Audit log

Every state-changing event for RiskOnBlast: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-28 08:16:04Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 422,682,027

   sig

   4E5LVXQ6XkNA…tibpY3gUcopyexplorer ↗

   hash

   H2xYibieWRqY…KdhYr2xBcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (8398 B) ▸

   {"actor":"system:backfill","investigation_id":"a6524f87-aa19-43ce-821b-8cc026828096","kind":"publish","page_slug":"riskonblast","published_at":"2026-05-28T08:16:04.092Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"RiskOnBlast","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/markets/2024/02/26/blast-ecosystem-sees-first-apparent-scam-as-riskonblast-rug-pulls-13m-ether","type":"other","url":""},{"credibility":3,"name":"https://www.certik.com/resources/blog/risk-on-blast-incident-analysis","type":"other","url":""},{"credibility":3,"name":"https://www.theblock.co/post/279004/blast-gamblefi-platform-riskonblast-rugpull","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.certik.com/resources/blog/risk-on-blast-incident-analysis","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/markets/2024/02/26/blast-ecosystem-sees-first-apparent-scam-as-riskonblast-rug-pulls-13m-ether","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/community/articles/65dc7184761bde6939a5fc4e/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.certik.com/resources/blog/risk-on-blast-incident-analysis","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/markets/2024/02/26/blast-ecosystem-sees-first-apparent-scam-as-riskonblast-rug-pulls-13m-ether","type":"other","url":""},{"credibility":3,"name":"https://cryptonews.com/news/blast-ecosystems-riskonblast-rug-pulls-1-3m-ether-in-apparent-scam/","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/community/articles/65dc7184761bde6939a5fc4e/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://crypto.news/blockchain-fraud-group-strikes-again-launches-fresh-scheme-on-blast-network/","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/blockchain-fraud-group-shifts-1m-to-blast-for-new-schemes","type":"other","url":""},{"credibility":3,"name":"https://invezz.com/news/2024/04/15/blasts-leaper-finance-flagged-the-group-of-scammers-who-stole-8-figures/","type":"other","url":""},{"credibility":3,"name":"https://beincrypto.com/fraud-ethereum-layer-2-base-blast-arbitrum/","type":"other","url":""},{"credibility":3,"name":"https://cryptopotato.com/warning-malicious-group-threatening-layer-2-networks-exposed/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/markets/2024/02/26/blast-ecosystem-sees-first-apparent-scam-as-riskonblast-rug-pulls-13m-ether","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/community/articles/65dc7184761bde6939a5fc4e/","type":"other","url":""},{"credibility":3,"name":"https://www.ccn.com/news/blasts-first-scam-riskonblast-suffers-rug-pull/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.certik.com/resources/blog/risk-on-blast-incident-analysis","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/markets/2024/02/26/blast-ecosystem-sees-first-apparent-scam-as-riskonblast-rug-pulls-13m-ether","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/blockchain-fraud-group-strikes-again-launches-fresh-scheme-on-blast-network/","type":"other","url":""}]}],"sources_used":[{"credibility":1,"name":"CoinDesk: Blast Ecosystem Sees First Apparent Scam as RiskOnBlast Rug Pulls $1.3M Ether","type":"news_article","url":"https://www.coindesk.com/markets/2024/02/26/blast-ecosystem-sees-first-apparent-scam-as-riskonblast-rug-pulls-13m-ether"},{"credibility":2,"name":"CertiK: Risk On Blast Incident Analysis","type":"research","url":"https://www.certik.com/resources/blog/risk-on-blast-incident-analysis"},{"credibility":1,"name":"The Block: Blast-based GambleFi platform RiskOnBlast allegedly rugpulled presale participants for $1.3 million","type":"news_article","url":"https://www.theblock.co/post/279004/blast-gamblefi-platform-riskonblast-rugpull"},{"credibility":2,"name":"crypto.news: Blockchain fraud group strikes again, launches fresh scheme on Blast network","type":"news_article","url":"https://crypto.news/blockchain-fraud-group-strikes-again-launches-fresh-scheme-on-blast-network/"},{"credibility":1,"name":"CoinTelegraph: Blockchain fraud group shifts $1M to Blast for new schemes","type":"news_article","url":"https://cointelegraph.com/news/blockchain-fraud-group-shifts-1m-to-blast-for-new-schemes"},{"credibility":2,"name":"CryptoNews: Blast Ecosystem RiskOnBlast Rug Pulls $1.3M Ether in Apparent Scam","type":"news_article","url":"https://cryptonews.com/news/blast-ecosystems-riskonblast-rug-pulls-1-3m-ether-in-apparent-scam/"},{"credibility":2,"name":"Invezz: Blast's Leaper Finance flagged; the group of scammers who stole 8 figures","type":"news_article","url":"https://invezz.com/news/2024/04/15/blasts-leaper-finance-flagged-the-group-of-scammers-who-stole-8-figures/"},{"credibility":2,"name":"BeInCrypto: Fraud Syndicate Targets Ethereum Layer 2 Base Blast Arbitrum","type":"news_article","url":"https://beincrypto.com/fraud-ethereum-layer-2-base-blast-arbitrum/"},{"credibility":2,"name":"CryptoPotato: Warning Malicious Group Threatening Layer-2 Networks Exposed","type":"news_article","url":"https://cryptopotato.com/warning-malicious-group-threatening-layer-2-networks-exposed/"},{"credibility":3,"name":"CoinMarketCap Community: RiskOnBlast Team Disappeared With Over 420 ETH In A RISK Token Rugpull","type":"community_report","url":"https://coinmarketcap.com/community/articles/65dc7184761bde6939a5fc4e/"},{"credibility":2,"name":"CCN: Blast's First Scam RiskOnBlast Suffers Rug Pull","type":"news_article","url":"https://www.ccn.com/news/blasts-first-scam-riskonblast-suffers-rug-pull/"},{"credibility":2,"name":"crypto.news: Blast network layer 2 project falls prey to 500 ETH rug pull","type":"news_article","url":"https://crypto.news/blast-network-layer-2-project-prey-500-eth-rug-pull/"}],"summary":"RiskOnBlast was a GambleFi (gambling and exchange) platform launched on the Blast Layer-2 network in February 2024. Its anonymous team executed an exit scam (rug pull) on February 24, 2024, draining approximately 420 ETH (~$1.3 million) from over 750 investor wallets immediately after the IDO cap was reached. The project is linked by on-chain evidence to a serial fraud group responsible for more than $20 million in losses across multiple DeFi protocols.","timeline":[{"date":"2024-02-22","event":"RiskOnBlast IDO contract (0x25f8c342e430c85829ef5021c0720f0c60969840) deployed on Blast L2. RISK token presale opens.","source":""},{"date":"2024-02-23","event":"IDO closes after reaching 420 ETH (~$1.25 million) cap from over 750 investor wallets.","source":""},{"date":"2024-02-24","event":"At 14:35 UTC, IDO creator wallet (0x1eeb963133f657ed3228d04b8cd9a13280efc558) calls withdraw() on the IDO contract 17 minutes after cap is confirmed, draining all 420.50 ETH. Team deletes website and social media accounts.","source":""},{"date":"2024-02-25","event":"Coinbase tech lead Andrew Choi alerts the community to disappearance of project's website and X account. On-chain researchers SomaXBT and Amir Ormu begin documenting fund flows. Funds are distributed to ChangeNow (~$495k), MEXC (~$386k), Bybit (~$193k), Railgun (~$125k), and other services.","source":""},{"date":"2024-02-26","event":"CoinDesk and multiple crypto outlets report the incident as the first confirmed exit scam on Blast network. CertiK publishes on-chain incident analysis.","source":""},{"date":"2024-04-14","event":"ZachXBT publicly identifies Leaper Finance on Blast as a new project being funded by the same fraud group, with ~$1 million in laundered funds from prior scams (including alleged RiskOnBlast proceeds) seeded into the protocol.","source":""},{"date":"2024-04-15","event":"ZachXBT also flags ZebraLending on Base as a concurrent suspected operation by the same group (~$311k TVL). Following the exposure, Leaper Finance and Glori Finance deactivate social media and websites, consistent with the RiskOnBlast pattern.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 984a2378-155c-4860-947a-26fccb32b54ccopy
2. #2rescoreby systemsystem

   2026-10-27 06:04:23Z
   Score: 2 → 0 (-2)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 2 → 0. The page establishes that the subject is itself a scheme, so the score is 0.
   anchoranchored

   chain

   ●mainnet-betaslot 461,964,129

   sig

   aYByh8PZARxR…df8hLf73copyexplorer ↗

   hash

   e1oQbqK64uB1…dY7W1cfrcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (517 B) ▸

   {"actor":"system","decided_at":"2026-10-27T06:04:23.299Z","decision":"rescore","investigation_id":"a6524f87-aa19-43ce-821b-8cc026828096","new_score":0,"page_slug":"riskonblast","prev_score":2,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 2 → 0. The page establishes that the subject is itself a scheme, so the score is 0.","score_delta":-2,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 7960f11b-a080-4be1-8756-465dd8bbe5a5copy
3. #3reviewby reviewerreviewer

   2026-11-02 05:21:15Z
   Score: 0 → 0 (no score change)
   The core facts hold and match CoinDesk and CertiK: a roughly 420 ETH rug pull on Feb 24, 2024, the addresses, the 14:35 UTC withdrawal, the laundering amounts and the 750-wallet figure. Problems are in details. The page calls the IDO both 'uncapped' and capped. It dates the IDO close to Feb 23, while CertiK puts the cap-reaching deposit 17 minutes before the Feb 24 withdrawal. It describes a 'rating' where the source reports only an X comment. The $20M group total, several per-project loss figures, the Andrew Choi alert and the top-three ranking were not confirmed. Several cited sources were not fetched.
   anchoranchored

   chain

   ●mainnet-betaslot 464,375,719

   sig

   5kz4YfF91nsq…VQJVZAjXcopyexplorer ↗

   hash

   6hj9uwZZprf4…X5x8DSN8copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1460 B) ▸

   {"actor":"reviewer","artifact_identity":"728274ddc9f954a1b885acadb10b519e","decided_at":"2026-11-02T05:21:15.227Z","decision":"review","disputed_pct":0.1818,"findings_hash":"Dvzu7m7t8XqPn5JLsAzW3ficBFmXG9WBPQ8FQ4Fdpp2t","investigation_id":"a6524f87-aa19-43ce-821b-8cc026828096","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":0,"omissions":{"material":0,"total":1},"page_content_hash":"55ca773e88d3639c6d02dc7763f3e69039cf44123c8e7449ed341390a3345d88","page_slug":"riskonblast","prev_score":0,"reason":"The core facts hold and match CoinDesk and CertiK: a roughly 420 ETH rug pull on Feb 24, 2024, the addresses, the 14:35 UTC withdrawal, the laundering amounts and the 750-wallet figure. Problems are in details. The page calls the IDO both 'uncapped' and capped. It dates the IDO close to Feb 23, while CertiK puts the cap-reaching deposit 17 minutes before the Feb 24 withdrawal. It describes a 'rating' where the source reports only an X comment. The $20M group total, several per-project loss figures, the Andrew Choi alert and the top-three ranking were not confirmed. Several cited sources were not fetched.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"sequence_num":3,"subject_status":"shut_down","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 5f7c9c44-4f1e-4c4c-a6df-29e331790a90copy
4. #4review reviseby judgejudge

   2026-11-02 05:21:15Z
   Score: 0 → 0 (no score change)
   The core facts of the rug pull (about 420 ETH taken on Feb 24, 2024, the addresses, the 14:35 UTC withdrawal, the laundering amounts and the 750-wallet figure) were confirmed against CoinDesk and CertiK. Two of 11 claims could not be verified (claim_findings[8] the Andrew Choi alert, claim_findings[9] the top-three 2024 presale ranking), giving about 18% disputed or unverifiable. Five further claims were only partly supported: the page calls the IDO both uncapped and capped and dates its close to Feb 23 against CertiK's timing (claim_findings[1], [2]), and it describes a formal 'Undeniable' rating where the source reports only an X comment (claim_findings[3], [4]). The $20M group total and several per-project loss figures were not confirmed (claim_findings[7]). Timeline entries carry no sources. The penalty is kept at the low end because the reviewer's confidence was moderate and the flawed items are secondary to the core allegation.
   anchoranchored

   chain

   ●mainnet-betaslot 464,375,723

   sig

   33SEv4bvPt5j…FRJU4h3pcopyexplorer ↗

   hash

   3DQVA3ptdxga…dfk9jZ1icopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1590 B) ▸

   {"actor":"judge","artifact_identity":"728274ddc9f954a1b885acadb10b519e","band_override":null,"decided_at":"2026-11-02T05:21:15.227Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.1818,"investigation_id":"a6524f87-aa19-43ce-821b-8cc026828096","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":0,"page_slug":"riskonblast","prev_score":0,"reason":"The core facts of the rug pull (about 420 ETH taken on Feb 24, 2024, the addresses, the 14:35 UTC withdrawal, the laundering amounts and the 750-wallet figure) were confirmed against CoinDesk and CertiK. Two of 11 claims could not be verified (claim_findings[8] the Andrew Choi alert, claim_findings[9] the top-three 2024 presale ranking), giving about 18% disputed or unverifiable. Five further claims were only partly supported: the page calls the IDO both uncapped and capped and dates its close to Feb 23 against CertiK's timing (claim_findings[1], [2]), and it describes a formal 'Undeniable' rating where the source reports only an X comment (claim_findings[3], [4]). The $20M group total and several per-project loss figures were not confirmed (claim_findings[7]). Timeline entries carry no sources. The penalty is kept at the low end because the reviewer's confidence was moderate and the flawed items are secondary to the core allegation.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"sequence_num":4,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision b6ef0423-2c64-43a6-aff8-a528f0c01155copy