Audit log

Every state-changing event for Rho Markets: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-28 03:44:08Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 422,640,798

   sig

   iw1MpTwBSnTH…RRNGTaUhcopyexplorer ↗

   hash

   9ETtyceJ3QB1…kRrNZNEtcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (5435 B) ▸

   {"actor":"system:backfill","investigation_id":"f38510bf-3842-4f2e-8792-ab32168b81b2","kind":"publish","page_slug":"rho-markets","published_at":"2026-05-28T03:44:08.165Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Rho Markets","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://dedaub.com/blog/rho-markets-incident/","type":"other","url":""},{"credibility":3,"name":"https://rekt.news/rho-market-rekt","type":"other","url":""},{"credibility":3,"name":"https://protos.com/mev-bot-to-return-7-5m-if-rho-markets-admits-to-oracle-error/","type":"other","url":""},{"credibility":3,"name":"https://cryptobriefing.com/rho-markets-exploit-scroll/","type":"other","url":""},{"credibility":3,"name":"https://olympixai.medium.com/rho-markets-on-scroll-exploit-analysis-965991270f56","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://thedefiant.io/news/hacks/scroll-halts-chain-finalization-after-usd7m-rho-market-exploit","type":"other","url":""},{"credibility":3,"name":"https://cryptoslate.com/ethereum-layer-2-scroll-halts-chain-finalization-after-rho-markets-suffers-7-6m-breach/","type":"other","url":""},{"credibility":3,"name":"https://cryptobriefing.com/rho-markets-exploit-scroll/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://decrypt.co/240653/rho-markets-scroll-exploit-funds-returned","type":"other","url":""},{"credibility":3,"name":"https://unchainedcrypto.com/scroll-lending-protocol-rho-says-no-funds-lost-after-7-6-million-oracle-exploit/","type":"other","url":""},{"credibility":3,"name":"https://www.web3isgoinggreat.com/single/rho-loss","type":"other","url":""},{"credibility":3,"name":"https://protos.com/mev-bot-to-return-7-5m-if-rho-markets-admits-to-oracle-error/","type":"other","url":""},{"credibility":3,"name":"https://coinedition.com/rho-markets-recovers-7-6-million-in-stolen-funds-exploiter-demands-misconfiguration-tag/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://rhomarkets.medium.com/rho-markets-the-native-liquidity-layer-on-scroll-638664168127","type":"other","url":""},{"credibility":3,"name":"https://www.chainlinkecosystem.com/ecosystem/rho-markets","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/rho-markets","type":"other","url":""},{"credibility":3,"name":"https://www.rootdata.com/Projects/detail/Rho%20Markets?k=MTI4ODc%3D","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://dedaub.com/blog/rho-markets-incident/","type":"other","url":""},{"credibility":3,"name":"https://olympixai.medium.com/rho-markets-on-scroll-exploit-analysis-965991270f56","type":"other","url":""},{"credibility":3,"name":"https://rivanorth.com/blog/hack-explained-rho-market","type":"other","url":""},{"credibility":3,"name":"https://bsc.news/post/rho-markets-hit-by-7-5-m-hack-attackers-demand-admission-of-oracle-error-for-fund-return","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://defillama.com/protocol/rho-markets","type":"other","url":""},{"credibility":3,"name":"https://www.rhomarkets.xyz/","type":"other","url":""},{"credibility":3,"name":"https://docs.rhomarkets.xyz/","type":"other","url":""}]}],"sources_used":[],"summary":"Rho Markets is a DeFi lending protocol (Compound V2 fork) deployed on Scroll, an Ethereum Layer 2 ZK-rollup network. On July 19, 2024, a misconfigured price oracle allowed an MEV bot to extract approximately $7.6 million in user funds; the operator voluntarily returned all funds after demanding a public acknowledgment of the misconfiguration. Despite full fund recovery, the protocol's TVL collapsed to near-zero and remains essentially inactive as of 2026.","timeline":[{"date":"2022-06-08","event":"Rho Markets founded; protocol development begins on Scroll ecosystem.","source":""},{"date":"2024-07-19","event":"Oracle misconfiguration exploit detected: MEV bot drains approximately $7.5-7.6 million in USDC, USDT, and wstETH from Rho Markets pools on Scroll within minutes.","source":""},{"date":"2024-07-19","event":"Rho Markets halts protocol operations. Scroll team temporarily pauses L2 chain finalization to assess scope of breach.","source":""},{"date":"2024-07-19","event":"MEV bot operator sends on-chain message indicating willingness to return all funds, contingent on Rho Markets publicly admitting oracle misconfiguration error.","source":""},{"date":"2024-07-19","event":"Scroll resumes chain finalization after determining exploit was confined to Rho Markets application layer.","source":""},{"date":"2024-07-19","event":"Rho Markets complies with MEV operator demands; all 2,202.85 ETH (approximately $7.6 million) returned to protocol multi-sig Safe wallet. Team announces no user funds permanently lost.","source":""},{"date":"2024-07-19","event":"Dedaub, Olympix, and other security firms publish post-mortems confirming ETH oracle was misconfigured to use the WBTC/USD price feed at deployment time.","source":""},{"date":"2026-05-27","event":"Rho Markets TVL stands at approximately $8 with $0 in active loans; protocol is effectively inactive with no announced relaunch.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 39127cdf-7b87-477d-9d4c-0947d360a384copy
2. #2rescoreby systemsystem

   2026-10-27 06:09:49Z
   Score: 38 → 50 (+12)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 38 → 50. Problems weighed by who is responsible: the subject's own conduct −8, incidents the subject suffered −6.4, problems around the subject, caused by others −2.4; legitimacy credit long-running +6; no longer operating, so capped at 50.
   anchoranchored

   chain

   ●mainnet-betaslot 461,967,023

   sig

   2ghreotP2fAA…EVfMQZo8copyexplorer ↗

   hash

   4za2Duv28NXD…GMFRJrT5copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (676 B) ▸

   {"actor":"system","decided_at":"2026-10-27T06:09:49.275Z","decision":"rescore","investigation_id":"f38510bf-3842-4f2e-8792-ab32168b81b2","new_score":50,"page_slug":"rho-markets","prev_score":38,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 38 → 50. Problems weighed by who is responsible: the subject's own conduct −8, incidents the subject suffered −6.4, problems around the subject, caused by others −2.4; legitimacy credit long-running +6; no longer operating, so capped at 50.","score_delta":12,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision ade89671-e0b6-47c8-97ec-3cc651214e00copy