← pNetwork4 decisions on this page
Audit log
Every state-changing event for pNetwork: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.
- #1publishby system:backfill2026-05-25 18:20:02ZScore: ? → ? (no score change)anchoranchored
- chain
- ●mainnet-betaslot 422,120,680
- sig
4c8kcPhPj1Gn…XGvQF78aexplorer ↗- hash
51vKUB6PPeV8…BzfiY2rysha256 → base58
verifying row…full verify ↗canonical bytes (7123 B) ▸
{"actor":"system:backfill","investigation_id":"26f2ef03-5f38-487a-86f0-3d1b056eb4f4","kind":"publish","page_slug":"pnetwork","published_at":"2026-05-25T18:20:02.523Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"pNetwork","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/pnetwork/introducing-ptokens-provable-portable-pegged-70911e200933","type":"other","url":""},{"credibility":3,"name":"https://www.bitget.com/price/pnetwork/what-is","type":"other","url":""},{"credibility":3,"name":"https://medium.com/pnetwork/pnetwork-powered-bridges-a-force-to-be-reckoned-with-fb5fb325d257","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-pnetwork-hack-september-2021","type":"other","url":""},{"credibility":3,"name":"https://medium.com/pnetwork/pnetwork-post-mortem-pbtc-on-bsc-exploit-170890c58d5f","type":"other","url":""},{"credibility":3,"name":"https://cryptoslate.com/12-million-stolen-after-binance-smart-chain-defi-pnetwork-gets-hacked/","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/81301/defi-bridging-protocol-pnetwork-suffers-12-million-hack","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/business/2021/09/20/cross-chain-protocol-pnetwork-loses-12m-to-hack","type":"other","url":""},{"credibility":3,"name":"https://www.theblock.co/post/118060/defi-pnetwork-hack-wrapped-bitcoin-12-million-lost","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.theblock.co/post/182969/developers-of-pnetwork-bridge-drain-4-3-million-from-pancakeswap-in-white-hat-attack","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/report-gala-token-exploit-resulted-from-public-leak-of-private-key-on-github","type":"other","url":""},{"credibility":3,"name":"https://www.securities.io/huobi-says-pnetwork-hacked-gala-in-a-premeditated-attack-to-make-profits/","type":"other","url":""},{"credibility":3,"name":"https://cryptoslate.com/per-huobi-alleges-pnetwork-made-over-4m-from-its-gala-white-hat-attack/","type":"other","url":""},{"credibility":3,"name":"https://medium.com/pnetwork/lessons-learnt-from-the-pgala-exploit-50e686730b98","type":"other","url":""},{"credibility":3,"name":"https://thedefiant.io/news/defi/pnetwork-misconfiguration-gala-1b-hack","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.prnewswire.com/news-releases/gala-sues-pnetwork-on-behalf-of-pgala-victims-301775263.html","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/tech/2023/04/03/huobi-and-gala-games-to-give-50m-to-victims-of-pgala-scheme","type":"other","url":""},{"credibility":3,"name":"https://playtoearn.com/news/gala-games-files-28-million-lawsuit-against-pnetwork-over-code-misconfiguration","type":"other","url":""},{"credibility":3,"name":"https://cryptorank.io/news/feed/682bd-178077-huobi-and-gala-games-file-lawsuit-pnetwork","type":"other","url":""},{"credibility":3,"name":"https://cryptonews.net/news/gamefi/20692175/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-pnetwork-hack-september-2021","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/report-gala-token-exploit-resulted-from-public-leak-of-private-key-on-github","type":"other","url":""},{"credibility":3,"name":"https://medium.com/pnetwork/pnetwork-post-mortem-pbtc-on-bsc-exploit-170890c58d5f","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coingecko.com/en/coins/pnetwork","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/pnetwork","type":"other","url":""},{"credibility":3,"name":"https://github.com/pnetwork-association","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://twitter.com/pnetworkdefi/status/1409910381896667136","type":"other","url":""}]}],"sources_used":[],"summary":"pNetwork is a cross-chain bridge and interoperability protocol built on the pTokens architecture, enabling assets to move between Bitcoin, Ethereum, BNB Chain, and other networks via wrapped synthetic tokens. The protocol has suffered two major security incidents — a September 2021 pBTC-on-BSC hack losing approximately $12 million, and a November 2022 pGALA incident that triggered a $28 million lawsuit by Gala Games and Huobi alleging pNetwork's own engineers caused the vulnerability through a leaked private key, then allegedly profited from a self-described 'white hat' rescue. As of 2025, the PNT governance token trades at a fraction of its 2021 peak and the protocol operates with negligible market capitalization and trading volume.","timeline":[{"date":"2020-03-01","event":"pNetwork launches its first cross-chain bridge connecting Bitcoin and Ethereum, enabling pBTC minting.","source":""},{"date":"2019-05-01","event":"Provable Things (formerly Oraclize), the company behind pNetwork's technology, merges with Poseidon Group.","source":""},{"date":"2021-09-19","event":"Attacker exploits event-log validation bug in pBTC-on-BSC bridge, stealing 277 BTC (~$12 million). Other bridges unaffected.","source":""},{"date":"2021-09-20","event":"pNetwork publicly discloses the hack, patches the bug, deactivates all cross-chain bridges, and offers a $1.5 million bounty for return of funds.","source":""},{"date":"2022-08-28","event":"A pNetwork engineer allegedly commits a plaintext private key controlling the pGALA contract's admin and minter roles to a public GitHub repository, creating the vulnerability exploited in November 2022.","source":""},{"date":"2022-11-03","event":"pNetwork mints 55.6 billion pGALA tokens on BNB Chain and dumps them on PancakeSwap, crashing GALA price by 94–97% and draining ~$4.3–4.5 million from the liquidity pool. pNetwork characterizes this as a white hat rescue; Huobi alleges it was a premeditated attack for profit.","source":""},{"date":"2022-11-04","event":"pNetwork issues post-mortem citing a smart contract misconfiguration and defending the white hat action. BlockSec on-chain analysis confirms the leaked private key as root cause.","source":""},{"date":"2023-03-20","event":"Gala Games files a $28 million negligence and tortious interference lawsuit against pNetwork on behalf of pGALA victims, citing over $25 million in out-of-pocket costs.","source":""},{"date":"2023-04-03","event":"Huobi and Gala Games announce a joint $50 million compensation plan for affected users and confirm joint legal action against pNetwork.","source":""},{"date":"2025-01-01","event":"PNT token trades at approximately $0.0005, with a market cap of roughly $47,000 and near-zero daily trading volume, representing a decline of over 99.9% from 2021 highs.","source":""}]},"v":1}Verify offline (run on your own machine)python -m src.verify_decision 42da6aad-6233-4de5-8be6-1ab7dc34e865 - #2rescoreby systemsystem2026-10-10 18:48:31ZScore: 12 → 53 (+41)Rescored under Scoring v2, the published formula (avoid.net/scoring): 12 → 53. Problems weighed by who is responsible: concerns that are not fraud −9.6, the subject's own conduct −8, incidents the subject suffered −3.2, problems around the subject, caused by others −1.6; legitimacy credit long-running +10.anchoranchored
- chain
- ●mainnet-betaslot 455,368,411
- sig
x6h2Yz7AN9SC…MWvnQ5Csexplorer ↗- hash
BuDYKvSqWNej…FtnHxLw3sha256 → base58
verifying row…full verify ↗canonical bytes (670 B) ▸
{"actor":"system","decided_at":"2026-10-10T18:48:31.131Z","decision":"rescore","investigation_id":"26f2ef03-5f38-487a-86f0-3d1b056eb4f4","new_score":53,"page_slug":"pnetwork","prev_score":12,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 12 → 53. Problems weighed by who is responsible: concerns that are not fraud −9.6, the subject's own conduct −8, incidents the subject suffered −3.2, problems around the subject, caused by others −1.6; legitimacy credit long-running +10.","score_delta":41,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}Verify offline (run on your own machine)python -m src.verify_decision 0b093860-1c47-4fc9-b8d0-9b7fb67d0794 - #3reviewby reviewerreviewer2026-10-28 00:46:54ZScore: 53 → 53 (no score change)The core incident narratives (the September 2021 hack, the November 2022 pGALA event, the Gala lawsuit and the $50M compensation plan) match the sources I fetched. The BlockSec attribution appears twice and is wrong: the sources credit SlowMist. The ZachXBT section cites an unrelated pNetwork tweet and admits it has no source. Current project status could not be established, and several claims were not checked.anchoranchored
- chain
- ●mainnet-betaslot 462,278,778
- sig
4qJvFoEACgTd…2EwByQXgexplorer ↗- hash
Dd4rReKc6swE…LbbQPV3Ssha256 → base58
verifying row…full verify ↗canonical bytes (1220 B) ▸
{"actor":"reviewer","artifact_identity":"b7e6ce85925e14b332458f4bc8dceb95","decided_at":"2026-10-28T00:46:53.941Z","decision":"review","disputed_pct":0.5,"findings_hash":"G9omBpMDevho4nFDHtwPD75LKCuTDiBvJMz5a8CpGbqs","investigation_id":"26f2ef03-5f38-487a-86f0-3d1b056eb4f4","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":53,"page_content_hash":"d942985bda79bd1b0cb41e57566c453a526eb11802ce43e4725e53dc3a0f0532","page_slug":"pnetwork","prev_score":53,"reason":"The core incident narratives (the September 2021 hack, the November 2022 pGALA event, the Gala lawsuit and the $50M compensation plan) match the sources I fetched. The BlockSec attribution appears twice and is wrong: the sources credit SlowMist. The ZachXBT section cites an unrelated pNetwork tweet and admits it has no source. Current project status could not be established, and several claims were not checked.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"sequence_num":3,"subject_status":"unknown","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}Verify offline (run on your own machine)python -m src.verify_decision eecaf565-c1d5-4a9b-9b7c-ceea1586763c - #4review reviseby judgejudge2026-10-28 00:46:54ZScore: 53 → 53 (no score change)Four of the eight reviewed claims (50%) were disputed or could not be verified, which falls in the significant-issues band. The key-leak root cause is credited to BlockSec in both the section text and the timeline (claim_findings[0], [1]), but the cited sources credit SlowMist. The claim that ZachXBT flagged pNetwork as high-risk has no supporting source, and its only citation is an unrelated pNetwork tweet (claim_findings[2], [3]). The core incident narratives (the 2021 hack, the pGALA drain, the lawsuit and the $50M compensation plan) match the sources. The penalty is set at the mild end of the band because the reviewer's confidence is low (0.5) and the errors are in attribution and one unsourced claim, not in the main events. The reviewer could not establish the project's current operating status, which is an open high-priority gap.anchoranchored
- chain
- ●mainnet-betaslot 462,278,782
- sig
3eyZpQeCFtdf…vX5B459Nexplorer ↗- hash
5ZPiWaXaUnKn…73uNzBZwsha256 → base58
verifying row…full verify ↗canonical bytes (1486 B) ▸
{"actor":"judge","artifact_identity":"b7e6ce85925e14b332458f4bc8dceb95","band_override":null,"decided_at":"2026-10-28T00:46:53.941Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.5,"investigation_id":"26f2ef03-5f38-487a-86f0-3d1b056eb4f4","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":53,"page_slug":"pnetwork","prev_score":53,"reason":"Four of the eight reviewed claims (50%) were disputed or could not be verified, which falls in the significant-issues band. The key-leak root cause is credited to BlockSec in both the section text and the timeline (claim_findings[0], [1]), but the cited sources credit SlowMist. The claim that ZachXBT flagged pNetwork as high-risk has no supporting source, and its only citation is an unrelated pNetwork tweet (claim_findings[2], [3]). The core incident narratives (the 2021 hack, the pGALA drain, the lawsuit and the $50M compensation plan) match the sources. The penalty is set at the mild end of the band because the reviewer's confidence is low (0.5) and the errors are in attribution and one unsourced claim, not in the main events. The reviewer could not establish the project's current operating status, which is an open high-priority gap.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"sequence_num":4,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}Verify offline (run on your own machine)python -m src.verify_decision 700aced8-7668-493b-ae84-ccdf281c7f3d
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine —
python -m src.verify_decision <event_id>.