Audit log

Every state-changing event for NEYRO Token — Aurum Foundation Exit-Scam Rebrand: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-08-08 17:04:55Z
   Score: ? → ? (no score change)
   anchorpending

   chain

   ●—

   hash

   Gr1JtKcXF2Hs…Fk95ybm8copysha256 → base58

   verifying row…

   canonical bytes (23044 B) ▸

   {"actor":"system:backfill","investigation_id":"396643eb-ec66-4db4-a8c0-189283b3d26c","kind":"publish","page_slug":"neyro-token-aurum-foundation-exit-scam-rebrand","published_at":"2026-08-08T17:04:55.302Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"NEYRO Token — Aurum Foundation Exit-Scam Rebrand","sections":[{"content":"Aurum Foundation launched from Dubai in mid-2024 as a multi-level marketing platform marketing an AI trading bot that allegedly generated approximately 30% monthly returns (~1,900% annually). The platform collected deposits via BNB Smart Chain smart contracts, and according to on-chain analysis approximately $83.5 million was deposited by roughly 9,900 participants, with approximately $77.2 million paid back out — a distribution pattern consistent with early-stage Ponzi mechanics where earlier depositors are paid from subsequent deposits. In late June 2026, under accelerating regulatory pressure, the operators announced a rebrand to 'Neyro' and introduced the NEYRO token, framed as a next-generation non-custodial AI trading agent platform. On July 30, 2026, the platform collapsed; operators drained remaining investor funds and released a fabricated 'security incident' announcement blaming unnamed hackers.","heading":"Overview","severity":"critical","sources":[{"credibility":2,"name":"Aurum Foundation collapses, 'we got hacked!' exit-scam — BehindMLM","type":"news_article","url":"https://behindmlm.com/companies/aurum-foundation-collapses-we-got-hacked-exit-scam/"},{"credibility":2,"name":"AURUM Foundation & NEYRO Exposed: The AI Trading Bot That Doesn't Trade — Substack","type":"research","url":"https://dehek.substack.com/p/aurum-foundation-and-neyro-exposed"}]},{"content":"On July 26, 2026, Aurum Foundation announced withdrawal delays attributed to a 'Web3 infrastructure transition.' On July 27, 2026, withdrawals were fully disabled, with operators citing 'system update' and 'platform stability' as justifications. On July 29, 2026, the neyro.network domain was seized by Ukrainian registrar QHost — an action that was incorporated into the subsequent fake-hack narrative. On July 30, 2026, Aurum Foundation released a statement claiming: 'The attackers gained unauthorized access to a number of internal company resources,' affecting 'internal company funds, user funds held by the company, the neyro.network domain, and portions of the platform's internal databases.' Investigators at BehindMLM characterized the statement as a fabricated exit-scam narrative rather than a genuine security breach, noting the domain seizure by the registrar — not a hacker — and the simultaneous draining of all investor-accessible wallets. A backup domain, neyrolabs.io, had been privately registered on July 16, 2026, nine days before the withdrawal freeze began, suggesting the collapse was premeditated.","heading":"Exit-Scam Mechanics and Timeline","severity":"critical","sources":[{"credibility":2,"name":"Aurum Foundation collapses, 'we got hacked!' exit-scam — BehindMLM","type":"news_article","url":"https://behindmlm.com/companies/aurum-foundation-collapses-we-got-hacked-exit-scam/"}]},{"content":"On June 27, 2026, Aurum Foundation announced a rebrand to 'Neyro' and introduced the NEYRO token, describing it as a 'next-generation, non-custodial AI trading agent platform' executing trades directly on BNB Smart Chain DEXes including HyperLiquid via smart contracts. The rebrand was fronted by COO Andrew Isaacs, who described Neyro as 'an AI trading agent that operates as an autonomous execution layer.' The NEYRO smart contract was cited as having been reviewed by security firm Hacken, with no critical or high-severity vulnerabilities identified in the contract code itself. Investigators and regulators characterized the Neyro rebrand as 'more of the same Aurum Foundation fraud but with an AI marketing ruse,' designed to extend the scheme's lifespan under regulatory scrutiny. Michael van de Poppe, a prominent crypto analyst, was named as a Neyro Ambassador. Following the collapse, Isaacs removed his LinkedIn credentials as AURUM COO and NEYRO Co-Founder.","heading":"NEYRO Token and Rebrand","severity":"critical","sources":[{"credibility":2,"name":"Aurum Foundation collapses, 'we got hacked!' exit-scam — BehindMLM","type":"news_article","url":"https://behindmlm.com/companies/aurum-foundation-collapses-we-got-hacked-exit-scam/"},{"credibility":2,"name":"Second Aurum Foundation fraud warning from Australia — BehindMLM","type":"news_article","url":"https://behindmlm.com/companies/second-aurum-foundation-fraud-warning-from-australia/"},{"credibility":2,"name":"Aurum Foundation MiCA fraud warning from Belgium — BehindMLM","type":"news_article","url":"https://behindmlm.com/companies/aurum-foundation-mica-fraud-warning-from-belgium/"}]},{"content":"Blockchain forensic analysis conducted by investigator 'CrYptO G' of the Avenger Anti-Fraud Alliance, published via journalist Danny de Hek, examined smart contracts on BNB Smart Chain and TRON networks. Key on-chain findings: (1) Smart contracts contained 'no identifiable trading logic' consistent with the AI trading claims marketed to investors; (2) Funds flowed primarily into liquidity pools rather than showing evidence of automated market trading on external exchanges; (3) One primary wallet received approximately $31.7 million over 17 days through more than 120 transactions, with approximately $30.5 million subsequently redistributed across hundreds of wallet addresses — a pattern consistent with Ponzi-style recycling; (4) Broader on-chain data indicates approximately $83.5 million was deposited by roughly 9,900 participants, with approximately $77.2 million paid back out. The investigation characterized the contracts as lacking 'sophisticated trading mechanisms' investors were told generated returns, and noted no independently verifiable external trading revenue was observable on-chain. Investigators noted that if legitimate AI trading occurred, on-chain evidence of exchange interactions and trade execution would be present.","heading":"On-Chain Evidence","severity":"critical","sources":[{"credibility":2,"name":"AURUM Foundation & NEYRO Exposed: The AI Trading Bot That Doesn't Trade — Substack/Danny de Hek","type":"research","url":"https://dehek.substack.com/p/aurum-foundation-and-neyro-exposed"},{"credibility":2,"name":"Aurum Neyro Bot Review 2026: Is Aurum a Scam? — CryptoWatchdog","type":"research","url":"https://cryptowatchdog.net/blog/aurum-neyro-bot-review-is-aurum-a-scam"}]},{"content":"Disruption Banking journalists attended an Aurum Foundation recruiting call and documented that Chief Network Development Officer Shane Morand described the business model as 'referral marketing, direct sales' while explicitly avoiding the word 'investment.' Morand advised recruiters: 'There's no need to get into all the different algorithms...it's going to overwhelm them,' indicating a deliberate strategy to obscure the technical basis for the claimed returns. The platform marketed tiered investment packages up to $550,000, with claims of approximately 30% monthly returns. By comparison, industry benchmarks for legitimate AI trading operations are 5-25% annually. Promoters received 'profit share from partner trading through my referral links,' creating financial incentives for recruitment regardless of underlying trading performance. Technical code within the platform was found to be written in Cyrillic despite English-language branding, consistent with reports of Russian-speaking operators running the scheme.","heading":"MLM Business Model and Recruiting Practices","severity":"high","sources":[{"credibility":2,"name":"We Sat In on Aurum Foundation's Recruiting Call — Disruption Banking","type":"news_article","url":"https://www.disruptionbanking.com/2026/06/29/we-sat-in-on-aurum-foundations-recruiting-call-they-never-said-investment-once-they-said-referral-marketing/"}]},{"content":"Bryan Benson served as CEO from February 2025. A Peruvian national based in Dubai and Colombia, Benson is alleged by BehindMLM to have functioned as a paid frontman for unnamed Russian operators running the scheme behind the scenes. Andrew Isaacs served as COO and co-founder of the Neyro rebrand. Isaacs had previously held positions at Morgan Stanley and Galaxy Digital, lending perceived institutional credibility. He removed his LinkedIn credentials as AURUM COO and NEYRO Co-Founder following the July 2026 collapse. Shane Morand served as Chief Network Development Officer with responsibility for US-market recruitment. Morand is the co-founder of Organo Gold, a multi-level marketing company connected to a $13.7 million Vietnamese Ponzi scheme. He left Organo Gold after an attempt to pitch crypto investments to distributors in 2018. He subsequently promoted Trujivan (a Tycoon69 Ponzi trojan horse) in 2021 and the Decentra MLM crypto Ponzi in 2022 before joining Aurum Foundation. Michael van de Poppe, a prominent crypto analyst with a significant social media following, was publicly named as a Neyro Ambassador, lending the rebrand marketing credibility.","heading":"Key Figures","severity":"high","sources":[{"credibility":2,"name":"Aurum Foundation collapses, 'we got hacked!' exit-scam — BehindMLM","type":"news_article","url":"https://behindmlm.com/companies/aurum-foundation-collapses-we-got-hacked-exit-scam/"},{"credibility":2,"name":"Second Aurum Foundation fraud warning from Australia — BehindMLM","type":"news_article","url":"https://behindmlm.com/companies/second-aurum-foundation-fraud-warning-from-australia/"},{"credibility":2,"name":"Shane Morand 'leaves' Organo, initiates legal proceedings? — BehindMLM","type":"news_article","url":"https://behindmlm.com/companies/shane-morand-leaves-organo-initiates-legal-proceedings/"}]},{"content":"Aurum Foundation received formal fraud warnings or regulatory actions from at least ten jurisdictions before its collapse. The Bank of Russia added Aurum to its warning list in July 2025, flagging signs of a financial pyramid scheme. Nigeria's Securities and Exchange Commission warned in January 2026 that AURUM BOT displayed Ponzi characteristics and was not registered. New Zealand's Financial Markets Authority cautioned consumers in May 2026. France's Autorite des Marches Financiers (AMF) placed aurum.foundation on its crypto-assets national blacklist on June 12, 2026, stating the operator was not authorized to offer financial services in France. Poland's Financial Supervision Authority (KNF) filed a criminal referral to the Warsaw Prosecutor on June 11, 2026, forwarding suspected banking fraud connected to the company's Neobank branding. Hong Kong's Securities and Futures Commission (SFC) added Aurum Foundation to its Alert List of suspicious virtual asset trading platforms on June 23, 2026, noting the entity falsely claimed registration in Hong Kong and conducted unlicensed activities in futures contracts and derivatives. Belgium's Financial Services and Markets Authority (FSMA) issued a MiCA fraud warning on July 6, 2026, classifying Aurum Foundation as an unauthorized crypto-asset service provider under EU-wide MiCA rules. Australia's ASIC issued a second fraud warning on July 14, 2026, stating Aurum Foundation 'may be offering or advertising financial services' without an Australian financial services licence. Additional warnings were issued by Russia, Nigeria, New Zealand, Greece, and Finland, among others.","heading":"Regulatory Actions","severity":"critical","sources":[{"credibility":2,"name":"France blacklists Aurum Foundation for fraud — BehindMLM","type":"regulatory","url":"https://behindmlm.com/companies/france-blacklists-aurum-foundation-for-fraud/"},{"credibility":2,"name":"Hong Kong SFC flags Aurum Foundation as suspicious virtual asset platform — Crypto.news","type":"regulatory","url":"https://crypto.news/hong-kong-sfc-flags-aurum-foundation-as-suspicious-virtual-asset-platform/"},{"credibility":2,"name":"Aurum Foundation securities fraud alert from Hong Kong — BehindMLM","type":"regulatory","url":"https://behindmlm.com/companies/aurum-foundation-securities-fraud-alert-from-hong-kong/"},{"credibility":2,"name":"Aurum Foundation MiCA fraud warning from Belgium — BehindMLM","type":"regulatory","url":"https://behindmlm.com/companies/aurum-foundation-mica-fraud-warning-from-belgium/"},{"credibility":2,"name":"Second Aurum Foundation fraud warning from Australia — BehindMLM","type":"regulatory","url":"https://behindmlm.com/companies/second-aurum-foundation-fraud-warning-from-australia/"},{"credibility":2,"name":"Aurum Foundation Ponzi fraud warning from Nigeria — BehindMLM","type":"regulatory","url":"https://behindmlm.com/companies/aurum-foundation-ponzi-fraud-warning-from-nigeria/"},{"credibility":2,"name":"Hong Kong SFC added Aurum Foundation to warning list — Bitget News","type":"regulatory","url":"https://www.bitget.com/news/detail/12560605473996"}]},{"content":"Trustpilot reviews for aurum-foundation.com contain numerous user reports describing frozen withdrawals, loss of deposited funds, and non-responsive customer support following the July 2026 collapse. Investor alert notices have appeared in financial media advising affected participants on how to document losses. The platform had approximately 758,000 monthly website visitors in June 2026, with primary markets in the United States (19%), Germany (16%), Switzerland (12%), Netherlands (12%), and Greece (8%), suggesting a broad international retail investor base was exposed to the scheme. Cryptocurrency invested is characterized by investigators as 'assumed stolen' given the simultaneous platform collapse and wallet drain.","heading":"Community and Victim Reports","severity":"high","sources":[{"credibility":3,"name":"Aurum Foundation Reviews — Trustpilot","type":"community_report","url":"https://www.trustpilot.com/review/aurum-foundation.com"},{"credibility":3,"name":"Aurum.Foundation Investor Alert: How to Trace Lost Funds — OpenPR","type":"news_article","url":"https://www.openpr.com/news/4592437/aurum-foundation-investor-alert-how-to-trace-lost-funds"}]}],"sources_used":[{"credibility":2,"name":"Aurum Foundation collapses, 'we got hacked!' exit-scam — BehindMLM","type":"news_article","url":"https://behindmlm.com/companies/aurum-foundation-collapses-we-got-hacked-exit-scam/"},{"credibility":2,"name":"Second Aurum Foundation fraud warning from Australia — BehindMLM","type":"news_article","url":"https://behindmlm.com/companies/second-aurum-foundation-fraud-warning-from-australia/"},{"credibility":2,"name":"Aurum Foundation MiCA fraud warning from Belgium — BehindMLM","type":"news_article","url":"https://behindmlm.com/companies/aurum-foundation-mica-fraud-warning-from-belgium/"},{"credibility":2,"name":"France blacklists Aurum Foundation for fraud — BehindMLM","type":"regulatory","url":"https://behindmlm.com/companies/france-blacklists-aurum-foundation-for-fraud/"},{"credibility":2,"name":"Aurum Foundation securities fraud alert from Hong Kong — BehindMLM","type":"regulatory","url":"https://behindmlm.com/companies/aurum-foundation-securities-fraud-alert-from-hong-kong/"},{"credibility":2,"name":"Aurum Foundation Ponzi fraud warning from Nigeria — BehindMLM","type":"regulatory","url":"https://behindmlm.com/companies/aurum-foundation-ponzi-fraud-warning-from-nigeria/"},{"credibility":2,"name":"AURUM Foundation & NEYRO Exposed: The AI Trading Bot That Doesn't Trade — Substack/Danny de Hek","type":"research","url":"https://dehek.substack.com/p/aurum-foundation-and-neyro-exposed"},{"credibility":2,"name":"Hong Kong SFC flags Aurum Foundation as suspicious virtual asset platform — Crypto.news","type":"regulatory","url":"https://crypto.news/hong-kong-sfc-flags-aurum-foundation-as-suspicious-virtual-asset-platform/"},{"credibility":2,"name":"Hong Kong SFC added Aurum Foundation to warning list — Bitget News","type":"regulatory","url":"https://www.bitget.com/news/detail/12560605473996"},{"credibility":2,"name":"We Sat In on Aurum Foundation's Recruiting Call — Disruption Banking","type":"news_article","url":"https://www.disruptionbanking.com/2026/06/29/we-sat-in-on-aurum-foundations-recruiting-call-they-never-said-investment-once-they-said-referral-marketing/"},{"credibility":2,"name":"Shane Morand 'leaves' Organo, initiates legal proceedings? — BehindMLM","type":"news_article","url":"https://behindmlm.com/companies/shane-morand-leaves-organo-initiates-legal-proceedings/"},{"credibility":2,"name":"NEYRO: Inside Aurum's Non-Custodial AI Trading Agent Platform — CoinCodex","type":"news_article","url":"https://coincodex.com/article/84946/neyro-inside-aurums-non-custodial-ai-trading-agent-platform/"},{"credibility":3,"name":"Aurum Foundation Reviews — Trustpilot","type":"community_report","url":"https://www.trustpilot.com/review/aurum-foundation.com"},{"credibility":3,"name":"Aurum.Foundation Investor Alert: How to Trace Lost Funds — OpenPR","type":"news_article","url":"https://www.openpr.com/news/4592437/aurum-foundation-investor-alert-how-to-trace-lost-funds"},{"credibility":3,"name":"Aurum Foundation Review 2026: Legit Platform or High-Risk Crypto Scheme? — The Maker Depot","type":"other","url":"https://themakerdepot.com/aurum-foundation-crypto-platform-risk-review/"}],"summary":"Aurum Foundation was an MLM crypto Ponzi scheme launched from Dubai in mid-2024 that marketed an alleged AI trading bot promising approximately 30% monthly returns. In June 2026, facing regulatory action from at least ten jurisdictions, operators rebranded to 'Neyro' and introduced a NEYRO token before executing a classic exit-scam on July 30, 2026, draining investor wallets and issuing a fabricated 'we got hacked' notice to conceal operator flight.","timeline":[{"date":"2024-07-01","event":"Aurum Foundation launched from Dubai, marketing an alleged AI trading bot promising approximately 30% monthly returns via an MLM recruitment structure.","source":"BehindMLM","source_url":"https://behindmlm.com/companies/aurum-foundation-collapses-we-got-hacked-exit-scam/"},{"date":"2025-02-01","event":"Bryan Benson appointed as public-facing CEO. BehindMLM alleges Benson was hired as a frontman by undisclosed Russian-speaking operators.","source":"BehindMLM","source_url":"https://behindmlm.com/companies/aurum-foundation-collapses-we-got-hacked-exit-scam/"},{"date":"2025-07-18","event":"Bank of Russia added Aurum Foundation to its warning list, citing signs of a financial pyramid scheme.","source":"AURUM Foundation & NEYRO Exposed — Substack","source_url":"https://dehek.substack.com/p/aurum-foundation-and-neyro-exposed"},{"date":"2026-01-22","event":"Nigeria's Securities and Exchange Commission warned that AURUM BOT displayed Ponzi scheme characteristics and was not registered.","source":"AURUM Foundation & NEYRO Exposed — Substack","source_url":"https://dehek.substack.com/p/aurum-foundation-and-neyro-exposed"},{"date":"2026-05-14","event":"New Zealand Financial Markets Authority cautioned consumers about Aurum Foundation being promoted via social media and personal networks.","source":"AURUM Foundation & NEYRO Exposed — Substack","source_url":"https://dehek.substack.com/p/aurum-foundation-and-neyro-exposed"},{"date":"2026-06-11","event":"Poland's Financial Supervision Authority (KNF) filed a criminal referral to the Warsaw Prosecutor over suspected banking fraud connected to Aurum Foundation.","source":"BehindMLM","source_url":"https://behindmlm.com/companies/aurum-foundation-mica-fraud-warning-from-belgium/"},{"date":"2026-06-12","event":"France's AMF placed aurum.foundation on its national crypto-assets blacklist for operating without authorization.","source":"France blacklists Aurum Foundation for fraud — BehindMLM","source_url":"https://behindmlm.com/companies/france-blacklists-aurum-foundation-for-fraud/"},{"date":"2026-06-23","event":"Hong Kong SFC added Aurum Foundation to its Alert List of suspicious virtual asset trading platforms, citing unlicensed activities and false registration claims.","source":"Crypto.news","source_url":"https://crypto.news/hong-kong-sfc-flags-aurum-foundation-as-suspicious-virtual-asset-platform/"},{"date":"2026-06-27","event":"Aurum Foundation announced rebrand to 'Neyro' and introduced the NEYRO token, framing the pivot as a next-generation non-custodial AI trading agent platform.","source":"BehindMLM","source_url":"https://behindmlm.com/companies/aurum-foundation-collapses-we-got-hacked-exit-scam/"},{"date":"2026-06-29","event":"Disruption Banking published an account of attending an Aurum Foundation recruiting call, documenting that operators avoided the word 'investment' while using referral-marketing language.","source":"Disruption Banking","source_url":"https://www.disruptionbanking.com/2026/06/29/we-sat-in-on-aurum-foundations-recruiting-call-they-never-said-investment-once-they-said-referral-marketing/"},{"date":"2026-07-06","event":"Belgium's FSMA issued a MiCA fraud warning, classifying Aurum Foundation as an unauthorized crypto-asset service provider under EU-wide MiCA rules.","source":"Aurum Foundation MiCA fraud warning from Belgium — BehindMLM","source_url":"https://behindmlm.com/companies/aurum-foundation-mica-fraud-warning-from-belgium/"},{"date":"2026-07-14","event":"Australia's ASIC issued a second fraud warning, stating Aurum Foundation appeared to be offering financial services without an Australian financial services licence.","source":"Second Aurum Foundation fraud warning from Australia — BehindMLM","source_url":"https://behindmlm.com/companies/second-aurum-foundation-fraud-warning-from-australia/"},{"date":"2026-07-16","event":"Replacement domain neyrolabs.io was privately registered through a different registrar, nine days before withdrawals were frozen.","source":"BehindMLM","source_url":"https://behindmlm.com/companies/aurum-foundation-collapses-we-got-hacked-exit-scam/"},{"date":"2026-07-26","event":"Aurum Foundation announced withdrawal delays, attributed to a 'Web3 infrastructure transition.'","source":"BehindMLM","source_url":"https://behindmlm.com/companies/aurum-foundation-collapses-we-got-hacked-exit-scam/"},{"date":"2026-07-27","event":"Withdrawals fully disabled. Operators cited 'system update' and 'platform stability.'","source":"BehindMLM","source_url":"https://behindmlm.com/companies/aurum-foundation-collapses-we-got-hacked-exit-scam/"},{"date":"2026-07-29","event":"Ukrainian registrar QHost seized the neyro.network domain.","source":"BehindMLM","source_url":"https://behindmlm.com/companies/aurum-foundation-collapses-we-got-hacked-exit-scam/"},{"date":"2026-07-30","event":"Aurum Foundation platform collapsed. Remaining investor wallets were drained and a fabricated 'we got hacked' statement was released blaming unnamed attackers. Andrew Isaacs subsequently removed LinkedIn credentials as AURUM COO and NEYRO Co-Founder.","source":"BehindMLM","source_url":"https://behindmlm.com/companies/aurum-foundation-collapses-we-got-hacked-exit-scam/"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision c74ce84c-077f-4adb-b632-3ecc3b96a7bccopy