Audit log

Every state-changing event for Roe Finance: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-30 12:11:29Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 423,153,839

   sig

   wikC7sPZyWeo…2wUd7utWcopyexplorer ↗

   hash

   3jneqaa9Nimx…ELxvKT4Pcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (7434 B) ▸

   {"actor":"system:backfill","investigation_id":"4fba81bf-8c5e-492e-9a20-bcdad19abd7f","kind":"publish","page_slug":"roe-finance","published_at":"2026-05-30T12:11:29.482Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Roe Finance","sections":[{"content":"","heading":"","severity":"low","sources":[{"credibility":2,"name":"Roe Finance — Solving the Uni Return Gap (Medium)","type":"official","url":"https://medium.com/@Roefinance/roe-finance-solving-the-uni-return-gap-67b6ab8a2b36"},{"credibility":2,"name":"ROE Finance — Official Website","type":"official","url":"https://www.roe.finance/"},{"credibility":2,"name":"Roe Finance — DeFi Llama Protocol Page","type":"research","url":"https://defillama.com/protocol/roe-finance"}]},{"content":"","heading":"","severity":"high","sources":[{"credibility":2,"name":"Decoding ROE Finance's Flash Loan Exploit — QuillAudits","type":"research","url":"https://quillaudits.medium.com/decoding-roe-finances-flash-loan-exploit-quillaudits-df8494e2090f"},{"credibility":2,"name":"Taking A Closer Look at Roe Finance Exploit — Neptune Mutual","type":"research","url":"https://neptunemutual.com/blog/taking-a-closer-look-at-roe-finance-exploit/"}]},{"content":"","heading":"","severity":"high","sources":[{"credibility":2,"name":"Decoding ROE Finance's Flash Loan Exploit — QuillAudits","type":"on_chain","url":"https://quillaudits.medium.com/decoding-roe-finances-flash-loan-exploit-quillaudits-df8494e2090f"}]},{"content":"","heading":"","severity":"high","sources":[{"credibility":2,"name":"Decoding ROE Finance's Flash Loan Exploit — QuillAudits","type":"research","url":"https://quillaudits.medium.com/decoding-roe-finances-flash-loan-exploit-quillaudits-df8494e2090f"},{"credibility":2,"name":"Taking A Closer Look at Roe Finance Exploit — Neptune Mutual","type":"research","url":"https://neptunemutual.com/blog/taking-a-closer-look-at-roe-finance-exploit/"},{"credibility":2,"name":"Oracle Manipulation — Smart Contract Security Field Guide","type":"research","url":"https://scsfg.io/hackers/oracle-manipulation/"}]},{"content":"","heading":"","severity":"high","sources":[{"credibility":2,"name":"Taking A Closer Look at Roe Finance Exploit — Neptune Mutual","type":"research","url":"https://neptunemutual.com/blog/taking-a-closer-look-at-roe-finance-exploit/"},{"credibility":3,"name":"ROE Finance Twitter / X Account","type":"social_media","url":"https://x.com/RoeFinance"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":2,"name":"ZachXBT — Twitter/X Profile","type":"social_media","url":"https://twitter.com/zachxbt"},{"credibility":2,"name":"ZachXBT — Mirror.xyz Investigations Archive","type":"other","url":"https://zachxbt.mirror.xyz/"},{"credibility":2,"name":"Who Is ZachXBT, the Crypto Sleuth Exposing Scams? — BeInCrypto","type":"news_article","url":"https://beincrypto.com/learn/zachxbt-crypto-scam/"},{"credibility":2,"name":"ZachXBT — Wikipedia","type":"other","url":"https://en.wikipedia.org/wiki/ZachXBT"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":2,"name":"Roe Finance — Solving the Uni Return Gap (Medium)","type":"official","url":"https://medium.com/@Roefinance/roe-finance-solving-the-uni-return-gap-67b6ab8a2b36"},{"credibility":2,"name":"ROE Finance — Official Website","type":"official","url":"https://www.roe.finance/"}]}],"sources_used":[{"credibility":2,"name":"Decoding ROE Finance's Flash Loan Exploit — QuillAudits","type":"research","url":"https://quillaudits.medium.com/decoding-roe-finances-flash-loan-exploit-quillaudits-df8494e2090f"},{"credibility":2,"name":"Taking A Closer Look at Roe Finance Exploit — Neptune Mutual","type":"research","url":"https://neptunemutual.com/blog/taking-a-closer-look-at-roe-finance-exploit/"},{"credibility":2,"name":"Roe Finance — DeFi Llama Protocol Page","type":"research","url":"https://defillama.com/protocol/roe-finance"},{"credibility":2,"name":"Roe Finance — Solving the Uni Return Gap (Medium)","type":"official","url":"https://medium.com/@Roefinance/roe-finance-solving-the-uni-return-gap-67b6ab8a2b36"},{"credibility":2,"name":"ROE Finance — Official Website","type":"official","url":"https://www.roe.finance/"},{"credibility":2,"name":"ZachXBT — Twitter/X Profile","type":"social_media","url":"https://twitter.com/zachxbt"},{"credibility":2,"name":"ZachXBT — Mirror.xyz Investigations Archive","type":"other","url":"https://zachxbt.mirror.xyz/"},{"credibility":2,"name":"Who Is ZachXBT, the Crypto Sleuth Exposing Scams? — BeInCrypto","type":"news_article","url":"https://beincrypto.com/learn/zachxbt-crypto-scam/"},{"credibility":2,"name":"Oracle Manipulation — Smart Contract Security Field Guide","type":"research","url":"https://scsfg.io/hackers/oracle-manipulation/"},{"credibility":3,"name":"ROE Finance Twitter / X Account","type":"social_media","url":"https://x.com/RoeFinance"}],"summary":"Roe Finance is a decentralized lending protocol built on Ethereum that allows Uniswap v2 liquidity providers to lend LP tokens for additional yield. On January 11, 2023, the protocol suffered a flash loan-driven price oracle manipulation exploit that drained approximately $80,000 from its pools, with the majority of profits captured by a front-running MEV bot rather than the original attacker. The protocol issued no official post-mortem or public response to the incident, raising concerns about transparency and operational accountability.","timeline":[{"date":"2022-09-26","event":"Roe Finance publishes its founding Medium article 'Solving the Uni Return Gap,' describing the protocol's LP token lending model and noting collaboration with QCP Capital.","source":"Roe Finance Medium","source_url":"https://medium.com/@Roefinance/roe-finance-solving-the-uni-return-gap-67b6ab8a2b36"},{"date":"2023-01-11","event":"Roe Finance is exploited on Ethereum mainnet via a flash loan and spot oracle manipulation attack. An attacker borrows 5.76 million USDC from Balancer, inflates UNI-v2 collateral pricing using sync(), and drains approximately $80,000. The attacker's transaction is front-run by a MEV bot which captures roughly $78,190 of the proceeds.","source":"QuillAudits — Decoding ROE Finance's Flash Loan Exploit","source_url":"https://quillaudits.medium.com/decoding-roe-finances-flash-loan-exploit-quillaudits-df8494e2090f"},{"date":"2023-01-11","event":"Attacker converts remaining assets to DAI and moves funds to a secondary wallet (0xE2Ba15be8C6Fb0d7C1F7bEA9106eb8232248FB8B), labeled 'RoeFinance Exploiter 2' by on-chain analysts.","source":"QuillAudits — Decoding ROE Finance's Flash Loan Exploit","source_url":"https://quillaudits.medium.com/decoding-roe-finances-flash-loan-exploit-quillaudits-df8494e2090f"},{"date":"2023-01-12","event":"Security firms QuillAudits and Neptune Mutual publish independent analyses of the Roe Finance exploit, documenting attacker addresses, fund flows, and root cause.","source":"Neptune Mutual — Taking A Closer Look at Roe Finance Exploit","source_url":"https://neptunemutual.com/blog/taking-a-closer-look-at-roe-finance-exploit/"},{"date":"2023-01-12","event":"Roe Finance issues no official post-mortem or public statement acknowledging the exploit, according to third-party security researchers.","source":"Neptune Mutual — Taking A Closer Look at Roe Finance Exploit","source_url":"https://neptunemutual.com/blog/taking-a-closer-look-at-roe-finance-exploit/"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 66dc1ec4-926b-4173-997d-bcb0b4a17fdecopy
2. #2rescoreby systemsystem

   2026-10-27 06:07:04Z
   Score: 28 → 44 (+16)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 28 → 44. Problems weighed by who is responsible: concerns that are not fraud −18.4, incidents the subject suffered −12, problems around the subject, caused by others −0.3.
   anchoranchored

   chain

   ●mainnet-betaslot 461,966,105

   sig

   2xCHZfP6cjnR…rhrgcEEscopyexplorer ↗

   hash

   BUDPsRUTKiWU…kw2H9Btccopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (607 B) ▸

   {"actor":"system","decided_at":"2026-10-27T06:07:04.559Z","decision":"rescore","investigation_id":"4fba81bf-8c5e-492e-9a20-bcdad19abd7f","new_score":44,"page_slug":"roe-finance","prev_score":28,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 28 → 44. Problems weighed by who is responsible: concerns that are not fraud −18.4, incidents the subject suffered −12, problems around the subject, caused by others −0.3.","score_delta":16,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision f16e46d2-fc66-4a95-8307-4df3b3a76bc8copy
3. #3reviewby reviewerreviewer

   2026-11-02 05:03:56Z
   Score: 44 → 44 (no score change)
   The core event (a flash-loan oracle manipulation exploit on 2023-01-11 of about $80K, with a 5.76M USDC Balancer loan) is corroborated by search results. The detailed on-chain figures, addresses, MEV bot split and the no-response claim could not be checked because the primary sources were blocked. The ZachXBT flagging is weakly supported and internally hedged. The protocol appears nearly dormant but not formally shut down.
   anchoranchored

   chain

   ●mainnet-betaslot 464,370,923

   sig

   2qrRfj1exTKP…BPrkKGKucopyexplorer ↗

   hash

   Co7E6vLgFTfp…7LriYJfDcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1311 B) ▸

   {"actor":"reviewer","artifact_identity":"634c22a6ff31d1b59ff2e0f44b43250a","blocked_count":2,"decided_at":"2026-11-02T05:03:56.161Z","decision":"review","disputed_pct":0.25,"findings_hash":"FwLbgc3oUqTbz9BeMjgrEwhiLDYo6eAiMkWtWsvRVTLZ","investigation_id":"4fba81bf-8c5e-492e-9a20-bcdad19abd7f","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":44,"omissions":{"material":0,"total":1},"page_content_hash":"d2d6996b81e7990ac3427709838ae895486e61609cf1bcbdd1bd2585a6d162cf","page_slug":"roe-finance","prev_score":44,"reason":"The core event (a flash-loan oracle manipulation exploit on 2023-01-11 of about $80K, with a 5.76M USDC Balancer loan) is corroborated by search results. The detailed on-chain figures, addresses, MEV bot split and the no-response claim could not be checked because the primary sources were blocked. The ZachXBT flagging is weakly supported and internally hedged. The protocol appears nearly dormant but not formally shut down.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":4,"sequence_num":3,"subject_status":"exploited","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 80599176-0ba4-4b01-a2ec-f7df1de09c42copy
4. #4review reviseby judgejudge

   2026-11-02 05:03:56Z
   Score: 44 → 44 (no score change)
   The core event, a flash-loan oracle manipulation exploit on 2023-01-11 costing about $80,000, was corroborated by secondary sources (claim_findings[0]). Excluding two findings the reviewer could not check because the sources blocked access, 1 of 4 checkable claims was unverifiable (claim_findings[3], the no-post-mortem claim), giving a disputed share of about 25%. The ZachXBT wording (claim_findings[4]) overstates the evidence and the chain list is incomplete (claim_findings[5]), so those sentences should be corrected. The detailed on-chain figures and addresses are still unchecked because the primary sources were blocked, which is a coverage limit and not a defect of the page.
   anchoranchored

   chain

   ●mainnet-betaslot 464,370,928

   sig

   3yodNLdABpL9…KC27YqS3copyexplorer ↗

   hash

   AJqR72KwZMmP…dni5S4E9copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1365 B) ▸

   {"actor":"judge","artifact_identity":"634c22a6ff31d1b59ff2e0f44b43250a","band_override":null,"blocked_count":2,"decided_at":"2026-11-02T05:03:56.161Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.25,"investigation_id":"4fba81bf-8c5e-492e-9a20-bcdad19abd7f","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":44,"page_slug":"roe-finance","prev_score":44,"reason":"The core event, a flash-loan oracle manipulation exploit on 2023-01-11 costing about $80,000, was corroborated by secondary sources (claim_findings[0]). Excluding two findings the reviewer could not check because the sources blocked access, 1 of 4 checkable claims was unverifiable (claim_findings[3], the no-post-mortem claim), giving a disputed share of about 25%. The ZachXBT wording (claim_findings[4]) overstates the evidence and the chain list is incomplete (claim_findings[5]), so those sentences should be corrected. The detailed on-chain figures and addresses are still unchecked because the primary sources were blocked, which is a coverage limit and not a defect of the page.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":4,"sequence_num":4,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 39120446-8554-4cdc-8297-c8da69821b36copy
5. #5rescoreby systemsystem

   2026-11-02 05:03:57Z
   Score: 44 → 56 (+12)
   Recalculated after the fact-check of 2026-11-02. Rescored under Scoring v2, the published formula (avoid.net/scoring): 44 → 56. Problems weighed by who is responsible: concerns that are not fraud −12.4, incidents the subject suffered −6, problems around the subject, caused by others −0.3; 2 section(s) set aside until a failed fact-check is resolved.
   anchoranchored

   chain

   ●mainnet-betaslot 464,370,934

   sig

   2mWQdYAWCdCL…uV9LU7DNcopyexplorer ↗

   hash

   DGHt2FCQ7qED…VyzjJCnGcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (717 B) ▸

   {"actor":"system","decided_at":"2026-11-02T05:03:56.161Z","decision":"rescore","investigation_id":"4fba81bf-8c5e-492e-9a20-bcdad19abd7f","new_score":56,"page_slug":"roe-finance","prev_score":44,"reason":"Recalculated after the fact-check of 2026-11-02. Rescored under Scoring v2, the published formula (avoid.net/scoring): 44 → 56. Problems weighed by who is responsible: concerns that are not fraud −12.4, incidents the subject suffered −6, problems around the subject, caused by others −0.3; 2 section(s) set aside until a failed fact-check is resolved.","score_delta":12,"score_model":"v2","sequence_num":5,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 5cd9bb21-4cef-46c8-a3cd-a51ca91fc150copy