← Pando Rings1 decision on this page
Audit log
Every state-changing event for Pando Rings: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.
- #1publishby system:backfill2026-05-19 20:59:33ZScore: ? → ? (no score change)anchoranchored
- chain
- ●mainnet-betaslot 420,846,219
- sig
2Zm2zDyesTMv…TuRG4AiKexplorer ↗- hash
FPvpt8Ms73Wo…MHthAMxSsha256 → base58
verifying row…full verify ↗canonical bytes (5831 B) ▸
{"actor":"system:backfill","investigation_id":"61bd9389-c198-41d1-9503-211371ac21d4","kind":"publish","page_slug":"pando-rings","published_at":"2026-05-19T20:59:33.896Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Pando Rings","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://pando.im/rings/"},{"credibility":3,"name":"","type":"other","url":"https://github.com/fox-one/pando"},{"credibility":3,"name":"","type":"other","url":"https://leastauthority.com/blog/audits/audit-of-compound-pando-for-fox-one/"},{"credibility":3,"name":"","type":"other","url":"https://docs.pando.im/docs/security/mtg/"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://pando.im/news/2022/2022-11-06-alert-to-pando-community-hack-of-pando-rings/"},{"credibility":3,"name":"","type":"other","url":"https://immunebytes.com/blog/pando-rings-hack-nov-5-2022-detailed-analysis/"},{"credibility":3,"name":"","type":"other","url":"https://www.web3isgoinggreat.com/?id=pando-exploited-for-20-million"},{"credibility":3,"name":"","type":"other","url":"https://x.com/pando_im/status/1589113232899575809"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://pando.im/news/2022/2022-11-06-alert-to-pando-community-hack-of-pando-rings/"},{"credibility":3,"name":"","type":"other","url":"https://immunebytes.com/blog/pando-rings-hack-nov-5-2022-detailed-analysis/"},{"credibility":3,"name":"","type":"other","url":"https://x.com/pando_im/status/1589113232899575809"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://github.com/fox-one/pando"},{"credibility":3,"name":"","type":"other","url":"https://leastauthority.com/blog/audits/audit-of-compound-pando-for-fox-one/"},{"credibility":3,"name":"","type":"other","url":"https://docs.pando.im/docs/security/mtg/"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://pando.im/news/2022/2022-11-06-alert-to-pando-community-hack-of-pando-rings/"},{"credibility":3,"name":"","type":"other","url":"https://pando.im/news/2023/2023-10-24-rings-and-leaf-resumes-collateral-redemption-and-withdrawal/"},{"credibility":3,"name":"","type":"other","url":"https://pando.im/news/2023/2023-12-18-further-service-restoration-of-pando-leaf/"},{"credibility":3,"name":"","type":"other","url":"https://www.halborn.com/blog/post/explained-the-mixin-network-hack-september-2023"},{"credibility":3,"name":"","type":"other","url":"https://defillama.com/protocol/pando-rings"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://pando.im/news/2022/2022-11-06-alert-to-pando-community-hack-of-pando-rings/"},{"credibility":3,"name":"","type":"other","url":"https://www.halborn.com/blog/post/explained-the-mixin-network-hack-september-2023"},{"credibility":3,"name":"","type":"other","url":"https://defillama.com/protocol/pando-rings"},{"credibility":3,"name":"","type":"other","url":"https://immunebytes.com/blog/pando-rings-hack-nov-5-2022-detailed-analysis/"}]}],"sources_used":[],"summary":"Pando Rings is an algorithmic lending and borrowing protocol built on the Mixin Network by Fox One, modeled on Compound Finance. On November 5, 2022, an attacker exploited a price oracle vulnerability tied to the sBTC-WBTC LP token on 4swap to drain approximately $21.9 million in ETH, BTC, and EOS from the protocol; an additional ~$50 million remained frozen in the attacker's wallets. The protocol subsequently suffered further losses in the September 2023 Mixin Network infrastructure breach, and as of late 2023 remained in a limited operational state with interest accrual and liquidations suspended.","timeline":[{"date":"2021-08-04","event":"Pando Seed (PS) launched with backing from BigONE, Exin, FOX, Poolin, and the Mixin team, formalizing the multi-stakeholder MTG governance structure.","source":""},{"date":"2021-10-20","event":"Least Authority completes security audit of Pando Rings (then called Compound on Mixin) and Pando Leaf on behalf of Fox One.","source":""},{"date":"2022-11-05","event":"Attacker exploits the Pando Rings price oracle by manipulating the sBTC-WBTC LP token price on 4swap. Approximately $70 million in theft attempted; $21,877,098.03 in ETH, BTC, and EOS successfully transferred out before intervention. TVL drops ~44%.","source":""},{"date":"2022-11-06","event":"Pando publicly discloses the hack, halts all protocol services, engages SlowMist for tracing, contacts law enforcement, and pledges full reimbursement to affected users. Approximately $50 million in funds frozen in attacker wallets with Mixin Network assistance. ~$2.36 million in EOS frozen.","source":""},{"date":"2022-11-06","event":"Pando posts public ETH refund address (0xfB42824eda8b29873839e6d89FEc2857c1a4E2dF) seeking negotiated return of stolen funds.","source":""},{"date":"2023-09-23","event":"Mixin Network suffers a separate $200 million infrastructure breach via its Google Cloud database. Pando users suffer additional losses: USDT (ERC20) down ~90%, ETH down ~70%, BTC down ~10%, BOX down ~7.3%.","source":""},{"date":"2023-10-17","event":"Pando Swap (4swap) resumes liquidity management functions.","source":""},{"date":"2023-10-24","event":"Pando Rings and Pando Leaf resume limited collateral redemption and debt repayment. Interest accrual and liquidations remain paused.","source":""},{"date":"2023-12-18","event":"Pando announces further service restoration for Pando Leaf on the legacy Mixin Network. Full restoration contingent on new Mixin Mainnet launch.","source":""}]},"v":1}Verify offline (run on your own machine)python -m src.verify_decision b3bd4219-b96c-4b4f-bfd6-370d3403849b
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine —
python -m src.verify_decision <event_id>.