Audit log

Every state-changing event for Neutrl: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-28 20:25:03Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 422,792,442

   sig

   5rBmfwp9hwJW…uZ8tnZ53copyexplorer ↗

   hash

   7z9fz1e3NPP5…1bgjAhN8copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (6538 B) ▸

   {"actor":"system:backfill","investigation_id":"929433df-9a9d-4af5-9512-099ea30a94c9","kind":"publish","page_slug":"neutrl","published_at":"2026-05-28T20:25:03.660Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Neutrl","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/business/2025/04/16/neutrl-raises-usd5m-to-tokenize-a-popular-hedge-fund-altcoin-trade","type":"other","url":""},{"credibility":3,"name":"https://www.globenewswire.com/news-release/2025/04/17/3063560/0/en/STIX-and-Accomplice-Lead-Neutrl-s-5-Million-Raise-to-Launch-NUSD-a-High-Yield-Synthetic-Dollar.html","type":"other","url":""},{"credibility":3,"name":"https://iq.wiki/wiki/neutrl","type":"other","url":""},{"credibility":3,"name":"https://stabledash.com/news/2025-11-10-neutrl-launches-synthetic-dollar-nusd-for-otc-arbitrage-yield","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/business/2025/04/16/neutrl-raises-usd5m-to-tokenize-a-popular-hedge-fund-altcoin-trade","type":"other","url":""},{"credibility":3,"name":"https://www.globenewswire.com/news-release/2025/04/17/3063560/0/en/STIX-and-Accomplice-Lead-Neutrl-s-5-Million-Raise-to-Launch-NUSD-a-High-Yield-Synthetic-Dollar.html","type":"other","url":""},{"credibility":3,"name":"https://cryptorank.io/ico/neutrl","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.cryptotimes.io/2026/03/19/neutrl-defi-pauses-smart-contracts-amid-suspected-dns-frontend-hijack/","type":"other","url":""},{"credibility":3,"name":"https://www.cryptonewsz.com/neutrl-front-end-attack-update-urgent-security/","type":"other","url":""},{"credibility":3,"name":"https://phemex.com/news/article/neutrl-resumes-operations-after-dns-migration-posthijacking-68032","type":"other","url":""},{"credibility":3,"name":"https://smartcontractshacking.com/hacks/neutrl-hack-2026","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://web3secnews.substack.com/p/the-fi-files-a-field-report-on-dns","type":"other","url":""},{"credibility":3,"name":"https://www.cryptotimes.io/2026/03/19/neutrl-defi-pauses-smart-contracts-amid-suspected-dns-frontend-hijack/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.weex.com/news/detail/neutrl-dns-migration-has-been-completed-and-operations-have-resumed-the-original-domain-will-be-gradually-phased-out-393585","type":"other","url":""},{"credibility":3,"name":"https://phemex.com/news/article/neutrl-resumes-operations-after-dns-migration-posthijacking-68032","type":"other","url":""},{"credibility":3,"name":"https://www.hypernative.io/blog/how-neutrl-built-nusd-onchain-settlement-architecture-with-hypernative-as-real-time-monitor-and-pauser","type":"other","url":""},{"credibility":3,"name":"https://www.panewslab.com/en/articles/019d0f98-33ac-76cd-9ed3-35fdc6ef1292","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://docs.neutrl.fi/risks/counterparty-risks","type":"other","url":""},{"credibility":3,"name":"https://messari.io/report/neutrl-otc-and-delta-neutral-strategies","type":"other","url":""},{"credibility":3,"name":"https://www.blocmates.com/articles/neutrl-unlocking-crypto-s-private-markets","type":"other","url":""},{"credibility":3,"name":"https://alearesearch.substack.com/p/neutrl-altcoin-otc","type":"other","url":""},{"credibility":3,"name":"https://blofin.com/en/academy/blofin-courses/what-s-behind-the-recent-stablecoin-defi-turmoil","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.mexc.co/en-PH/news/163368","type":"other","url":""},{"credibility":3,"name":"https://blockchainreporter.net/neutrl-partners-with-layerzero-for-oft-standard-unlocks-nusd-snusd-stablecoins-defi-cross-chain-interoperability/","type":"other","url":""},{"credibility":3,"name":"https://blockworks.co/news/prediction-markets-neutrl","type":"other","url":""},{"credibility":3,"name":"https://x.com/DefiLlama/status/1922045423495074012","type":"other","url":""}]}],"sources_used":[],"summary":"Neutrl is a DeFi protocol issuing NUSD, a market-neutral synthetic dollar backed by OTC altcoin arbitrage and delta-neutral futures hedging strategies. The protocol raised $5 million in seed funding in April 2025 and grew to over $136 million in TVL. In March 2026 Neutrl suffered a DNS hijacking attack — part of a coordinated campaign targeting .fi domain protocols — that compromised its frontend interface, though the team maintained that smart contract reserves and user funds were not directly drained.","timeline":[{"date":"2025-04-16","event":"Neutrl raises $5 million in seed funding led by STIX and Accomplice, with participation from Amber Group, SCB Limited, Figment Capital, Nascent, and angel investors including Ethena founder Guy Young.","source":""},{"date":"2025-11-10","event":"Neutrl launches its public DeFi protocol, issuing NUSD and sNUSD. The protocol reports $75 million raised in a pre-deposit vault campaign and early yields of approximately 30%.","source":""},{"date":"2025-11-01","event":"USDX, a competing delta-neutral synthetic dollar with $683 million TVL, collapses from $1 to $0.09 — a sector stress event that increased scrutiny of all synthetic stablecoin protocols.","source":""},{"date":"2026-03-18","event":"Neutrl's neutrl.fi domain is hijacked via social engineering of the domain registrar. Users redirected to a malicious frontend prompting unauthorized Permit2 approvals. Smart contracts paused. Security firm 0xGroomLake engaged.","source":""},{"date":"2026-03-19","event":"Neutrl publicly warns users to cease all interaction with neutrl.fi, provides malicious contract addresses to revoke, and advises use of revoke.cash. Incident identified as part of coordinated campaign also targeting Cow.fi, Steakhouse, and HypurrFi.","source":""},{"date":"2026-03-21","event":"Neutrl completes DNS migration to neutrl.finance and switches DNS providers. Smart contracts unpaused. Team states all reserve assets and NAV remain secure in custodial wallets.","source":""},{"date":"2026-05-01","event":"Neutrl announces LayerZero OFT standard integration, enabling NUSD and sNUSD transfers across 150+ blockchains.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 0ac7be2a-6c2d-46cb-b179-e20e37e0cb37copy
2. #2reviewby reviewerreviewer

   2026-08-27 11:06:12Z
   Score: 45 → 45 (no score change)
   The page's summary and timeline are largely accurate against independent outside sources — the seed round, launch metrics, and March 2026 DNS-hijack narrative all check out in substance — but sources_used is empty and all 7 sections have empty content, so 'confirmed' here means verified against the open web, not against any evidence the page itself supplies; the section scaffolding (headings and source lists for funding, launch, hijack, campaign, resolution, counterparty risk, and partnerships) implies analytical coverage the page does not actually deliver. Two dated claims are disputed: the USDX comparison event is dated Nov 1, 2025 versus independently reported Nov 3-7, 2025, and the LayerZero OFT integration is dated May 1, 2026 versus a LayerZero announcement whose timestamp decodes to roughly Nov 2025 — both align with the first-of-month placeholder pattern. The TVL figure of $136M is a real, traceable figure but stated without an as-of date against a metric that has since ranged from roughly $89M to $217M.
   anchoranchored

   chain

   ●mainnet-betaslot 443,525,724

   sig

   4Zk5D8rhJCm3…L2LHxkfbcopyexplorer ↗

   hash

   ARmcQc3ddKtD…fNMnsUuLcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1369 B) ▸

   {"actor":"reviewer","decided_at":"2026-08-27T11:06:11.567Z","decision":"review","investigation_id":"929433df-9a9d-4af5-9512-099ea30a94c9","new_score":45,"page_slug":"neutrl","prev_score":45,"reason":"The page's summary and timeline are largely accurate against independent outside sources — the seed round, launch metrics, and March 2026 DNS-hijack narrative all check out in substance — but sources_used is empty and all 7 sections have empty content, so 'confirmed' here means verified against the open web, not against any evidence the page itself supplies; the section scaffolding (headings and source lists for funding, launch, hijack, campaign, resolution, counterparty risk, and partnerships) implies analytical coverage the page does not actually deliver. Two dated claims are disputed: the USDX comparison event is dated Nov 1, 2025 versus independently reported Nov 3-7, 2025, and the LayerZero OFT integration is dated May 1, 2026 versus a LayerZero announcement whose timestamp decodes to roughly Nov 2025 — both align with the first-of-month placeholder pattern. The TVL figure of $136M is a real, traceable figure but stated without an as-of date against a metric that has since ranged from roughly $89M to $217M.","score_delta":0,"sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 8113e114-19ee-49fb-a089-b92bd44d6870copy
3. #3review reviseby judgejudge

   2026-08-27 11:06:12Z
   Score: 45 → 33 (-12)
   Independent verification supports the substance of this page: the $5M seed round, launch metrics, and the full March 2026 DNS-hijack narrative (claim_findings[3], [4], [5], [6]-[9], [11], [12], [13]) all check out against multiple outside sources. Two of fifteen claims were disputed — the USDX comparison event (claim_findings[10]), dated Nov 1, 2025 on the page versus Nov 3-7, 2025 in independent reporting, and the LayerZero integration date (claim_findings[14]), dated May 1, 2026 on the page versus roughly Nov 2025 per LayerZero's own announcement — giving a disputed rate of 13.3%, in the lower half of the minor-issues band, and both look like first-of-month placeholder dates rather than fabricated facts. However, the review also found that every section's content field is empty, so the page currently delivers no synthesized analysis despite scaffolding that implies coverage of counterparty risk and partnerships, and it flagged a high-priority gap around the total absence of any smart-contract-audit disclosure for a protocol that holds custodial reserves and runs OTC counterparty exposure. Those two high-priority gaps, plus an undated $136M TVL figure (claim_findings[2]) sitting against a metric that has since ranged from $89M to $217M, justify placing the penalty toward the upper end of the minor-issues range rather than the floor, while the disputed-claim rate itself keeps this in the revise band without triggering under-investigation status, which the review's own band table reserves for 30%+ disputed rates.
   anchoranchored

   chain

   ●mainnet-betaslot 443,525,733

   sig

   4yZiP8BekxVq…DP7YUF41copyexplorer ↗

   hash

   AVeDTXJeuLNx…r4cnZ3wEcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1885 B) ▸

   {"actor":"judge","decided_at":"2026-08-27T11:06:11.567Z","decision":"review_revise","investigation_id":"929433df-9a9d-4af5-9512-099ea30a94c9","new_score":33,"page_slug":"neutrl","prev_score":45,"reason":"Independent verification supports the substance of this page: the $5M seed round, launch metrics, and the full March 2026 DNS-hijack narrative (claim_findings[3], [4], [5], [6]-[9], [11], [12], [13]) all check out against multiple outside sources. Two of fifteen claims were disputed — the USDX comparison event (claim_findings[10]), dated Nov 1, 2025 on the page versus Nov 3-7, 2025 in independent reporting, and the LayerZero integration date (claim_findings[14]), dated May 1, 2026 on the page versus roughly Nov 2025 per LayerZero's own announcement — giving a disputed rate of 13.3%, in the lower half of the minor-issues band, and both look like first-of-month placeholder dates rather than fabricated facts. However, the review also found that every section's content field is empty, so the page currently delivers no synthesized analysis despite scaffolding that implies coverage of counterparty risk and partnerships, and it flagged a high-priority gap around the total absence of any smart-contract-audit disclosure for a protocol that holds custodial reserves and runs OTC counterparty exposure. Those two high-priority gaps, plus an undated $136M TVL figure (claim_findings[2]) sitting against a metric that has since ranged from $89M to $217M, justify placing the penalty toward the upper end of the minor-issues range rather than the floor, while the disputed-claim rate itself keeps this in the revise band without triggering under-investigation status, which the review's own band table reserves for 30%+ disputed rates.","score_delta":-12,"sequence_num":3,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 912097f7-04b4-42c2-9f20-f0ae727474cfcopy
4. #4reviewby reviewerreviewer

   2026-08-27 11:06:12Z
   Score: 45 → 45 (no score change)
   The page's summary and timeline are largely accurate against independent outside sources — the seed round, launch metrics, and March 2026 DNS-hijack narrative all check out in substance — but sources_used is empty and all 7 sections have empty content, so 'confirmed' here means verified against the open web, not against any evidence the page itself supplies; the section scaffolding (headings and source lists for funding, launch, hijack, campaign, resolution, counterparty risk, and partnerships) implies analytical coverage the page does not actually deliver. Two dated claims are disputed: the USDX comparison event is dated Nov 1, 2025 versus independently reported Nov 3-7, 2025, and the LayerZero OFT integration is dated May 1, 2026 versus a LayerZero announcement whose timestamp decodes to roughly Nov 2025 — both align with the first-of-month placeholder pattern. The TVL figure of $136M is a real, traceable figure but stated without an as-of date against a metric that has since ranged from roughly $89M to $217M.
   anchoranchored

   chain

   ●mainnet-betaslot 443,525,740

   sig

   xXxi3rp3baEp…zdb5BnhUcopyexplorer ↗

   hash

   FAVbGtRhg8sj…79m6TTZvcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1369 B) ▸

   {"actor":"reviewer","decided_at":"2026-08-27T11:06:12.181Z","decision":"review","investigation_id":"929433df-9a9d-4af5-9512-099ea30a94c9","new_score":45,"page_slug":"neutrl","prev_score":45,"reason":"The page's summary and timeline are largely accurate against independent outside sources — the seed round, launch metrics, and March 2026 DNS-hijack narrative all check out in substance — but sources_used is empty and all 7 sections have empty content, so 'confirmed' here means verified against the open web, not against any evidence the page itself supplies; the section scaffolding (headings and source lists for funding, launch, hijack, campaign, resolution, counterparty risk, and partnerships) implies analytical coverage the page does not actually deliver. Two dated claims are disputed: the USDX comparison event is dated Nov 1, 2025 versus independently reported Nov 3-7, 2025, and the LayerZero OFT integration is dated May 1, 2026 versus a LayerZero announcement whose timestamp decodes to roughly Nov 2025 — both align with the first-of-month placeholder pattern. The TVL figure of $136M is a real, traceable figure but stated without an as-of date against a metric that has since ranged from roughly $89M to $217M.","score_delta":0,"sequence_num":4,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 33e9c3fe-6fe5-4d5c-ab07-0421da4b2740copy
5. #5review reviseby judgejudge

   2026-08-27 11:06:12Z
   Score: 45 → 33 (-12)
   Independent verification supports the substance of this page: the $5M seed round, launch metrics, and the full March 2026 DNS-hijack narrative (claim_findings[3], [4], [5], [6]-[9], [11], [12], [13]) all check out against multiple outside sources. Two of fifteen claims were disputed — the USDX comparison event (claim_findings[10]), dated Nov 1, 2025 on the page versus Nov 3-7, 2025 in independent reporting, and the LayerZero integration date (claim_findings[14]), dated May 1, 2026 on the page versus roughly Nov 2025 per LayerZero's own announcement — giving a disputed rate of 13.3%, in the lower half of the minor-issues band, and both look like first-of-month placeholder dates rather than fabricated facts. However, the review also found that every section's content field is empty, so the page currently delivers no synthesized analysis despite scaffolding that implies coverage of counterparty risk and partnerships, and it flagged a high-priority gap around the total absence of any smart-contract-audit disclosure for a protocol that holds custodial reserves and runs OTC counterparty exposure. Those two high-priority gaps, plus an undated $136M TVL figure (claim_findings[2]) sitting against a metric that has since ranged from $89M to $217M, justify placing the penalty toward the upper end of the minor-issues range rather than the floor, while the disputed-claim rate itself keeps this in the revise band without triggering under-investigation status, which the review's own band table reserves for 30%+ disputed rates.
   anchoranchored

   chain

   ●mainnet-betaslot 443,525,749

   sig

   2Ro5iBHCnWap…7cKKQhMgcopyexplorer ↗

   hash

   nUXmuUtUYeV8…Gro9gYPrcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1885 B) ▸

   {"actor":"judge","decided_at":"2026-08-27T11:06:12.181Z","decision":"review_revise","investigation_id":"929433df-9a9d-4af5-9512-099ea30a94c9","new_score":33,"page_slug":"neutrl","prev_score":45,"reason":"Independent verification supports the substance of this page: the $5M seed round, launch metrics, and the full March 2026 DNS-hijack narrative (claim_findings[3], [4], [5], [6]-[9], [11], [12], [13]) all check out against multiple outside sources. Two of fifteen claims were disputed — the USDX comparison event (claim_findings[10]), dated Nov 1, 2025 on the page versus Nov 3-7, 2025 in independent reporting, and the LayerZero integration date (claim_findings[14]), dated May 1, 2026 on the page versus roughly Nov 2025 per LayerZero's own announcement — giving a disputed rate of 13.3%, in the lower half of the minor-issues band, and both look like first-of-month placeholder dates rather than fabricated facts. However, the review also found that every section's content field is empty, so the page currently delivers no synthesized analysis despite scaffolding that implies coverage of counterparty risk and partnerships, and it flagged a high-priority gap around the total absence of any smart-contract-audit disclosure for a protocol that holds custodial reserves and runs OTC counterparty exposure. Those two high-priority gaps, plus an undated $136M TVL figure (claim_findings[2]) sitting against a metric that has since ranged from $89M to $217M, justify placing the penalty toward the upper end of the minor-issues range rather than the floor, while the disputed-claim rate itself keeps this in the revise band without triggering under-investigation status, which the review's own band table reserves for 30%+ disputed rates.","score_delta":-12,"sequence_num":5,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 3df23b98-0bf4-4628-9d7e-9fae5848c33dcopy