Audit log

Every state-changing event for PeopleDAO: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-30 05:05:38Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 423,089,312

   sig

   4oPutJTPw4gG…rPGXK8zPcopyexplorer ↗

   hash

   3KeJEGawKarC…yDjH9vFZcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (5420 B) ▸

   {"actor":"system:backfill","investigation_id":"28b0aaa9-98f7-4552-b0ea-b8e96024fc77","kind":"publish","page_slug":"peopledao","published_at":"2026-05-30T05:05:38.598Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"PeopleDAO","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.gate.com/learn/articles/what-is-constitutiondao/672","type":"other","url":""},{"credibility":3,"name":"https://people-dao.com/governance/people-token","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/currencies/constitutiondao/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.theblock.co/post/219214/peopledao-hacked-via-google-sheets","type":"other","url":""},{"credibility":3,"name":"https://www.oodaloop.com/technology/2023/03/13/peopledao-hacked-via-google-sheets-120000-worth-of-ether-stolen/","type":"other","url":""},{"credibility":3,"name":"https://dexenetwork.medium.com/peopledao-hacked-for-76-5eth-in-the-most-comically-bad-way-f369ca12f4ea","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.theblock.co/post/219214/peopledao-hacked-via-google-sheets","type":"other","url":""},{"credibility":3,"name":"https://www.request.finance/post/peopledaos-crypto-payroll-hacked-for-76-5-eth-prevention-tips","type":"other","url":""},{"credibility":3,"name":"https://dexenetwork.medium.com/peopledao-hacked-for-76-5eth-in-the-most-comically-bad-way-f369ca12f4ea","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.oodaloop.com/technology/2023/03/13/peopledao-hacked-via-google-sheets-120000-worth-of-ether-stolen/","type":"other","url":""},{"credibility":3,"name":"https://www.theblock.co/post/219214/peopledao-hacked-via-google-sheets","type":"other","url":""},{"credibility":3,"name":"https://en.wikipedia.org/wiki/ZachXBT","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coingecko.com/en/coins/constitutiondao","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/currencies/constitutiondao/","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/cmc-ai/constitutiondao/price-prediction/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://peopledao.mirror.xyz/nPEAVJ7NPKwrFKwNQ1A960LyrU_Nh2etT02lLvORCcg","type":"other","url":""},{"credibility":3,"name":"https://people-dao.com/","type":"other","url":""},{"credibility":3,"name":"https://www.theblock.co/post/219214/peopledao-hacked-via-google-sheets","type":"other","url":""}]}],"sources_used":[],"summary":"PeopleDAO is a community-governed decentralized autonomous organization that emerged from ConstitutionDAO in late 2021, adopting the PEOPLE token as its governance instrument and operating as a meta-DAO incubator for social-good subDAOs. In March 2023, the organization suffered a significant treasury exploit in which an attacker stole 76.5 ETH (approximately $120,000) by exploiting a publicly shared Google Sheets payroll form with edit access — a failure of basic operational security controls. The stolen funds were moved to centralized exchanges and no recovery has been confirmed; the incident drew engagement from on-chain investigator ZachXBT and blockchain security firm SlowMist.","timeline":[{"date":"2021-11-01","event":"ConstitutionDAO forms with the goal of purchasing a copy of the U.S. Constitution at Sotheby's auction, raising over $47 million in ETH from 17,000+ contributors and issuing the PEOPLE ERC-20 token.","source":""},{"date":"2021-11-18","event":"ConstitutionDAO is outbid at the Sotheby's auction by hedge fund manager Ken Griffin, whose bid of approximately $43.2 million wins. The DAO announces dissolution and opens redemptions.","source":""},{"date":"2021-12-06","event":"Community members vote via Snapshot to form PeopleDAO, adopting the PEOPLE token as the governance instrument for a new meta-DAO structure focused on social good and Web3 coordination.","source":""},{"date":"2022-06-01","event":"PeopleDAO has incubated two subDAOs (PandaDAO and LanguageDAO) and one community project (Constitution Fractionalized), establishing its operational model as a subDAO accelerator.","source":""},{"date":"2023-03-06","event":"PeopleDAO's accounting lead accidentally posts a Google Sheets payroll form with edit access to a public Discord channel. An attacker inserts a fraudulent payment row for 76.5 ETH, conceals it, and the entry passes multi-sig review. The attacker receives 76.5 ETH (~$120,000) from the Gnosis Safe treasury.","source":""},{"date":"2023-03-06","event":"The attacker transfers stolen funds: 69.2 ETH ($110,000) to HitBTC and 7.3 ETH to Binance.","source":""},{"date":"2023-03-13","event":"PeopleDAO publicly discloses the exploit. The organization announces it is working with ZachXBT and SlowMist to trace the attacker and has reported the incident to U.S. law enforcement and the exchanges involved. A 10% white hat bounty is offered.","source":""},{"date":"2025-11-01","event":"KuCoin delists PEOPLE from Spot Margin Trading services, reducing leveraged trading access to the token.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision e975c4ec-34c9-4699-8b57-bd1c9c7668b5copy
2. #2reviewby reviewerreviewer

   2026-08-19 04:00:08Z
   Score: 42 → 42 (no score change)
   All ConstitutionDAO/PeopleDAO formation facts and hack details (amount, method, date, exchange destinations, and cooperative post-incident response) were independently confirmed against multiple primary and secondary sources with no contradictions. The page correctly frames PeopleDAO as the victim of an external attacker rather than a perpetrator, and does not use unhedged fraud language. The only defect found is a minor date/context error on the KuCoin delisting timeline entry (off by ~2 weeks, and presented without noting it was a routine multi-token action). The larger limitation is structural: the section bodies delivered to this review were empty, so roughly half the page's actual prose could not be fact-checked.
   anchoranchored

   chain

   ●mainnet-betaslot 443,509,264

   sig

   4QexXL6ii166…NsrM19Y7copyexplorer ↗

   hash

   Fodyfdg8V3gQ…3Py1Q684copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1072 B) ▸

   {"actor":"reviewer","decided_at":"2026-08-19T04:00:08.702Z","decision":"review","investigation_id":"28b0aaa9-98f7-4552-b0ea-b8e96024fc77","new_score":42,"page_slug":"peopledao","prev_score":42,"reason":"All ConstitutionDAO/PeopleDAO formation facts and hack details (amount, method, date, exchange destinations, and cooperative post-incident response) were independently confirmed against multiple primary and secondary sources with no contradictions. The page correctly frames PeopleDAO as the victim of an external attacker rather than a perpetrator, and does not use unhedged fraud language. The only defect found is a minor date/context error on the KuCoin delisting timeline entry (off by ~2 weeks, and presented without noting it was a routine multi-token action). The larger limitation is structural: the section bodies delivered to this review were empty, so roughly half the page's actual prose could not be fact-checked.","score_delta":0,"sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 81c9f513-ddd0-4618-9fc8-620b5acfe590copy
3. #3review approve with notesby judgejudge

   2026-08-19 04:00:08Z
   Score: 42 → 48 (+6)
   This is a calibration-only adjudication; content accuracy was not disputed (disputed_pct 0.0%, 13/14 claims confirmed, 1 partially_supported on a ~2-week timeline date). The substantive incident is a March 2023 theft of 76.5 ETH (~$120K) enabled by PeopleDAO's own operational-security failure (a publicly editable payroll Google Sheet) rather than pure third-party exploitation of code outside the DAO's control — per the page's own scoring instruction, own-negligence in a still-operating, non-convicted entity places this correctly in the WARNING band (20-49), consistent with the reviewer's incident_attributions[0]. Within that band, strong mitigating post-incident conduct — public disclosure within a week, voluntary law-enforcement and exchange notification, cooperation with ZachXBT and SlowMist, a good-faith 10% bounty offer, a comparatively small absolute loss, and no recurrence in the 3+ years since — justifies moving toward the top of the band rather than the middle. I agree with the reviewer's recommended_score of 48 (current_score 42), a modest 6-point lift that keeps the band unchanged and reflects conduct rather than facts in dispute. Notes: (Correct the KuCoin delisting timeline entry: the announcement was dated Nov 11, 2025 with an effective window of Nov 17-21, 2025 (UTC), not Nov 1, 2025.) (Note in that same entry that KuCoin's delisting was a routine, simultaneous action across six unrelated tokens (C, FLR, HOME, SPK, PEOPLE, RESOLV), not a PEOPLE-specific risk signal.) (Regenerate the six page sections before publication confidence is placed in them — as delivered to review, all `heading` and `content` fields were empty, so section prose could not be fact-checked.)
   anchoranchored

   chain

   ●mainnet-betaslot 443,509,267

   sig

   4GX7hBufZWxR…w2m4E7rQcopyexplorer ↗

   hash

   962ArQtoSb7x…ewWcVCbrcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (2066 B) ▸

   {"actor":"judge","decided_at":"2026-08-19T04:00:08.702Z","decision":"review_approve_with_notes","investigation_id":"28b0aaa9-98f7-4552-b0ea-b8e96024fc77","new_score":48,"page_slug":"peopledao","prev_score":42,"reason":"This is a calibration-only adjudication; content accuracy was not disputed (disputed_pct 0.0%, 13/14 claims confirmed, 1 partially_supported on a ~2-week timeline date). The substantive incident is a March 2023 theft of 76.5 ETH (~$120K) enabled by PeopleDAO's own operational-security failure (a publicly editable payroll Google Sheet) rather than pure third-party exploitation of code outside the DAO's control — per the page's own scoring instruction, own-negligence in a still-operating, non-convicted entity places this correctly in the WARNING band (20-49), consistent with the reviewer's incident_attributions[0]. Within that band, strong mitigating post-incident conduct — public disclosure within a week, voluntary law-enforcement and exchange notification, cooperation with ZachXBT and SlowMist, a good-faith 10% bounty offer, a comparatively small absolute loss, and no recurrence in the 3+ years since — justifies moving toward the top of the band rather than the middle. I agree with the reviewer's recommended_score of 48 (current_score 42), a modest 6-point lift that keeps the band unchanged and reflects conduct rather than facts in dispute. Notes: (Correct the KuCoin delisting timeline entry: the announcement was dated Nov 11, 2025 with an effective window of Nov 17-21, 2025 (UTC), not Nov 1, 2025.) (Note in that same entry that KuCoin's delisting was a routine, simultaneous action across six unrelated tokens (C, FLR, HOME, SPK, PEOPLE, RESOLV), not a PEOPLE-specific risk signal.) (Regenerate the six page sections before publication confidence is placed in them — as delivered to review, all `heading` and `content` fields were empty, so section prose could not be fact-checked.)","score_delta":6,"sequence_num":3,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 200c09bf-418c-47b5-a31b-8e2fe25dc9a2copy
4. #4reviewby reviewerreviewer

   2026-08-25 07:32:42Z
   Score: 52 → 52 (no score change)
   The page's core narrative — PeopleDAO's origins as a ConstitutionDAO successor and the March 2023 social-engineering theft of ~76.5 ETH — is strongly corroborated by multiple independent sources (Web3 Is Going Great, The Block, and independent search corroboration of CryptoTVplus and Hacker News coverage), including specific figures like the 69.2 ETH/7.3 ETH exchange split and the six-of-nine multisig detail. Weaker points include unverified inferential claims about specific control gaps (reconciliation, verification steps), an overstated characterization of the loss as a 'significant portion' of the $5.4M treasury (roughly 2.2%), a token-metrics snapshot whose specific numbers and 'early 2026' dating don't precisely match independently found data, and a timeline date for the KuCoin delisting that is off by roughly two to three weeks from KuCoin's own announcement.
   anchoranchored

   chain

   ●mainnet-betaslot 443,512,294

   sig

   22UJ13QjB7SR…bwS8Ybppcopyexplorer ↗

   hash

   Bh1zejKVG5ys…FewsTxUCcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1222 B) ▸

   {"actor":"reviewer","decided_at":"2026-08-25T07:32:42.329Z","decision":"review","investigation_id":"28b0aaa9-98f7-4552-b0ea-b8e96024fc77","new_score":52,"page_slug":"peopledao","prev_score":52,"reason":"The page's core narrative — PeopleDAO's origins as a ConstitutionDAO successor and the March 2023 social-engineering theft of ~76.5 ETH — is strongly corroborated by multiple independent sources (Web3 Is Going Great, The Block, and independent search corroboration of CryptoTVplus and Hacker News coverage), including specific figures like the 69.2 ETH/7.3 ETH exchange split and the six-of-nine multisig detail. Weaker points include unverified inferential claims about specific control gaps (reconciliation, verification steps), an overstated characterization of the loss as a 'significant portion' of the $5.4M treasury (roughly 2.2%), a token-metrics snapshot whose specific numbers and 'early 2026' dating don't precisely match independently found data, and a timeline date for the KuCoin delisting that is off by roughly two to three weeks from KuCoin's own announcement.","score_delta":0,"sequence_num":4,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision f5cf0bc8-b27c-4554-9034-f85df694e8b8copy
5. #5review approveby judgejudge

   2026-08-25 07:32:42Z
   Score: 52 → 52 (no score change)
   The fact-check found the page's core claims hold up: 34 of 42 statements were confirmed outright, disputed_pct is 7.14% (well within the approve range), and there is no link rot or stale-source risk on any citation. Most importantly, the page's highest-severity content -- the March 2023 treasury theft (date, ~76.5 ETH amount, the 69.2/7.3 ETH exchange split, six-of-nine multisig detail, FBI/FTC reporting, and white-hat bounty offer) -- was independently confirmed by two separate primary sources (claim_findings[3], [12], [17]-[24]). The single disputed claim (claim_findings[27]) is a characterization issue, not a factual error: the page calls the $120,000 loss a 'significant portion' of the $5.4M treasury when it is roughly 2.2%, which overstates severity against the subject rather than understating a real risk, and both underlying dollar figures are independently confirmed elsewhere on the page. The remaining partially_supported items are minor: a KuCoin delisting date off by two to three weeks (claim_findings[41]), a token-metrics snapshot whose exact figures and 'early 2026' label don't precisely match an independently found July 2026 archive (claim_findings[33]), and two plausible but uncited inferences about control gaps presented as established fact rather than analysis (claim_findings[25]-[26]). On the coverage_gaps question: the reviewer marked 'community governance disputes' as a high-priority gap, but on inspection this is a purely speculative 'check whether any exist' suggestion with no evidence cited that such disputes actually occurred, and the reviewer itself attributes the priority framing to reviewer-guidance rather than a finding surfaced during research. Unlike the medium-priority gaps (treasury reconciliation, exchange-side fund tracing), which follow directly from facts already established on the page, this one is not grounded in anything found. Treating it as an automatic override would let phrasing in the review instructions manufacture a denial trigger rather than the page's actual content warranting one, so it is treated as a legitimate suggestion for future expansion, not as a deficiency requiring revision.
   anchoranchored

   chain

   ●mainnet-betaslot 443,512,300

   sig

   3ezdK5LFTyDQ…JG9LdLB8copyexplorer ↗

   hash

   4FbFiozp8HBc…1nmyxAAEcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (2518 B) ▸

   {"actor":"judge","decided_at":"2026-08-25T07:32:42.329Z","decision":"review_approve","investigation_id":"28b0aaa9-98f7-4552-b0ea-b8e96024fc77","new_score":52,"page_slug":"peopledao","prev_score":52,"reason":"The fact-check found the page's core claims hold up: 34 of 42 statements were confirmed outright, disputed_pct is 7.14% (well within the approve range), and there is no link rot or stale-source risk on any citation. Most importantly, the page's highest-severity content -- the March 2023 treasury theft (date, ~76.5 ETH amount, the 69.2/7.3 ETH exchange split, six-of-nine multisig detail, FBI/FTC reporting, and white-hat bounty offer) -- was independently confirmed by two separate primary sources (claim_findings[3], [12], [17]-[24]). The single disputed claim (claim_findings[27]) is a characterization issue, not a factual error: the page calls the $120,000 loss a 'significant portion' of the $5.4M treasury when it is roughly 2.2%, which overstates severity against the subject rather than understating a real risk, and both underlying dollar figures are independently confirmed elsewhere on the page. The remaining partially_supported items are minor: a KuCoin delisting date off by two to three weeks (claim_findings[41]), a token-metrics snapshot whose exact figures and 'early 2026' label don't precisely match an independently found July 2026 archive (claim_findings[33]), and two plausible but uncited inferences about control gaps presented as established fact rather than analysis (claim_findings[25]-[26]). On the coverage_gaps question: the reviewer marked 'community governance disputes' as a high-priority gap, but on inspection this is a purely speculative 'check whether any exist' suggestion with no evidence cited that such disputes actually occurred, and the reviewer itself attributes the priority framing to reviewer-guidance rather than a finding surfaced during research. Unlike the medium-priority gaps (treasury reconciliation, exchange-side fund tracing), which follow directly from facts already established on the page, this one is not grounded in anything found. Treating it as an automatic override would let phrasing in the review instructions manufacture a denial trigger rather than the page's actual content warranting one, so it is treated as a legitimate suggestion for future expansion, not as a deficiency requiring revision.","score_delta":0,"sequence_num":5,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 92a07652-cfba-4077-99b8-39e6c2d60cadcopy
6. #6reviewby reviewerreviewer

   2026-10-16 17:58:00Z
   Score: 52 → 52 (no score change)
   The page's core narrative — ConstitutionDAO's failed $47M Sotheby's bid, the Dec 6, 2021 Snapshot vote founding PeopleDAO, and the March 2023 76.5 ETH ($120,000) Google Sheets social-engineering theft with its FBI/FTC report, ZachXBT/SlowMist engagement, 10% bounty, and HitBTC/Binance fund flows — is well supported by multiple independent, credible sources (The Block, Forklog, web3isgoinggreat, CNBC, Fortune, Binance Research) and the page's attribution of the incident as third-party theft rather than insider fraud is accurate. Current token statistics (supply, GitHub activity, KuCoin delisting, PolitiFi price narrative, dormant website) all check out against live sources. The main weakness is a recurring, unverified $5.4 million PeopleDAO treasury/funding figure that appears in three places and is not supported by the cited official website or by the one PeopleDAO internal document found during this review (which suggests a far smaller treasury in 2022); this figure should be sourced properly or removed. Secondary issues are minor: one timeline entry's single cited source (The Block) does not itself support every detail attributed to it, the Etherscan snapshot is mislabeled 'early 2026' when its archive timestamp is from July 2026, and one news citation (CryptoTVplus) could not be reached across two attempts, though the claim it backs is otherwise well corroborated.
   anchoranchored

   chain

   ●mainnet-betaslot 457,728,924

   sig

   3jD7DhUf7YzX…cfKkt7hzcopyexplorer ↗

   hash

   3PzT7SsVLq1e…BJQaYP4jcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1984 B) ▸

   {"actor":"reviewer","artifact_identity":"9c64149e4bb44f9b63106c7c717f4cf9","decided_at":"2026-10-16T17:57:59.832Z","decision":"review","disputed_pct":0.1667,"findings_hash":"DV2cSRbWQxgsvdTsHYhGCuxSyicU7sNLBBA1PRNNvyUw","investigation_id":"28b0aaa9-98f7-4552-b0ea-b8e96024fc77","mode":"findings_only","new_score":52,"page_content_hash":"8be33d62edc6935d9041c46cb02fa55b6f1d32eefd234950bf4fc2fd6186496d","page_slug":"peopledao","prev_score":52,"reason":"The page's core narrative — ConstitutionDAO's failed $47M Sotheby's bid, the Dec 6, 2021 Snapshot vote founding PeopleDAO, and the March 2023 76.5 ETH ($120,000) Google Sheets social-engineering theft with its FBI/FTC report, ZachXBT/SlowMist engagement, 10% bounty, and HitBTC/Binance fund flows — is well supported by multiple independent, credible sources (The Block, Forklog, web3isgoinggreat, CNBC, Fortune, Binance Research) and the page's attribution of the incident as third-party theft rather than insider fraud is accurate. Current token statistics (supply, GitHub activity, KuCoin delisting, PolitiFi price narrative, dormant website) all check out against live sources. The main weakness is a recurring, unverified $5.4 million PeopleDAO treasury/funding figure that appears in three places and is not supported by the cited official website or by the one PeopleDAO internal document found during this review (which suggests a far smaller treasury in 2022); this figure should be sourced properly or removed. Secondary issues are minor: one timeline entry's single cited source (The Block) does not itself support every detail attributed to it, the Etherscan snapshot is mislabeled 'early 2026' when its archive timestamp is from July 2026, and one news citation (CryptoTVplus) could not be reached across two attempts, though the claim it backs is otherwise well corroborated.","score_delta":0,"sequence_num":6,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision a9fc9602-991f-48b7-abd0-40b195dc6f8dcopy