},{"credibility":3,"name":"https://www.certik.com/resources/blog/8ENVqveSYRcppTHOcxG29-moola-market","type":"other","url":""},{"credibility":3,"name":"https://www.anchain.ai/blog/moola-market-exploit","type":"other","url":""},{"credibility":3,"name":"https://www.investing.com/news/cryptocurrency-news/moola-market-loses-84-million-in-an-incredibly-simple-attack-2917091","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://moolamarket.medium.com/moola-market-proposal-10-unpausing-f6d39d4208c4","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/moola-market-attacker-returns-most-of-9m-looted-for-500k-bounty","type":"other","url":""},{"credibility":3,"name":"https://ambcrypto.com/moola-markets-exploit-its-an-october-turned-hacktober-for-the-crypto-market/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://moolamarket.medium.com/moola-raises-1-4m-seed-round-d7725601789a","type":"other","url":""},{"credibility":3,"name":"https://www.celocamp.com/post/hero-story-moola","type":"other","url":""},{"credibility":3,"name":"https://coin98.net/what-is-moola-market-moo","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://defillama.com/protocol/moola-market","type":"other","url":""},{"credibility":3,"name":"https://www.kraken.com/prices/moola-market","type":"other","url":""},{"credibility":3,"name":"https://www.coinbase.com/price/moola-market","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://en.wikipedia.org/wiki/ZachXBT","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/markets/2022/10/19/celo-protocol-moola-market-loses-over-10m-in-market-manipulation-attack","type":"other","url":""}]}],"sources_used":[],"summary":"Moola Market is a decentralized lending protocol built on the Celo blockchain, founded in 2020 by Patrick Baron and backed by Polychain Capital. In October 2022, the protocol suffered a price manipulation exploit draining approximately $9.1 million, making it one of the largest DeFi incidents on Celo; over 93% of funds were returned by the attacker within hours in exchange for a roughly $500,000 bounty. The protocol subsequently relaunched with reduced collateral thresholds, but its TVL and MOO token value have declined sharply since the incident.","timeline":[{"date":"2020-01-01","event":"Moola Market founded by Patrick Baron in San Francisco, CA.","source":""},{"date":"2021-03-01","event":"Moola raises $1.4 million seed round led by Polychain Capital and Flori Ventures.","source":""},{"date":"2022-10-18","event":"Price manipulation exploit begins at approximately 16:04 UTC. Attacker wallet 0x95B5579b323Ddc6cd290Bd4DA6e56BA019588EfC inflates MOO token price 6,400% via Ubeswap and drains approximately $9.1 million across CELO, cEUR, cUSD, and MOO.","source":""},{"date":"2022-10-18","event":"Moola Market pauses all protocol operations and publicly announces exploit. Team contacts law enforcement.","source":""},{"date":"2022-10-18","event":"An individual identifying as the attacker contacts the Moola team within approximately 10 minutes of the public announcement and confirms possession of exploited funds. Negotiations begin.","source":""},{"date":"2022-10-18","event":"Attacker returns 93.1% of stolen funds to the Moola governance multi-sig wallet. Attacker retains approximately 650,000 CELO (~$500,000) as a bounty and donates approximately 50,000 CELO (~$37,000) to ImpactMarket.","source":""},{"date":"2022-10-19","event":"CoinDesk, CoinTelegraph, and other major crypto outlets publish full coverage of exploit and fund return.","source":""},{"date":"2022-10-19","event":"Moola submits governance proposal ID 9 to remove MOO as viable collateral by reducing LTV and liquidation thresholds.","source":""},{"date":"2022-11-01","event":"Moola publishes Proposal 10 (Unpausing), outlining protocol restart plan including admin multisig transition, phased unpause, and user compensation for haircut balances.","source":""},{"date":"2023-01-01","event":"Protocol relaunches with revised governance structure and MOO reserve frozen. TVL and MOO token value begin sustained decline.","source":""},{"date":"2025-01-01","event":"Moola Market TVL stands at approximately $1.1 million; MOO market cap approximately $54,500. Protocol remains operational but dormant.","source":""}]},"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision 965f072b-2f92-4b2a-bb19-0a4fcd31e32e
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine — python -m src.verify_decision <event_id>.