Audit log

Every state-changing event for Odin.Fun: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-26 19:54:27Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 422,351,483

   sig

   3M6F5j69vNQq…6c6E3USNcopyexplorer ↗

   hash

   FrKpM2wp8qUH…2N4rqWAxcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (7241 B) ▸

   {"actor":"system:backfill","investigation_id":"18dce3db-c99a-48b7-933b-b108f1d2e328","kind":"publish","page_slug":"odinfun","published_at":"2026-05-26T19:54:27.263Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Odin.Fun","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://decrypt.co/303687/bitcoin-meme-coin-launchpad-odin-fun-runes","type":"other","url":""},{"credibility":3,"name":"https://thedefiant.io/news/nfts-and-web3/odin-fun-wants-to-replicate-pump-fun-for-bitcoin-runes","type":"other","url":""},{"credibility":3,"name":"https://www.cryptotimes.io/2025/03/16/taproot-wizard-bankrolls-odin-fun-a-bitcoin-trading-platform/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-odin-fun-hack-august-2025","type":"other","url":""},{"credibility":3,"name":"https://www.okx.com/en-eu/learn/bitcoin-hack-odin-fun-price-manipulation","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/bitcoin-memecoin-launchpad-odin-fun-exploited-2025/","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/markets/2025/08/13/memecoin-launchpad-odin-fun-suffers-usd7m-liquidity-exploit","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/334986/bitcoin-meme-coin-launchpad-7-million-liqudity-attack","type":"other","url":""},{"credibility":3,"name":"https://www.theblock.co/post/366704/bitcoin-launchpad-odin-fun-exploit","type":"other","url":""},{"credibility":3,"name":"https://forum.dfinity.org/t/critical-vulnerability-in-sign-in-with-bitcoin-siwb-used-to-attack-odin-fun-learnings-and-discussion/44721","type":"other","url":""},{"credibility":3,"name":"https://mpost.io/odin-fun-halts-platform-activity-following-co-founders-account-breach-and-178k-liquidation/","type":"other","url":""},{"credibility":3,"name":"https://rekt.news/odin-fun-rekt","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.cryptopolitan.com/odin-fun-not-committed-to-trading-timeline/","type":"other","url":""},{"credibility":3,"name":"https://www.mitrade.com/insights/news/live-news/article-3-1051401-20250819","type":"other","url":""},{"credibility":3,"name":"https://www.bitget.com/news/detail/12560604919239","type":"other","url":""},{"credibility":3,"name":"https://quillaudits.medium.com/how-odin-fun-lost-58-2-btc-eb56757c8596","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-odin-fun-hack-august-2025","type":"other","url":""},{"credibility":3,"name":"https://forum.dfinity.org/t/critical-vulnerability-in-sign-in-with-bitcoin-siwb-used-to-attack-odin-fun-learnings-and-discussion/44721","type":"other","url":""},{"credibility":3,"name":"https://www.panewslab.com/en/articles/lohm2jqx","type":"other","url":""},{"credibility":3,"name":"https://forum.dfinity.org/t/lets-learn-from-the-odin-fun-hack-preventing-attack-vectors/43848","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://mpost.io/odin-fun-halts-platform-activity-following-co-founders-account-breach-and-178k-liquidation/","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/odin-fun-memecoins-crash-as-platform-suspends-trading-over-security-breach/","type":"other","url":""},{"credibility":3,"name":"https://www.panewslab.com/en/articles/lohm2jqx","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/markets/2025/08/13/memecoin-launchpad-odin-fun-suffers-usd7m-liquidity-exploit","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/markets/2025/08/13/memecoin-launchpad-odin-fun-suffers-usd7m-liquidity-exploit","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/334986/bitcoin-meme-coin-launchpad-7-million-liqudity-attack","type":"other","url":""},{"credibility":3,"name":"https://www.cryptopolitan.com/odin-fun-not-committed-to-trading-timeline/","type":"other","url":""}]}],"sources_used":[],"summary":"Odin.Fun (ODIN•FUN) is a Bitcoin-based meme coin launchpad and automated market maker launched in January 2025 by Bioniq co-founder Bob Bodily, designed as a Pump.fun analogue for Bitcoin Runes tokens. The platform has suffered at least four confirmed security incidents within its first year of operation, including a critical $7 million (58.2 BTC) AMM liquidity manipulation exploit in August 2025 that left the treasury insolvent and unable to fully compensate affected users. As of the latest available reporting (August–September 2025), the platform remained halted pending security audits, with no committed reopening timeline.","timeline":[{"date":"2025-01-01","event":"Odin.Fun launches as Bitcoin's first meme coin launchpad, built by Bioniq co-founder Bob Bodily, modeling the Pump.fun bonding curve mechanism for Bitcoin Runes tokens.","source":""},{"date":"2025-03-07","event":"Community members report 74 BTC disappearing from Odin.Fun's apparent on-chain records. The team attributes this to a deposit synchronization bug and states user funds are safe, with no third-party verification.","source":""},{"date":"2025-03-14","event":"Taproot Wizards leads a strategic investment round in Odin.Fun; investment amount undisclosed.","source":""},{"date":"2025-04-14","event":"CEO Bob Bodily's Odin.Fun account is compromised via a critical vulnerability in the Sign-In With Bitcoin (SIWB) authentication library; $178,700 in assets liquidated. Platform halts trading and withdrawals. ODINDOG drops 57.6% in 24 hours.","source":""},{"date":"2025-04-15","event":"AstroX releases a patch for the SIWB authentication bypass vulnerability. DFINITY developer forum publishes a post-mortem. Odin.Fun deploys the fix.","source":""},{"date":"2025-06-20","event":"One of the eventual August 2025 exploit attacker wallets (the 'sleeper cell') makes its first deposit, acquiring SATOSHI tokens — identified in post-incident forensics as early-stage exploit preparation.","source":""},{"date":"2025-08-12","event":"AMM liquidity manipulation exploit begins. Attackers using coordinated accounts drain 58.2 BTC (approximately $7 million) from Odin.Fun's liquidity pools within two hours by inflating worthless SATOSHI•NAKAMOTO and ODINPEPE token valuations. Platform reserves drop from 291 BTC to 232.8 BTC. Odin.Fun halts all trading and withdrawals.","source":""},{"date":"2025-08-13","event":"PeckShield discloses the breach on X. CoinDesk, Decrypt, and The Block publish initial reports. Bob Bodily confirms treasury cannot fully cover losses and pledges compensation plans.","source":""},{"date":"2025-08-19","event":"Odin.Fun posts a recovery update confirming stolen funds partially frozen at exchanges, stating it cannot commit to a trading resumption timeline. Halborn, QuillAudits, and OKX publish technical post-mortems characterizing the exploit as involving well-known, auditable vulnerability classes deployed without prior audit.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 231ea7e4-8e3a-40c1-b83d-c6bcc4ed9726copy
2. #2rescoreby systemsystem

   2026-10-10 18:39:45Z
   Score: 22 → 48 (+26)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 22 → 48. Problems weighed by who is responsible: incidents the subject suffered −9.6, concerns that are not fraud −6.4, problems around the subject, caused by others −0.8.
   anchoranchored

   chain

   ●mainnet-betaslot 455,357,704

   sig

   3Z9efVRDsBrC…jY6udhf6copyexplorer ↗

   hash

   6HL6fVbVCYsP…zehKTVFAcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (603 B) ▸

   {"actor":"system","decided_at":"2026-10-10T18:39:45.364Z","decision":"rescore","investigation_id":"18dce3db-c99a-48b7-933b-b108f1d2e328","new_score":48,"page_slug":"odinfun","prev_score":22,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 22 → 48. Problems weighed by who is responsible: incidents the subject suffered −9.6, concerns that are not fraud −6.4, problems around the subject, caused by others −0.8.","score_delta":26,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision efc93f2f-6e30-45b7-bf9d-d7a674e1e6cfcopy
3. #3reviewby reviewerreviewer

   2026-10-27 18:39:23Z
   Score: 48 → 48 (no score change)
   The core facts (58.2 BTC / ~$7M August exploit, reserve figures, August 19 update, March deposit anomaly, Taproot Wizards round) check out against the sources I fetched. Minor issues: launch month is the private beta rather than public launch, and a CoinCentral archive URL points to an unrelated article. The main weakness is staleness: the page ends at August 2025 and current status is unknown. Many cited claims were not individually fetched.
   anchoranchored

   chain

   ●mainnet-betaslot 462,175,183

   sig

   5YTE7kbWD3DL…MCLKGrJpcopyexplorer ↗

   hash

   GvdakbGsBTo5…ACzQCGTdcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1290 B) ▸

   {"actor":"reviewer","artifact_identity":"649e3a6f61edf86f25e789be51bd62bc","decided_at":"2026-10-27T18:39:23.585Z","decision":"review","disputed_pct":0.125,"findings_hash":"CCJRutkoMM1pvMYq5cUHz1HBbat2bnYGtTjavvYr3Efv","investigation_id":"18dce3db-c99a-48b7-933b-b108f1d2e328","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":48,"omissions":{"material":1,"total":1},"page_content_hash":"c49e88358e89d85590a449e3c00bcbf23ff31de6dea8a69c5bb6fb30b19aaa22","page_slug":"odinfun","prev_score":48,"reason":"The core facts (58.2 BTC / ~$7M August exploit, reserve figures, August 19 update, March deposit anomaly, Taproot Wizards round) check out against the sources I fetched. Minor issues: launch month is the private beta rather than public launch, and a CoinCentral archive URL points to an unrelated article. The main weakness is staleness: the page ends at August 2025 and current status is unknown. Many cited claims were not individually fetched.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"sequence_num":3,"subject_status":"unknown","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 58273873-0b2f-4067-b6c5-2e70700117d7copy
4. #4review reviseby judgejudge

   2026-10-27 18:39:23Z
   Score: 48 → 48 (no score change)
   Of 8 reviewed claims, 5 were confirmed, 2 were partially supported (claim_findings[2] launch month was the private beta with public launch about February 2025; claim_findings[5] is supported only through August 19, 2025) and 1 was unverifiable (claim_findings[7], a stored archive link pointing to an unrelated article), giving a disputed share of 12.5%. The core facts of the 58.2 BTC (~$7M) August exploit, the reserve figures, the August 19 update and the March anomaly check out against the sources. The page is revised rather than approved because the review found a material omission and a high-priority coverage gap: the page stops in August 2025 and says nothing about whether trading resumed, the audit was published or users were compensated. The penalty sits in the upper part of the minor band for that reason, softened because the reviewer's confidence was moderate and it could not source the current status.
   anchoranchored

   chain

   ●mainnet-betaslot 462,175,189

   sig

   2yPpCNGkpCfp…GLTw2CGMcopyexplorer ↗

   hash

   AJFuLFFFFNa7…2id2prTfcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (2019 B) ▸

   {"actor":"judge","artifact_identity":"649e3a6f61edf86f25e789be51bd62bc","band_override":null,"decided_at":"2026-10-27T18:39:23.585Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.125,"investigation_id":"18dce3db-c99a-48b7-933b-b108f1d2e328","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":48,"page_slug":"odinfun","prev_score":48,"reason":"Of 8 reviewed claims, 5 were confirmed, 2 were partially supported (claim_findings[2] launch month was the private beta with public launch about February 2025; claim_findings[5] is supported only through August 19, 2025) and 1 was unverifiable (claim_findings[7], a stored archive link pointing to an unrelated article), giving a disputed share of 12.5%. The core facts of the 58.2 BTC (~$7M) August exploit, the reserve figures, the August 19 update and the March anomaly check out against the sources. The page is revised rather than approved because the review found a material omission and a high-priority coverage gap: the page stops in August 2025 and says nothing about whether trading resumed, the audit was published or users were compensated. The penalty sits in the upper part of the minor band for that reason, softened because the reviewer's confidence was moderate and it could not source the current status.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"sequence_num":4,"severity_override":{"applied":false,"band":null,"from_band":"minor","reason":"The material omission (no update after August 19, 2025) is real, but the page already states its information is current only to late August 2025, and the reviewer could not find any source showing a reopening, compensation or shutdown, so there is no sourced contradiction to escalate on. The omission is handled through the upper-band penalty and the revise verdict instead."},"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision fafa8d48-d3a9-4fc5-989d-ce8e493bcfbbcopy