Audit log

Every state-changing event for Rhea Finance: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-06-19 12:12:11Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 427,503,459

   sig

   2t11s18nTMDb…RbrbuJnEcopyexplorer ↗

   hash

   87MbNFB1a9G8…i3vxR1e9copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (17872 B) ▸

   {"actor":"system:backfill","investigation_id":"75e439fb-33ad-4ea1-b87d-51dc3e5ec7f7","kind":"publish","page_slug":"rhea-finance","published_at":"2026-06-19T12:12:11.635Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Rhea Finance","sections":[{"content":"Rhea Finance was formed in early 2025 through the merger of Ref Finance, NEAR Protocol's primary decentralized exchange, and Burrow Finance, its main lending protocol. The combined entity markets itself as a unified, chain-abstracted liquidity hub offering trading, lending, and cross-chain asset management. According to NEAR Protocol's official X account, the platform processed $10 billion in total volume during 2025 and offered cross-chain interoperability spanning Zcash, Solana, Arbitrum, and Bitcoin. The native token, RHEA, replaced the predecessor tokens REF and BRRR following the merger. Rhea Finance was listed on exchanges including Bitget and LBank following the merger.","heading":"Protocol Background","severity":"low","sources":[{"credibility":3,"name":"NEAR Protocol on X: 2025 RHEA Recap","type":"social_media","url":"https://x.com/NEARProtocol/status/2006204832634249293"},{"credibility":2,"name":"One Protocol, Unified Power — The New RHEA Finance (Medium)","type":"official","url":"https://rhea-finance.medium.com/one-protocol-unified-power-the-new-rhea-finance-a50b04170bcd"},{"credibility":3,"name":"Bitget Lists Rhea Finance (RHEA) for Spot Trading Following Protocol Merger","type":"news_article","url":"https://www.ainvest.com/news/bitget-lists-rhea-finance-rhea-spot-trading-protocol-merger-2507/"}]},{"content":"On April 16, 2026, Rhea Finance was exploited through a vulnerability in the slippage protection mechanism of its margin trading module. Security firm CertiK was among the first to publicly flag the incident, initially reporting losses of approximately $7.6 million. Following an internal post-mortem, Rhea Finance revised the total loss to $18.4 million — more than double the initial estimate — confirming that the magnitude of the drain had not been fully captured in early on-chain assessments. The exploit is among the largest single-protocol losses on the NEAR blockchain to date.","heading":"April 2026 Exploit — Overview","severity":"critical","sources":[{"credibility":2,"name":"Rhea Finance Loses $7.6M in Exploit, Says CertiK (Crypto Times)","type":"news_article","url":"https://www.cryptotimes.io/2026/04/16/rhea-finance-loses-7-6m-in-exploit-says-certik/"},{"credibility":1,"name":"Rhea Finance post-mortem puts exploit losses at $18.4 million, more than double initial estimates (The Block)","type":"news_article","url":"https://www.theblock.co/post/397961/rhea-finance-post-mortem-exploit-losses-18-4-million-double-initial-estimates"},{"credibility":2,"name":"Crypto Hack: NEAR Protocol's Rhea Finance Loses $18.4M in Exploit (The Coin Republic)","type":"news_article","url":"https://www.thecoinrepublic.com/2026/04/18/crypto-hack-near-protocols-rhea-finance-loses-18-4m-in-exploit/"}]},{"content":"The root cause of the exploit was a logic flaw in how the margin trading module aggregated minimum output values (min_amount_out) across multi-step swap actions. The system summed expected output values across all swap steps but did not account for scenarios in which the output token of one step was reused as the input of the subsequent step. By constructing a swap chain that reused an intermediate asset, the attacker caused the slippage check to see an artificially inflated aggregate output that appeared to satisfy validation thresholds. A simplified illustration of the logic error: Step 1 converted 1,000 USDC into 999 AttackerToken with a minimum output of 999; Step 2 converted 999 AttackerToken back into 1 USDC with a minimum output of 1. The slippage aggregator summed 999 and 1 and treated the transaction as valid, while the attacker effectively extracted nearly all of the borrowed value. Using this mechanism, the attacker redirected borrowed debt tokens into fake token pools they controlled, leaving the protocol holding illiquid positions and triggering cascading liquidations that drained the reserve pool.","heading":"Technical Vulnerability — Slippage Protection Bypass","severity":"critical","sources":[{"credibility":2,"name":"$18.4M Rhea Finance Hack Built Over Two Days, Post-Mortem Reveals (Coin Edition)","type":"news_article","url":"https://coinedition.com/18-4m-rhea-finance-hack-built-over-two-days-post-mortem-reveals/"},{"credibility":2,"name":"Rhea Finance revises exploit losses to $18.4M, confirms slippage flaw as funds partially recovered (AMBCrypto)","type":"news_article","url":"https://ambcrypto.com/rhea-finance-revises-exploit-losses-to-18-4m-confirms-slippage-flaw-as-funds-partially-recovered/"},{"credibility":2,"name":"Rhea Finance Exploit Results in $18.4 Million Loss (Phemex)","type":"news_article","url":"https://phemex.com/news/article/rhea-finance-suffers-184-million-exploit-due-to-slippage-protection-flaw-74100"},{"credibility":2,"name":"Explained: The Rhea Finance Hack, April 2026 (Halborn)","type":"research","url":"https://www.halborn.com/blog/post/explained-the-rhea-finance-hack-april-2026"}]},{"content":"Post-mortem analysis revealed that the attacker spent approximately two days preparing the exploit infrastructure before executing the drain. Between April 13 and 15, 2026, the attacker created a subject wallet and distributed funds across 423 unique intermediary wallets to obscure the trail. The attacker also deployed purpose-built fake token contracts lacking standard metadata, established eight new trading pools on Ref Finance pairing fake tokens against USDC, USDT, and wNEAR at artificially controlled price ratios, and constructed a custom swap router connecting these fake pools. The exploit was then executed on April 16, 2026. The suspected attacker address on the NEAR blockchain begins with 31ac7a27. Aurora Labs and Near Intents co-founder Alex Shevchenko subsequently sent an on-chain message to the attacker stating that the team had identified them and their associated accounts, and calling for the return of remaining funds. The Near Intents team also opened formal traces with centralized exchanges to identify the account holder.","heading":"Attacker Preparation and Execution","severity":"critical","sources":[{"credibility":2,"name":"$18.4M Rhea Finance Hack Built Over Two Days, Post-Mortem Reveals (Coin Edition)","type":"news_article","url":"https://coinedition.com/18-4m-rhea-finance-hack-built-over-two-days-post-mortem-reveals/"},{"credibility":2,"name":"Rhea Finance Loses $7.6M in Exploit, Says CertiK (Crypto Times)","type":"news_article","url":"https://www.cryptotimes.io/2026/04/16/rhea-finance-loses-7-6m-in-exploit-says-certik/"},{"credibility":2,"name":"Rhea Finance investigation report via PANews","type":"news_article","url":"https://www.panewslab.com/en/articles/019d9e7e-3b97-719c-bef3-f6b28974824c"}]},{"content":"Following the exploit, partial recovery efforts yielded meaningful results. The attacker voluntarily returned approximately $3.359 million in USDC and $1.564 million in NEAR to Rhea Finance's lending contract. Additionally, Tether CEO Paolo Ardoino confirmed that approximately $3.29 million in USDT linked to the attacker was frozen — raising the total of recovered or frozen funds to roughly $9.2 million against the revised $18.4 million total loss. On-chain evidence also showed approximately $3.5 million in Ethereum transfers and 13,500 ZEC (worth roughly $4.4 million at the time) potentially linked to the attacker's proceeds, though the disposition of these funds remained under investigation. A fact-check by Crypto Times found that claims of full fund recovery circulating on social media were unverified; the official position as of the post-mortem was that substantial losses remained outstanding.","heading":"Fund Recovery and Freezing","severity":"high","sources":[{"credibility":2,"name":"Hacker Returns All The Funds to Rhea Finance: Fact Check (Crypto Times)","type":"news_article","url":"https://www.cryptotimes.io/2026/04/18/hacker-returns-all-the-funds-to-rhea-finance-fact-check/"},{"credibility":2,"name":"Rhea Finance revises exploit losses to $18.4M, confirms slippage flaw as funds partially recovered (AMBCrypto)","type":"news_article","url":"https://ambcrypto.com/rhea-finance-revises-exploit-losses-to-18-4m-confirms-slippage-flaw-as-funds-partially-recovered/"},{"credibility":2,"name":"NEAR Protocol DeFi Hub Rhea Finance Loses $7.6 Million in Oracle Exploit (BeInCrypto)","type":"news_article","url":"https://beincrypto.com/rhea-finance-near-exploit-oracle/"}]},{"content":"Immediately following detection of the exploit on April 16, 2026, Rhea Finance paused affected lending contracts to prevent further losses. The team engaged external security teams for forensic analysis, initiated centralized exchange tracing to identify the attacker, and attempted direct negotiations to recover the remaining outstanding funds. A post-mortem report was published revising total losses to $18.4 million and identifying the slippage protection flaw as the root cause. The team announced that a compensation and recovery framework was under development, to be funded through reserve funds and operational resources. As of the post-mortem date, no specific timeline or allocation details for the compensation plan had been publicly disclosed. Alex Shevchenko was quoted as acknowledging the partial return of funds, stating on-chain: 'This was the right thing to do, sir. Thanks for returning the money.'","heading":"Protocol Response and Compensation Framework","severity":"high","sources":[{"credibility":1,"name":"Rhea Finance post-mortem puts exploit losses at $18.4 million, more than double initial estimates (The Block)","type":"news_article","url":"https://www.theblock.co/post/397961/rhea-finance-post-mortem-exploit-losses-18-4-million-double-initial-estimates"},{"credibility":2,"name":"Rhea Finance revises exploit losses to $18.4M, confirms slippage flaw as funds partially recovered (AMBCrypto)","type":"news_article","url":"https://ambcrypto.com/rhea-finance-revises-exploit-losses-to-18-4m-confirms-slippage-flaw-as-funds-partially-recovered/"},{"credibility":2,"name":"Hacker Returns All The Funds to Rhea Finance: Fact Check (Crypto Times)","type":"news_article","url":"https://www.cryptotimes.io/2026/04/18/hacker-returns-all-the-funds-to-rhea-finance-fact-check/"}]},{"content":"The RHEA token declined approximately 8% in the immediate aftermath of the April 16 exploit, trading near $0.01019 with a market cap of approximately $2.03 million at the time of early reports. NEAR Protocol's native token also fell approximately 3.5% amid the incident and broader market conditions. The exploit drew wider attention to oracle and token validation vulnerabilities in DeFi protocols built on NEAR, and was cited alongside the Drift hack as part of a broader pattern of DeFi security failures in early 2026. The incident represented one of the largest single losses in the NEAR DeFi ecosystem to date.","heading":"Market and Ecosystem Impact","severity":"high","sources":[{"credibility":3,"name":"Rhea Finance Hack on NEAR Drain $7.6M: RHEA Token Price Dips (CoinGabbar)","type":"news_article","url":"https://www.coingabbar.com/en/crypto-currency-news/rhea-finance-crypto-hack-update-near-defi-rhea-token-price-drop"},{"credibility":2,"name":"NEAR Drops 3.5% Amid Rhea Finance Exploit and Market Shifts (CoinMarketCap)","type":"news_article","url":"https://coinmarketcap.com/top-stories/69e38f7ba32c5611bd480fa7/"},{"credibility":2,"name":"$7.6M Rhea Finance Exploit Sees 3.29M USDT Frozen — So Why Did $230M Move Freely in Drift Hack? (CCN)","type":"news_article","url":"https://www.ccn.com/education/crypto/rhea-finance-hack-usdt-frozen-drift-usdc-exploit/"}]}],"sources_used":[{"credibility":2,"name":"Explained: The Rhea Finance Hack, April 2026 (Halborn)","type":"research","url":"https://www.halborn.com/blog/post/explained-the-rhea-finance-hack-april-2026"},{"credibility":2,"name":"Rhea Finance revises exploit losses to $18.4M, confirms slippage flaw as funds partially recovered (AMBCrypto)","type":"news_article","url":"https://ambcrypto.com/rhea-finance-revises-exploit-losses-to-18-4m-confirms-slippage-flaw-as-funds-partially-recovered/"},{"credibility":1,"name":"Rhea Finance post-mortem puts exploit losses at $18.4 million, more than double initial estimates (The Block)","type":"news_article","url":"https://www.theblock.co/post/397961/rhea-finance-post-mortem-exploit-losses-18-4-million-double-initial-estimates"},{"credibility":2,"name":"NEAR Protocol DeFi Hub Rhea Finance Loses $7.6 Million in Oracle Exploit (BeInCrypto)","type":"news_article","url":"https://beincrypto.com/rhea-finance-near-exploit-oracle/"},{"credibility":2,"name":"Crypto Hack: NEAR Protocol's Rhea Finance Loses $18.4M in Exploit (The Coin Republic)","type":"news_article","url":"https://www.thecoinrepublic.com/2026/04/18/crypto-hack-near-protocols-rhea-finance-loses-18-4m-in-exploit/"},{"credibility":2,"name":"Rhea Finance Loses $7.6M in Exploit, Says CertiK (Crypto Times)","type":"news_article","url":"https://www.cryptotimes.io/2026/04/16/rhea-finance-loses-7-6m-in-exploit-says-certik/"},{"credibility":2,"name":"Hacker Returns All The Funds to Rhea Finance: Fact Check (Crypto Times)","type":"news_article","url":"https://www.cryptotimes.io/2026/04/18/hacker-returns-all-the-funds-to-rhea-finance-fact-check/"},{"credibility":2,"name":"$18.4M Rhea Finance Hack Built Over Two Days, Post-Mortem Reveals (Coin Edition)","type":"news_article","url":"https://coinedition.com/18-4m-rhea-finance-hack-built-over-two-days-post-mortem-reveals/"},{"credibility":2,"name":"Rhea Finance Exploit Results in $18.4 Million Loss (Phemex)","type":"news_article","url":"https://phemex.com/news/article/rhea-finance-suffers-184-million-exploit-due-to-slippage-protection-flaw-74100"},{"credibility":2,"name":"NEAR DROPS 3.5% Amid Rhea Finance Exploit and Market Shifts (CoinMarketCap)","type":"news_article","url":"https://coinmarketcap.com/top-stories/69e38f7ba32c5611bd480fa7/"},{"credibility":2,"name":"$7.6M Rhea Finance Exploit Sees 3.29M USDT Frozen (CCN)","type":"news_article","url":"https://www.ccn.com/education/crypto/rhea-finance-hack-usdt-frozen-drift-usdc-exploit/"},{"credibility":2,"name":"One Protocol, Unified Power — The New RHEA Finance (Medium)","type":"official","url":"https://rhea-finance.medium.com/one-protocol-unified-power-the-new-rhea-finance-a50b04170bcd"},{"credibility":2,"name":"Rhea Finance investigation report (PANews)","type":"news_article","url":"https://www.panewslab.com/en/articles/019d9e7e-3b97-719c-bef3-f6b28974824c"},{"credibility":3,"name":"NEAR Protocol on X: 2025 RHEA Recap","type":"social_media","url":"https://x.com/NEARProtocol/status/2006204832634249293"}],"summary":"Rhea Finance is a chain-abstracted DeFi liquidity hub on the NEAR Protocol, formed in early 2025 through the merger of Ref Finance and Burrow Finance. On April 16, 2026, the protocol suffered a major exploit in which an attacker bypassed slippage protection in its margin trading module using intermediate asset reuse across a chain swap path, ultimately draining an estimated $18.4 million from the reserve pool — more than double the initial $7.6 million estimate. Approximately $9.2 million was subsequently returned or frozen, with the remainder still outstanding as of mid-2026; a compensation framework was announced but had not been finalized at the time of publication.","timeline":[{"date":"2025-03-01","event":"Ref Finance and Burrow Finance announce merger to form Rhea Finance, NEAR Protocol's unified DeFi liquidity hub.","source":"Rhea Finance Medium / NEAR Protocol","source_url":"https://rhea-finance.medium.com/one-protocol-unified-power-the-new-rhea-finance-a50b04170bcd"},{"date":"2026-04-13","event":"Attacker begins exploit preparation: creates subject wallet, begins distributing funds across 423 intermediary wallets, deploys fake token contracts, and establishes eight fraudulent trading pools on Ref Finance.","source":"Coin Edition / Post-Mortem","source_url":"https://coinedition.com/18-4m-rhea-finance-hack-built-over-two-days-post-mortem-reveals/"},{"date":"2026-04-16","event":"Exploit executed: attacker exploits slippage protection bypass in Rhea Finance's margin trading module, draining the reserve pool. CertiK reports initial loss of approximately $7.6 million. Rhea Finance pauses lending contracts.","source":"Crypto Times / CertiK","source_url":"https://www.cryptotimes.io/2026/04/16/rhea-finance-loses-7-6m-in-exploit-says-certik/"},{"date":"2026-04-16","event":"Tether CEO Paolo Ardoino announces approximately $3.29 million in USDT connected to the attacker has been frozen.","source":"BeInCrypto","source_url":"https://beincrypto.com/rhea-finance-near-exploit-oracle/"},{"date":"2026-04-17","event":"Rhea Finance releases post-mortem revising total losses upward to $18.4 million — more than double the initial estimate — and confirming the slippage protection flaw as root cause. Attacker returns approximately $3.359 million USDC and $1.564 million NEAR to lending contract.","source":"The Block / AMBCrypto","source_url":"https://www.theblock.co/post/397961/rhea-finance-post-mortem-exploit-losses-18-4-million-double-initial-estimates"},{"date":"2026-04-18","event":"Aurora Labs and Near Intents co-founder Alex Shevchenko sends on-chain message to attacker stating identification and associated accounts have been traced; formal traces opened with centralized exchanges. Crypto Times fact-check finds claims of full fund recovery unverified.","source":"Crypto Times Fact Check / Coin Edition","source_url":"https://www.cryptotimes.io/2026/04/18/hacker-returns-all-the-funds-to-rhea-finance-fact-check/"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 121434f2-98a0-4fa6-b699-8be3f736ec97copy
2. #2rescoreby systemsystem

   2026-10-10 18:46:12Z
   Score: 32 → 54 (+22)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 32 → 54. Problems weighed by who is responsible: incidents the subject suffered −20, problems around the subject, caused by others −1.8; legitimacy credit long-running +2; the penalty for incidents it suffered is capped at 20; a recent unresolved incident −0.8.
   anchoranchored

   chain

   ●mainnet-betaslot 455,365,974

   sig

   4MZtk64Ewbbp…3io9nxHicopyexplorer ↗

   hash

   R1Z7Yrq482pr…BeFa4y4Ncopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (698 B) ▸

   {"actor":"system","decided_at":"2026-10-10T18:46:12.441Z","decision":"rescore","investigation_id":"75e439fb-33ad-4ea1-b87d-51dc3e5ec7f7","new_score":54,"page_slug":"rhea-finance","prev_score":32,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 32 → 54. Problems weighed by who is responsible: incidents the subject suffered −20, problems around the subject, caused by others −1.8; legitimacy credit long-running +2; the penalty for incidents it suffered is capped at 20; a recent unresolved incident −0.8.","score_delta":22,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 2801134c-637e-4fc8-b346-b4d82af49a89copy
3. #3reviewby reviewerreviewer

   2026-11-02 03:32:21Z
   Score: 54 → 54 (no score change)
   The exploit narrative (date, 18.4M loss, root cause, attacker preparation) is well supported by The Block and Coin Edition. The recovery section and summary are stale or inconsistent: the 9.2M figure differs across sources, the outstanding balance is shown as large when later reporting puts it near 0.4M with a coverage pledge, and the page omits the margin product shutdown and DEX reopening. One timeline date appears off by a day.
   anchoranchored

   chain

   ●mainnet-betaslot 464,345,283

   sig

   pki4Tk4L8bfr…RECRdacrcopyexplorer ↗

   hash

   GeQq8ofohzCF…8Ft2Ks6tcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1321 B) ▸

   {"actor":"reviewer","artifact_identity":"6ac2c0691c8ab3d16dccab38f5cb23b9","blocked_count":1,"decided_at":"2026-11-02T03:32:21.021Z","decision":"review","disputed_pct":0.4286,"findings_hash":"FpeiFXN36B7DajDaAUV7oWrqmFnnhNV6vyjbWzuW4L9x","investigation_id":"75e439fb-33ad-4ea1-b87d-51dc3e5ec7f7","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":54,"omissions":{"material":2,"total":2},"page_content_hash":"8912f326925599d9ae71e58af0323b1e35b0cdb878f208af05b1c2a1bc49df61","page_slug":"rhea-finance","prev_score":54,"reason":"The exploit narrative (date, 18.4M loss, root cause, attacker preparation) is well supported by The Block and Coin Edition. The recovery section and summary are stale or inconsistent: the 9.2M figure differs across sources, the outstanding balance is shown as large when later reporting puts it near 0.4M with a coverage pledge, and the page omits the margin product shutdown and DEX reopening. One timeline date appears off by a day.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":7,"sequence_num":3,"subject_status":"operating","subject_status_contradicts_page":true,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision c37ff93c-b973-4364-95e7-ab52ac52f80acopy
4. #4review reviseby judgejudge

   2026-11-02 03:32:21Z
   Score: 54 → 54 (no score change)
   Of 7 countable claim findings (1 excluded as source_blocked), 1 was disputed (claim_findings[2], the Shevchenko message dated a day late) and 2 could not be found in sources (claim_findings[6], [7]), giving about 43% disputed or unverifiable. The summary recovery statement is stale (claim_findings[0]): later reporting from April 22, 2026 puts the shortfall near $0.4M with a pledge to cover it, not a large outstanding balance. The review also reports two material omissions, the discontinued margin product and the reopened DEX, and finds the page contradicts the protocol's current status. The core exploit account ($18.4M loss, root cause, attacker preparation) was confirmed by Tier 1 and Tier 2 sources, so the page is revised and put under investigation rather than failed.
   anchoranchored

   chain

   ●mainnet-betaslot 464,345,288

   sig

   DDFXGrPsCtpY…fFEiQQERcopyexplorer ↗

   hash

   5L6SwBZu9NDX…Yevu9cgmcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1962 B) ▸

   {"actor":"judge","artifact_identity":"6ac2c0691c8ab3d16dccab38f5cb23b9","band_override":null,"blocked_count":1,"decided_at":"2026-11-02T03:32:21.021Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.4286,"investigation_id":"75e439fb-33ad-4ea1-b87d-51dc3e5ec7f7","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":54,"page_slug":"rhea-finance","prev_score":54,"reason":"Of 7 countable claim findings (1 excluded as source_blocked), 1 was disputed (claim_findings[2], the Shevchenko message dated a day late) and 2 could not be found in sources (claim_findings[6], [7]), giving about 43% disputed or unverifiable. The summary recovery statement is stale (claim_findings[0]): later reporting from April 22, 2026 puts the shortfall near $0.4M with a pledge to cover it, not a large outstanding balance. The review also reports two material omissions, the discontinued margin product and the reopened DEX, and finds the page contradicts the protocol's current status. The core exploit account ($18.4M loss, root cause, attacker preparation) was confirmed by Tier 1 and Tier 2 sources, so the page is revised and put under investigation rather than failed.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":7,"sequence_num":4,"severity_override":{"applied":true,"band":"significant","from_band":"significant","reason":"Two material omissions (margin trading permanently discontinued and DEX reopened; shortfall reduced to about $0.4M with a full coverage pledge) and subject_status.contradicts_page is true. The page's summary still describes a large unrecovered balance. The percentage band is already significant, so the override holds the verdict at significant and pushes the delta toward the harsher end of the range."},"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 1a84af0e-f94e-453a-9f45-75b9137b3156copy
5. #5rescoreby systemsystem

   2026-11-02 03:32:22Z
   Score: 54 → 57 (+3)
   Recalculated after the fact-check of 2026-11-02. Rescored under Scoring v2, the published formula (avoid.net/scoring): 54 → 57. Problems weighed by who is responsible: incidents the subject suffered −20, problems around the subject, caused by others −0.3; legitimacy credit long-running +2; the penalty for incidents it suffered is capped at 20; 2 section(s) set aside until a failed fact-check is resolved.
   anchoranchored

   chain

   ●mainnet-betaslot 464,345,293

   sig

   EZvkSKnvLyNm…3dnCDdFQcopyexplorer ↗

   hash

   2kPX7vDjriyk…oYKpzWYNcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (773 B) ▸

   {"actor":"system","decided_at":"2026-11-02T03:32:21.021Z","decision":"rescore","investigation_id":"75e439fb-33ad-4ea1-b87d-51dc3e5ec7f7","new_score":57,"page_slug":"rhea-finance","prev_score":54,"reason":"Recalculated after the fact-check of 2026-11-02. Rescored under Scoring v2, the published formula (avoid.net/scoring): 54 → 57. Problems weighed by who is responsible: incidents the subject suffered −20, problems around the subject, caused by others −0.3; legitimacy credit long-running +2; the penalty for incidents it suffered is capped at 20; 2 section(s) set aside until a failed fact-check is resolved.","score_delta":3,"score_model":"v2","sequence_num":5,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 5e54b5e9-f4c4-419c-b715-eb1f480eace8copy