Audit log

Every state-changing event for PlayDapp: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-30 12:59:46Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 423,161,156

   sig

   4hhH8c5PHShs…v6Pwp1pqcopyexplorer ↗

   hash

   5xL9JWqttmim…M6zK66S7copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (12855 B) ▸

   {"actor":"system:backfill","investigation_id":"90804b6a-5edb-4b8e-86e6-1fe06e92c10a","kind":"publish","page_slug":"playdapp","published_at":"2026-05-30T12:59:46.504Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"PlayDapp","sections":[{"content":"","heading":"Platform Background","severity":"low","sources":[{"credibility":2,"name":"PlayDapp — IQ.wiki","type":"research","url":"https://iq.wiki/wiki/playdapp"},{"credibility":2,"name":"PlayDapp and ITSB GamePot press release — PR Newswire","type":"official","url":"https://www.prnewswire.com/news-releases/playdapp-and-itsbs-gamepot-join-forces-to-introduce-blockchain-games-to-north-america-301422926.html"},{"credibility":3,"name":"PlayDapp Price Reaches $0.22 on Exchanges — Enterprise Leader","type":"news_article","url":"https://theenterpriseleader.com/2024/01/01/playdapp-price-reaches-0-22-on-exchanges-pla.html"}]},{"content":"","heading":"The February 2024 Private Key Compromise","severity":"critical","sources":[{"credibility":1,"name":"PlayDapp Post-Mortem on the Hacking Incident — PlayDapp Team (Medium)","type":"official","url":"https://playdapp.medium.com/playdapp-post-mortem-on-the-hacking-incident-361b4ddfb5a1"},{"credibility":2,"name":"Hackers Mint 1.79 Billion Crypto Tokens from PlayDapp Gaming Platform — BleepingComputer","type":"news_article","url":"https://www.bleepingcomputer.com/news/security/hackers-mint-179-billion-crypto-tokens-from-playdapp-gaming-platform/"},{"credibility":2,"name":"Crypto Gaming Platform PlayDapp Suffers $290 Million Breach — Elliptic","type":"research","url":"https://www.elliptic.co/blog/crypto-gaming-platform-playdapp-suffers-290-million-breach"},{"credibility":2,"name":"Explained: The PlayDapp Hack (February 2024) — Halborn","type":"research","url":"https://www.halborn.com/blog/post/explained-the-playdapp-hack-february-2024"}]},{"content":"","heading":"Second Minting Event and Full Scope of Losses","severity":"critical","sources":[{"credibility":1,"name":"PlayDapp Post-Mortem on the Hacking Incident — PlayDapp Team (Medium)","type":"official","url":"https://playdapp.medium.com/playdapp-post-mortem-on-the-hacking-incident-361b4ddfb5a1"},{"credibility":2,"name":"PlayDapp Exploit Post-Mortem of a $290M Heist — Nefture Security (Medium)","type":"research","url":"https://medium.com/nefture/playdapp-exploit-post-mortem-of-a-290m-heist-f6803349cde8"},{"credibility":2,"name":"PlayDapp Exploit Continues 4th Day, Losses Reaching $290M — CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/playdapp-exploit-continues-4th-day-losses-reaching-290-million"},{"credibility":1,"name":"Crypto Gaming Platform PlayDapp Loses $290 Million — The Block","type":"news_article","url":"https://www.theblock.co/post/277334/crypto-gaming-platform-playdapp-loses-290-million-worth-of-tokens-in-two-exploits-elliptic"}]},{"content":"","heading":"Alleged Lazarus Group Attribution","severity":"high","sources":[{"credibility":2,"name":"Hackers Mint 1.79 Billion Crypto Tokens from PlayDapp — BleepingComputer","type":"news_article","url":"https://www.bleepingcomputer.com/news/security/hackers-mint-179-billion-crypto-tokens-from-playdapp-gaming-platform/"},{"credibility":2,"name":"How the Lazarus Group is Stepping Up Crypto Hacks — Elliptic","type":"research","url":"https://www.elliptic.co/blog/how-the-lazarus-group-is-stepping-up-crypto-hacks-and-changing-its-tactics"},{"credibility":2,"name":"Crypto Gaming Platform PlayDapp Suffers $290 Million Breach — Elliptic","type":"research","url":"https://www.elliptic.co/blog/crypto-gaming-platform-playdapp-suffers-290-million-breach"}]},{"content":"","heading":"Platform Response and Token Migration","severity":"high","sources":[{"credibility":1,"name":"PlayDapp Post-Mortem on the Hacking Incident — PlayDapp Team (Medium)","type":"official","url":"https://playdapp.medium.com/playdapp-post-mortem-on-the-hacking-incident-361b4ddfb5a1"},{"credibility":1,"name":"PLA to PDA Token Migration Tutorial and FAQ — PlayDapp Team (Medium)","type":"official","url":"https://medium.com/playdappgames/pla-to-pda-token-migration-tutorial-and-faq-a539ded1b42f"},{"credibility":2,"name":"PlayDapp Reveals Migration Plan after Secondary Hack — Metaverse Post","type":"news_article","url":"https://mpost.io/playdapp-reveals-migration-plan-after-secondary-hack-attack-led-to-issuance-of-1-59b-pla-tokens/"},{"credibility":2,"name":"Crypto.com Supports the PlayDapp Token Migration","type":"news_article","url":"https://crypto.com/us/product-news/crypto-com-supports-the-playdapp-token-migration"}]},{"content":"","heading":"Smart Contract Security Analysis","severity":"critical","sources":[{"credibility":2,"name":"Explained: The PlayDapp Hack (February 2024) — Halborn","type":"research","url":"https://www.halborn.com/blog/post/explained-the-playdapp-hack-february-2024"},{"credibility":2,"name":"PlayDapp Exploit Post-Mortem of a $290M Heist — Nefture Security (Medium)","type":"research","url":"https://medium.com/nefture/playdapp-exploit-post-mortem-of-a-290m-heist-f6803349cde8"},{"credibility":2,"name":"Hacker Manipulates PlayDapp's Minting Process, PLA Plummets — Crypto.news","type":"news_article","url":"https://crypto.news/hacker-manipulates-playdapp-minting-pla-plummets/"}]}],"sources_used":[{"credibility":1,"name":"PlayDapp Post-Mortem on the Hacking Incident — PlayDapp Team (Medium)","type":"official","url":"https://playdapp.medium.com/playdapp-post-mortem-on-the-hacking-incident-361b4ddfb5a1"},{"credibility":2,"name":"Crypto Gaming Platform PlayDapp Suffers $290 Million Breach — Elliptic","type":"research","url":"https://www.elliptic.co/blog/crypto-gaming-platform-playdapp-suffers-290-million-breach"},{"credibility":2,"name":"Hackers Mint 1.79 Billion Crypto Tokens from PlayDapp Gaming Platform — BleepingComputer","type":"news_article","url":"https://www.bleepingcomputer.com/news/security/hackers-mint-179-billion-crypto-tokens-from-playdapp-gaming-platform/"},{"credibility":2,"name":"Explained: The PlayDapp Hack (February 2024) — Halborn","type":"research","url":"https://www.halborn.com/blog/post/explained-the-playdapp-hack-february-2024"},{"credibility":2,"name":"PlayDapp Exploit Post-Mortem of a $290M Heist — Nefture Security (Medium)","type":"research","url":"https://medium.com/nefture/playdapp-exploit-post-mortem-of-a-290m-heist-f6803349cde8"},{"credibility":2,"name":"PlayDapp Exploit Continues 4th Day, Losses Reaching $290M — CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/playdapp-exploit-continues-4th-day-losses-reaching-290-million"},{"credibility":1,"name":"Crypto Gaming Platform PlayDapp Loses $290 Million — The Block","type":"news_article","url":"https://www.theblock.co/post/277334/crypto-gaming-platform-playdapp-loses-290-million-worth-of-tokens-in-two-exploits-elliptic"},{"credibility":1,"name":"PLA to PDA Token Migration Tutorial and FAQ — PlayDapp Team (Medium)","type":"official","url":"https://medium.com/playdappgames/pla-to-pda-token-migration-tutorial-and-faq-a539ded1b42f"},{"credibility":2,"name":"PlayDapp Reveals Migration Plan after Secondary Hack — Metaverse Post","type":"news_article","url":"https://mpost.io/playdapp-reveals-migration-plan-after-secondary-hack-attack-led-to-issuance-of-1-59b-pla-tokens/"},{"credibility":2,"name":"How the Lazarus Group is Stepping Up Crypto Hacks — Elliptic","type":"research","url":"https://www.elliptic.co/blog/how-the-lazarus-group-is-stepping-up-crypto-hacks-and-changing-its-tactics"},{"credibility":2,"name":"PlayDapp — IQ.wiki","type":"research","url":"https://iq.wiki/wiki/playdapp"},{"credibility":2,"name":"Hacker Manipulates PlayDapp's Minting Process, PLA Plummets — Crypto.news","type":"news_article","url":"https://crypto.news/hacker-manipulates-playdapp-minting-pla-plummets/"},{"credibility":2,"name":"Crypto.com Supports the PlayDapp Token Migration","type":"news_article","url":"https://crypto.com/us/product-news/crypto-com-supports-the-playdapp-token-migration"},{"credibility":1,"name":"Updates on PLA to PDA Token Migration — PlayDapp Team (Medium)","type":"official","url":"https://medium.com/playdappgames/updates-on-pla-to-pda-token-migration-8fd3ad213069"},{"credibility":2,"name":"PlayDapp Breach 8th Largest Hack in Crypto History at $290M — Crypto.news","type":"news_article","url":"https://crypto.news/playdapp-breach-hack-crypto-290-million/"}],"summary":"PlayDapp is a South Korean blockchain gaming platform and NFT marketplace founded in 2017 and operating on Ethereum and Polygon. In February 2024, an attacker who had obtained PlayDapp's contract deployer private key via a phishing email added themselves as an authorized minter and minted 1.79 billion PLA tokens across two events, representing a nominal loss of approximately $290 million. The platform subsequently suspended the PLA smart contract and executed a 1:1 migration to a new token (PDA) to remediate the illegitimate token supply.","timeline":[{"date":"2017-01-01","event":"PlayDapp (SuperTree) founded in Seoul, South Korea.","source":"IQ.wiki — PlayDapp","source_url":"https://iq.wiki/wiki/playdapp"},{"date":"2019-01-01","event":"CryptoDozer and DozerBird, PlayDapp's first blockchain games, launch on Ethereum. CryptoDozer surpasses CryptoKitties in daily transaction volume.","source":"IQ.wiki — PlayDapp","source_url":"https://iq.wiki/wiki/playdapp"},{"date":"2024-01-16","event":"A PlayDapp team member receives a domain-spoofed phishing email mimicking a trusted exchange partner. Opening the attachment installs a malicious remote-access tool, leading to exfiltration of the contract deployer private key.","source":"PlayDapp Post-Mortem — PlayDapp Team (Medium)","source_url":"https://playdapp.medium.com/playdapp-post-mortem-on-the-hacking-incident-361b4ddfb5a1"},{"date":"2024-02-09","event":"Attacker uses the stolen deployer private key to add wallet 0xD151050d43c28690766f50Ce9ea8686c5D243a40 as an authorized minter. 200 million PLA tokens (~$36.5 million) are minted and dispersal to exchanges begins.","source":"PlayDapp Post-Mortem — PlayDapp Team (Medium)","source_url":"https://playdapp.medium.com/playdapp-post-mortem-on-the-hacking-incident-361b4ddfb5a1"},{"date":"2024-02-10","event":"PlayDapp detects the unauthorized minting. Platform alerts partner exchanges and requests suspension of PLA deposits and withdrawals.","source":"Explained: The PlayDapp Hack — Halborn","source_url":"https://www.halborn.com/blog/post/explained-the-playdapp-hack-february-2024"},{"date":"2024-02-11","event":"PlayDapp broadcasts an on-chain message to the attacker offering a $1 million white-hat bounty in exchange for return of contract control and all stolen assets, with a deadline of February 13 at 3:00 AM ET.","source":"Crypto Gaming Platform PlayDapp Suffers $290 Million Breach — Elliptic","source_url":"https://www.elliptic.co/blog/crypto-gaming-platform-playdapp-suffers-290-million-breach"},{"date":"2024-02-12","event":"Negotiations break down at 3:35 PM. At 10:09 PM, the attacker mints an additional 1.59 billion PLA tokens (~$253.9 million), bringing total illegitimate minting to 1.79 billion tokens and cumulative nominal losses to ~$290.4 million.","source":"PlayDapp Post-Mortem — PlayDapp Team (Medium)","source_url":"https://playdapp.medium.com/playdapp-post-mortem-on-the-hacking-incident-361b4ddfb5a1"},{"date":"2024-02-13","event":"PLA smart contract is paused at 11:05 AM, halting further minting. PlayDapp threatens FBI referral and full law enforcement engagement if the attacker does not comply. Elliptic labels attacker wallets in its compliance tools.","source":"Hackers Mint 1.79 Billion Crypto Tokens from PlayDapp — BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/hackers-mint-179-billion-crypto-tokens-from-playdapp-gaming-platform/"},{"date":"2024-02-26","event":"Snapshot of legitimate PLA token balances taken as the basis for the upcoming 1:1 migration to the new PDA token.","source":"PLA to PDA Token Migration Tutorial and FAQ — PlayDapp Team (Medium)","source_url":"https://medium.com/playdappgames/pla-to-pda-token-migration-tutorial-and-faq-a539ded1b42f"},{"date":"2024-03-13","event":"PlayDapp migration portal launches, allowing PLA holders on Ethereum and Polygon to swap to new ERC-20 PDA tokens at a 1:1 ratio. The new contract includes multi-signature controls.","source":"PlayDapp Post-Mortem — PlayDapp Team (Medium)","source_url":"https://playdapp.medium.com/playdapp-post-mortem-on-the-hacking-incident-361b4ddfb5a1"},{"date":"2024-08-01","event":"PlayDapp reports that over 90 percent of eligible PLA tokens have been successfully migrated to PDA.","source":"Updates on PLA to PDA Token Migration — PlayDapp Team (Medium)","source_url":"https://medium.com/playdappgames/updates-on-pla-to-pda-token-migration-8fd3ad213069"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision cca7fbfb-85d9-4223-8bc3-f7ecce0c3754copy
2. #2reviewby reviewerreviewer

   2026-08-26 11:17:43Z
   Score: 22 → 22 (no score change)
   The page's factual claims in the summary and timeline are well supported by primary and independent secondary sources, including precise reconciling arithmetic between the two minting events and the aggregate $290M figure, and it correctly labels that figure as a nominal (not realized) loss while also documenting the token migration remediation. The main deficiency is structural rather than factual: all six section bodies are empty despite carrying headings and sourced citations, and the narrative omits post-2024 developments (exchange delistings, current token status) and lacks any usable text on the disputed Lazarus Group attribution, whose cited source does not actually discuss PlayDapp.
   anchorpending

   chain

   ●—

   hash

   HvHxAy4mEsZY…7js2jpBpcopysha256 → base58

   verifying row…

   canonical bytes (1043 B) ▸

   {"actor":"reviewer","decided_at":"2026-08-26T11:17:43.281Z","decision":"review","investigation_id":"90804b6a-5edb-4b8e-86e6-1fe06e92c10a","new_score":22,"page_slug":"playdapp","prev_score":22,"reason":"The page's factual claims in the summary and timeline are well supported by primary and independent secondary sources, including precise reconciling arithmetic between the two minting events and the aggregate $290M figure, and it correctly labels that figure as a nominal (not realized) loss while also documenting the token migration remediation. The main deficiency is structural rather than factual: all six section bodies are empty despite carrying headings and sourced citations, and the narrative omits post-2024 developments (exchange delistings, current token status) and lacks any usable text on the disputed Lazarus Group attribution, whose cited source does not actually discuss PlayDapp.","score_delta":0,"sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 20688b8c-304c-4f95-94b3-1a0031410190copy
3. #3review reviseby judgejudge

   2026-08-26 11:17:43Z
   Score: 22 → 12 (-10)
   Independent fact-checking confirmed 18 of this page's 20 factual claims, including an accurate distinction between the $290 million nominal mint value and any realized loss (claim_findings[5]), and found zero disputed claims (disputed_pct = 5%, within the approve range on raw numbers alone). However, three high-priority coverage gaps push this into revision territory: the page's 'Alleged Lazarus Group Attribution' section is backed by a citation that never mentions PlayDapp at all, while the only genuinely relevant reporting found (BleepingComputer) states the attack has not been attributed to a known group; all six page sections carry headings, severities, and sourced citations but zero body text; and the narrative stops in August 2024, omitting PlayDapp's 2025 delistings from Crypto.com and Binance that are material to the token's current status. None of this reflects false statements on the page as written, but the gaps are substantive enough to warrant revision rather than a clean approval.
   anchorpending

   chain

   ●—

   hash

   Cdr8Q76ga6dg…DTErFuGocopysha256 → base58

   verifying row…

   canonical bytes (1359 B) ▸

   {"actor":"judge","decided_at":"2026-08-26T11:17:43.281Z","decision":"review_revise","investigation_id":"90804b6a-5edb-4b8e-86e6-1fe06e92c10a","new_score":12,"page_slug":"playdapp","prev_score":22,"reason":"Independent fact-checking confirmed 18 of this page's 20 factual claims, including an accurate distinction between the $290 million nominal mint value and any realized loss (claim_findings[5]), and found zero disputed claims (disputed_pct = 5%, within the approve range on raw numbers alone). However, three high-priority coverage gaps push this into revision territory: the page's 'Alleged Lazarus Group Attribution' section is backed by a citation that never mentions PlayDapp at all, while the only genuinely relevant reporting found (BleepingComputer) states the attack has not been attributed to a known group; all six page sections carry headings, severities, and sourced citations but zero body text; and the narrative stops in August 2024, omitting PlayDapp's 2025 delistings from Crypto.com and Binance that are material to the token's current status. None of this reflects false statements on the page as written, but the gaps are substantive enough to warrant revision rather than a clean approval.","score_delta":-10,"sequence_num":3,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 787f9fe2-2589-4503-9f1e-11cc2635e57acopy