← Odin.Fun1 decision on this page
Audit log
Every state-changing event for Odin.Fun: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.
- #1publishby system:backfill2026-05-26 19:54:27ZScore: ? → ? (no score change)anchoranchored
- chain
- ●mainnet-betaslot 422,351,483
- sig
3M6F5j69vNQq…6c6E3USNexplorer ↗- hash
FrKpM2wp8qUH…2N4rqWAxsha256 → base58
verifying row…full verify ↗canonical bytes (7241 B) ▸
{"actor":"system:backfill","investigation_id":"18dce3db-c99a-48b7-933b-b108f1d2e328","kind":"publish","page_slug":"odinfun","published_at":"2026-05-26T19:54:27.263Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Odin.Fun","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://decrypt.co/303687/bitcoin-meme-coin-launchpad-odin-fun-runes","type":"other","url":""},{"credibility":3,"name":"https://thedefiant.io/news/nfts-and-web3/odin-fun-wants-to-replicate-pump-fun-for-bitcoin-runes","type":"other","url":""},{"credibility":3,"name":"https://www.cryptotimes.io/2025/03/16/taproot-wizard-bankrolls-odin-fun-a-bitcoin-trading-platform/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-odin-fun-hack-august-2025","type":"other","url":""},{"credibility":3,"name":"https://www.okx.com/en-eu/learn/bitcoin-hack-odin-fun-price-manipulation","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/bitcoin-memecoin-launchpad-odin-fun-exploited-2025/","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/markets/2025/08/13/memecoin-launchpad-odin-fun-suffers-usd7m-liquidity-exploit","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/334986/bitcoin-meme-coin-launchpad-7-million-liqudity-attack","type":"other","url":""},{"credibility":3,"name":"https://www.theblock.co/post/366704/bitcoin-launchpad-odin-fun-exploit","type":"other","url":""},{"credibility":3,"name":"https://forum.dfinity.org/t/critical-vulnerability-in-sign-in-with-bitcoin-siwb-used-to-attack-odin-fun-learnings-and-discussion/44721","type":"other","url":""},{"credibility":3,"name":"https://mpost.io/odin-fun-halts-platform-activity-following-co-founders-account-breach-and-178k-liquidation/","type":"other","url":""},{"credibility":3,"name":"https://rekt.news/odin-fun-rekt","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.cryptopolitan.com/odin-fun-not-committed-to-trading-timeline/","type":"other","url":""},{"credibility":3,"name":"https://www.mitrade.com/insights/news/live-news/article-3-1051401-20250819","type":"other","url":""},{"credibility":3,"name":"https://www.bitget.com/news/detail/12560604919239","type":"other","url":""},{"credibility":3,"name":"https://quillaudits.medium.com/how-odin-fun-lost-58-2-btc-eb56757c8596","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-odin-fun-hack-august-2025","type":"other","url":""},{"credibility":3,"name":"https://forum.dfinity.org/t/critical-vulnerability-in-sign-in-with-bitcoin-siwb-used-to-attack-odin-fun-learnings-and-discussion/44721","type":"other","url":""},{"credibility":3,"name":"https://www.panewslab.com/en/articles/lohm2jqx","type":"other","url":""},{"credibility":3,"name":"https://forum.dfinity.org/t/lets-learn-from-the-odin-fun-hack-preventing-attack-vectors/43848","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://mpost.io/odin-fun-halts-platform-activity-following-co-founders-account-breach-and-178k-liquidation/","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/odin-fun-memecoins-crash-as-platform-suspends-trading-over-security-breach/","type":"other","url":""},{"credibility":3,"name":"https://www.panewslab.com/en/articles/lohm2jqx","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/markets/2025/08/13/memecoin-launchpad-odin-fun-suffers-usd7m-liquidity-exploit","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/markets/2025/08/13/memecoin-launchpad-odin-fun-suffers-usd7m-liquidity-exploit","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/334986/bitcoin-meme-coin-launchpad-7-million-liqudity-attack","type":"other","url":""},{"credibility":3,"name":"https://www.cryptopolitan.com/odin-fun-not-committed-to-trading-timeline/","type":"other","url":""}]}],"sources_used":[],"summary":"Odin.Fun (ODIN•FUN) is a Bitcoin-based meme coin launchpad and automated market maker launched in January 2025 by Bioniq co-founder Bob Bodily, designed as a Pump.fun analogue for Bitcoin Runes tokens. The platform has suffered at least four confirmed security incidents within its first year of operation, including a critical $7 million (58.2 BTC) AMM liquidity manipulation exploit in August 2025 that left the treasury insolvent and unable to fully compensate affected users. As of the latest available reporting (August–September 2025), the platform remained halted pending security audits, with no committed reopening timeline.","timeline":[{"date":"2025-01-01","event":"Odin.Fun launches as Bitcoin's first meme coin launchpad, built by Bioniq co-founder Bob Bodily, modeling the Pump.fun bonding curve mechanism for Bitcoin Runes tokens.","source":""},{"date":"2025-03-07","event":"Community members report 74 BTC disappearing from Odin.Fun's apparent on-chain records. The team attributes this to a deposit synchronization bug and states user funds are safe, with no third-party verification.","source":""},{"date":"2025-03-14","event":"Taproot Wizards leads a strategic investment round in Odin.Fun; investment amount undisclosed.","source":""},{"date":"2025-04-14","event":"CEO Bob Bodily's Odin.Fun account is compromised via a critical vulnerability in the Sign-In With Bitcoin (SIWB) authentication library; $178,700 in assets liquidated. Platform halts trading and withdrawals. ODINDOG drops 57.6% in 24 hours.","source":""},{"date":"2025-04-15","event":"AstroX releases a patch for the SIWB authentication bypass vulnerability. DFINITY developer forum publishes a post-mortem. Odin.Fun deploys the fix.","source":""},{"date":"2025-06-20","event":"One of the eventual August 2025 exploit attacker wallets (the 'sleeper cell') makes its first deposit, acquiring SATOSHI tokens — identified in post-incident forensics as early-stage exploit preparation.","source":""},{"date":"2025-08-12","event":"AMM liquidity manipulation exploit begins. Attackers using coordinated accounts drain 58.2 BTC (approximately $7 million) from Odin.Fun's liquidity pools within two hours by inflating worthless SATOSHI•NAKAMOTO and ODINPEPE token valuations. Platform reserves drop from 291 BTC to 232.8 BTC. Odin.Fun halts all trading and withdrawals.","source":""},{"date":"2025-08-13","event":"PeckShield discloses the breach on X. CoinDesk, Decrypt, and The Block publish initial reports. Bob Bodily confirms treasury cannot fully cover losses and pledges compensation plans.","source":""},{"date":"2025-08-19","event":"Odin.Fun posts a recovery update confirming stolen funds partially frozen at exchanges, stating it cannot commit to a trading resumption timeline. Halborn, QuillAudits, and OKX publish technical post-mortems characterizing the exploit as involving well-known, auditable vulnerability classes deployed without prior audit.","source":""}]},"v":1}Verify offline (run on your own machine)python -m src.verify_decision 231ea7e4-8e3a-40c1-b83d-c6bcc4ed9726
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine —
python -m src.verify_decision <event_id>.