Audit log

Every state-changing event for Peapods Finance: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-29 17:31:39Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 422,984,252

   sig

   4yYoY7VneFgA…yMadky7mcopyexplorer ↗

   hash

   xRge9gbzZhr9…YFZ6fsSHcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (7017 B) ▸

   {"actor":"system:backfill","investigation_id":"a52f59b4-f668-4cad-bda9-6dfe809284bb","kind":"publish","page_slug":"peapods-finance","published_at":"2026-05-29T17:31:39.453Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Peapods Finance","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://docs.peapods.finance/","type":"other","url":""},{"credibility":3,"name":"https://docs.peapods.finance/peas-tokenomics","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/peapods-finance","type":"other","url":""},{"credibility":3,"name":"https://docs.peapods.finance/leveraged-volatility-farming-lvf","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://github.com/liqtags/crypto-rekts/blob/main/rekts/Peapods-Finance-Exploit.md","type":"other","url":""},{"credibility":3,"name":"https://x.com/zachxbt/status/1735025990819049968","type":"other","url":""},{"credibility":3,"name":"https://coinpaper.com/2875/over-8-4-million-stolen-in-crypto-exploits-within-a-single-week","type":"other","url":""},{"credibility":3,"name":"https://hacked.slowmist.io/?c=ETH&page=6","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://blog.solidityscan.com/peapods-finance-hack-analysis-bdc5432107a5","type":"other","url":""},{"credibility":3,"name":"https://getfailsafe.com/peapods-finance-hack-200k-exploit-what-happened-and-and-how-to-stay-safe/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://quadrigainitiative.com/casestudy/peapodsfinanceasplongsusdepricemanipulationattack.php","type":"other","url":""},{"credibility":3,"name":"https://thedefiant.io/news/defi/peapods-finance-token-slips-5-percent-on-reported-oracle-issue","type":"other","url":""},{"credibility":3,"name":"https://getfailsafe.com/peapods-finance-hack-200k-exploit-what-happened-and-and-how-to-stay-safe/","type":"other","url":""},{"credibility":3,"name":"https://www.ccn.com/news/technology/this-week-crypto-hacks-gmx-peapods-finance-exploited/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://x.com/zachxbt/status/1735025990819049968","type":"other","url":""},{"credibility":3,"name":"https://coinpaper.com/2875/over-8-4-million-stolen-in-crypto-exploits-within-a-single-week","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://sourcehat.com/audits/PeapodsFinance/","type":"other","url":""},{"credibility":3,"name":"https://github.com/sherlock-audit/2025-01-peapods-finance","type":"other","url":""},{"credibility":3,"name":"https://audits.sherlock.xyz/contests/749","type":"other","url":""},{"credibility":3,"name":"https://x.com/PeapodsFinance/status/1891971076936347935","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://docs.peapods.finance/peas-tokenomics","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/peapods-finance","type":"other","url":""},{"credibility":3,"name":"https://www.coingecko.com/en/coins/peapods-finance","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/currencies/peapods-finance/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://docs.peapods.finance/leveraged-volatility-farming-lvf","type":"other","url":""},{"credibility":3,"name":"https://docs.peapods.finance/liquidations-lvf","type":"other","url":""},{"credibility":3,"name":"https://docs.peapods.finance/risk-ownership-borrowers","type":"other","url":""},{"credibility":3,"name":"https://github.com/sherlock-audit/2025-01-peapods-finance","type":"other","url":""},{"credibility":3,"name":"https://quadrigainitiative.com/casestudy/peapodsfinanceasplongsusdepricemanipulationattack.php","type":"other","url":""}]}],"sources_used":[],"summary":"Peapods Finance is a permissionless DeFi protocol on Ethereum and multiple EVM chains that pioneered a 'Volatility Farming' yield mechanism using asset-backed Pods and Leveraged Volatility Farming (LVF). The protocol has suffered three distinct security incidents since its December 2023 launch, including a $231K reentrancy exploit, a slippage manipulation attack, and a $200K oracle price manipulation attack in July 2025. On-chain investigator ZachXBT identified that the individual behind the initial 2023 'white hat' exploit had dumped a portion of stolen funds before returning the remainder, raising questions about the altruistic framing of that recovery.","timeline":[{"date":"2023-12-11","event":"PEAS token launches on Ethereum via fair-launch model; 88% of supply deployed to Uniswap V3 PEAS/DAI liquidity pools, 12% distributed to team fully vested at TGE.","source":""},{"date":"2023-12-13","event":"Reentrancy exploit on WeightedIndex contract drains $231,192 (104.47 ETH) in PEAS tokens. Exploiter later identified by ZachXBT as likely axxe.eth via timing analysis linking the address to FixedFloat transactions.","source":""},{"date":"2023-12-14","event":"Peapods Finance announces ~90% of stolen funds returned; characterizes incident as 'white hat hack.' ZachXBT publishes on-chain evidence that the exploiter had dumped a portion of stolen funds through FixedFloat before returning the majority.","source":""},{"date":"2023-12-15","event":"Alleged exploiter @0xaxxe tweets that white hat fee was returned to the Peapods team.","source":""},{"date":"2024-01-11","event":"SourceHat audit of Peapods Finance finalizes. All identified high- and low-severity findings reported as resolved. Protocol receives overall 'PASS' rating.","source":""},{"date":"2024-01-26","event":"PEAS token reaches all-time high of approximately $11.21–$11.74, implying a peak market capitalization of approximately $110–$117 million.","source":""},{"date":"2025-02-08","event":"Second exploit: slippage manipulation attack on depositFromPairedLpToken function in legacy Pod code drains approximately $3,500. Peapods team states affected Pod will be reimbursed; notes the vulnerability was in a deprecated version.","source":""},{"date":"2025-02-15","event":"Peapods Finance announces conclusion of Sherlock audit contest for Leveraged Volatility Farming upgrade; 84 independent auditors participated. Contest prize pool was 120,000 USDC.","source":""},{"date":"2025-07-08","event":"Third exploit: oracle price manipulation attack on WETH/aspLONGsUSDe Pod drains approximately 78 ETH ($207,000). Attacker routes funds through ChangeNow and FixedFloat. Second attack attempt is front-run by MEV bot Yoink. Multiple security firms including SlowMist, CertiK, PeckShield, and TenArmor flag the incident. Peapods team attributes breach to 'bad oracle configuration' in a user-created Pod.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision a27b6261-29e4-438d-8886-0f6876a107d7copy
2. #2rescoreby systemsystem

   2026-10-27 06:04:22Z
   Score: 42 → 46 (+4)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 42 → 46. Problems weighed by who is responsible: incidents the subject suffered −12.8, concerns that are not fraud −6.4, problems around the subject, caused by others −1.6; legitimacy credit long-running +2.
   anchoranchored

   chain

   ●mainnet-betaslot 461,964,124

   sig

   5ckKgfHRzMxX…jREgT4THcopyexplorer ↗

   hash

   54CSuFWjqcSY…bvtH2skXcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (646 B) ▸

   {"actor":"system","decided_at":"2026-10-27T06:04:22.270Z","decision":"rescore","investigation_id":"a52f59b4-f668-4cad-bda9-6dfe809284bb","new_score":46,"page_slug":"peapods-finance","prev_score":42,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 42 → 46. Problems weighed by who is responsible: incidents the subject suffered −12.8, concerns that are not fraud −6.4, problems around the subject, caused by others −1.6; legitimacy credit long-running +2.","score_delta":4,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision f0ec7667-a247-41c9-8064-f34a4b0353f0copy
3. #3reviewby reviewerreviewer

   2026-11-02 00:19:33Z
   Score: 46 → 46 (no score change)
   The core incident facts (Dec 2023 reentrancy $231K, Feb 2025 slippage attack $3.5K, July 2025 oracle attack about $200K) and the PEAS tokenomics match the readable sources. The weakest point is the ZachXBT claim that stolen tokens were dumped before the return. That tweet could not be read, and the timing evidence the page describes does not show it. ChangeNow and FixedFloat are called 'mixers' without support. Some details (84 auditors, 70% TVL decline, Feb 15 date, Yoink) could not be checked, and the 'no statement' sentence is time-bound. No shutdown or sanction was found.
   anchoranchored

   chain

   ●mainnet-betaslot 464,291,246

   sig

   5ucLqwEZzkoN…yb2ciKHccopyexplorer ↗

   hash

   6iGPjqvYeTVe…fMFpuP5Ecopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1472 B) ▸

   {"actor":"reviewer","artifact_identity":"7a32e8f45507bf8d5978fe3258d36a8b","blocked_count":1,"decided_at":"2026-11-02T00:19:33.495Z","decision":"review","disputed_pct":0.125,"findings_hash":"BQsbNH5v7DBophdVvd7wuQnYYDuzsUa9w8UewNSTjn7F","investigation_id":"a52f59b4-f668-4cad-bda9-6dfe809284bb","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":46,"omissions":{"material":0,"total":1},"page_content_hash":"10a91b502be96829023595cf2923997693c00e482cbcdb5b4de967c68ce972c3","page_slug":"peapods-finance","prev_score":46,"reason":"The core incident facts (Dec 2023 reentrancy $231K, Feb 2025 slippage attack $3.5K, July 2025 oracle attack about $200K) and the PEAS tokenomics match the readable sources. The weakest point is the ZachXBT claim that stolen tokens were dumped before the return. That tweet could not be read, and the timing evidence the page describes does not show it. ChangeNow and FixedFloat are called 'mixers' without support. Some details (84 auditors, 70% TVL decline, Feb 15 date, Yoink) could not be checked, and the 'no statement' sentence is time-bound. No shutdown or sanction was found.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":8,"sequence_num":3,"subject_status":"operating","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 651e7c9a-4d58-46f0-9305-8f286ce4ff54copy
4. #4review reviseby judgejudge

   2026-11-02 00:19:33Z
   Score: 46 → 46 (no score change)
   The three incidents (December 2023 reentrancy, February 2025 slippage attack, July 2025 oracle attack) and the PEAS token distribution match the sources the reviewer could read (claim_findings[0], [3], [6]). One of eight countable claims could not be verified (claim_findings[7], the 70% TVL decline), giving a disputed rate of about 12.5%, which falls in the minor band. One further finding was blocked by the source and is left out of the count (claim_findings[1], the ZachXBT tweet). The penalty sits in the middle of the band because the summary states that tokens were dumped as fact, while the timing evidence on the page does not show it (claim_findings[1], [2]), and because the page calls ChangeNow and FixedFloat 'mixers' without support (claim_findings[4]). No shutdown or sanction was found, and the only omission is stale market data, rated minor.
   anchoranchored

   chain

   ●mainnet-betaslot 464,291,251

   sig

   42AmWbw8fDST…gBfCtPCEcopyexplorer ↗

   hash

   F9LW64aeFbYh…caqBLUA4copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1544 B) ▸

   {"actor":"judge","artifact_identity":"7a32e8f45507bf8d5978fe3258d36a8b","band_override":null,"blocked_count":1,"decided_at":"2026-11-02T00:19:33.495Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.125,"investigation_id":"a52f59b4-f668-4cad-bda9-6dfe809284bb","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":46,"page_slug":"peapods-finance","prev_score":46,"reason":"The three incidents (December 2023 reentrancy, February 2025 slippage attack, July 2025 oracle attack) and the PEAS token distribution match the sources the reviewer could read (claim_findings[0], [3], [6]). One of eight countable claims could not be verified (claim_findings[7], the 70% TVL decline), giving a disputed rate of about 12.5%, which falls in the minor band. One further finding was blocked by the source and is left out of the count (claim_findings[1], the ZachXBT tweet). The penalty sits in the middle of the band because the summary states that tokens were dumped as fact, while the timing evidence on the page does not show it (claim_findings[1], [2]), and because the page calls ChangeNow and FixedFloat 'mixers' without support (claim_findings[4]). No shutdown or sanction was found, and the only omission is stale market data, rated minor.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":8,"sequence_num":4,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 106739ca-e0c4-4d69-8a80-e5d772c5bf3bcopy
5. #5rescoreby systemsystem

   2026-11-02 00:19:34Z
   Score: 46 → 49 (+3)
   Recalculated after the fact-check of 2026-11-02. Rescored under Scoring v2, the published formula (avoid.net/scoring): 46 → 49. Problems weighed by who is responsible: incidents the subject suffered −9.6, concerns that are not fraud −6.4, problems around the subject, caused by others −1.6; legitimacy credit long-running +2; 1 section(s) set aside until a failed fact-check is resolved.
   anchoranchored

   chain

   ●mainnet-betaslot 464,291,256

   sig

   5eNMj73evgjD…TAx62jcScopyexplorer ↗

   hash

   H19Q6q7JVGsS…u8y5xWQrcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (756 B) ▸

   {"actor":"system","decided_at":"2026-11-02T00:19:33.495Z","decision":"rescore","investigation_id":"a52f59b4-f668-4cad-bda9-6dfe809284bb","new_score":49,"page_slug":"peapods-finance","prev_score":46,"reason":"Recalculated after the fact-check of 2026-11-02. Rescored under Scoring v2, the published formula (avoid.net/scoring): 46 → 49. Problems weighed by who is responsible: incidents the subject suffered −9.6, concerns that are not fraud −6.4, problems around the subject, caused by others −1.6; legitimacy credit long-running +2; 1 section(s) set aside until a failed fact-check is resolved.","score_delta":3,"score_model":"v2","sequence_num":5,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 21e14377-a8ad-46dc-9e8a-d52952e0a0b0copy