Audit log

Every state-changing event for Shido: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-28 08:10:48Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 422,681,220

   sig

   3iSJ5qAN7Wrt…3ccXzibocopyexplorer ↗

   hash

   3zmn7kAgvZqa…6HZagyxdcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (4731 B) ▸

   {"actor":"system:backfill","investigation_id":"b259e90f-71df-4447-a93f-7d6ff994de7d","kind":"publish","page_slug":"shido","published_at":"2026-05-28T08:10:48.557Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Shido","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.cryptotimes.io/2024/02/29/shido-token-plummets-94-as-hacker-drains-staking-contract/","type":"other","url":""},{"credibility":3,"name":"https://smartcontractshacking.com/hacks/shido-hack-2024","type":"other","url":""},{"credibility":3,"name":"https://www.web3isgoinggreat.com/?id=shido-contract-exploit","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/shido-token-dives-over-90-after-ethereum-staking-contract-exploit/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://crypto.news/shido-token-dives-over-90-after-ethereum-staking-contract-exploit/","type":"other","url":""},{"credibility":3,"name":"https://medium.com/coinmonks/winter-2024-crypto-crime-report-private-key-exploits-new-serial-hacker-ponzi-schemes-fake-75f4c8b6e03d","type":"other","url":""},{"credibility":3,"name":"https://www.cryptopotato.com/heres-why-the-shido-token-crashed-94-despite-the-ongoing-market-rally/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://smartcontractshacking.com/hacks/shido-hack-2024","type":"other","url":""},{"credibility":3,"name":"https://www.cryptotimes.io/2024/02/29/shido-token-plummets-94-as-hacker-drains-staking-contract/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.bitcoininsider.org/article/242623/shido-network-shido-loses-half-its-token-supply-massive-hack","type":"other","url":""},{"credibility":3,"name":"https://invezz.com/news/2024/02/29/shido-network-shido-loses-half-of-its-token-supply-in-a-massive-hack/","type":"other","url":""},{"credibility":3,"name":"https://www.coingecko.com/en/coins/shido","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://tracxn.com/d/companies/shido/__TvkEEseDh7mlmW9L2-1NtswGovV95dgS_nc1uSqsoTA","type":"other","url":""},{"credibility":3,"name":"https://shido.io/","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/shido-token-dives-over-90-after-ethereum-staking-contract-exploit/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coingecko.com/en/coins/shido","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/currencies/shido-network/","type":"other","url":""}]}],"sources_used":[],"summary":"Shido Network (SHIDO) is a Layer-1 proof-of-stake blockchain project founded in Sweden in 2021. On February 29, 2024, an attacker exploited the Ethereum-based SHIDO staking contract by transferring ownership to a new address and upgrading it with a hidden token-withdrawal function, draining over 4.3 billion tokens and causing the price to collapse 94% within 30 minutes. On-chain investigator ZachXBT linked the exploit to a serial hacker responsible for the OKX (December 2023) and Concentric Finance (January 2024) hacks, with the attack vector in each case being private key compromise via social engineering.","timeline":[{"date":"2021-01-01","event":"Shido Network founded in Bromma, Sweden by Bjorn Bonnevier and Edin Maloku.","source":""},{"date":"2023-12-01","event":"OKX exploit (~$2.7M) occurs; ZachXBT would later allege on-chain links to the Shido attacker.","source":""},{"date":"2024-01-22","event":"Concentric Finance hacked for approximately $1.8M via social engineering / malware attack on a team member with deployer wallet access.","source":""},{"date":"2024-02-24","event":"Shido announces mainnet launch scheduled for the following week.","source":""},{"date":"2024-02-29","event":"Shido Ethereum staking contract exploited: ownership transferred, hidden withdrawToken() function introduced, 4.35 billion SHIDO tokens (~$3.3M realized) drained. Token price collapses 94% within 30 minutes. PeckShield publicly discloses the breach.","source":""},{"date":"2024-02-29","event":"ZachXBT traces exploiter funding through Across protocol (Arbitrum) and Layerswap; identifies alleged link to OKX and Concentric Finance hacks via shared attacker infrastructure.","source":""},{"date":"2024-02-29","event":"Shido team replaces compromised deployer address, suspends DEX liquidity provisioning, contacts CEXs to freeze associated tokens, and promises to refund all stakers.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 6d81fa45-6423-4b7b-ae30-9204f9432bb5copy
2. #2rescoreby systemsystem

   2026-10-10 18:49:20Z
   Score: 22 → 59 (+37)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 22 → 59. Problems weighed by who is responsible: incidents the subject suffered −6.4, concerns that are not fraud −3.2, problems around the subject, caused by others −2.4; legitimacy credit long-running +6.
   anchoranchored

   chain

   ●mainnet-betaslot 455,369,359

   sig

   5twigNUgYWKf…dgzhHBAxcopyexplorer ↗

   hash

   8MFLDSRhSXBi…ew47RCatcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (636 B) ▸

   {"actor":"system","decided_at":"2026-10-10T18:49:20.237Z","decision":"rescore","investigation_id":"b259e90f-71df-4447-a93f-7d6ff994de7d","new_score":59,"page_slug":"shido","prev_score":22,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 22 → 59. Problems weighed by who is responsible: incidents the subject suffered −6.4, concerns that are not fraud −3.2, problems around the subject, caused by others −2.4; legitimacy credit long-running +6.","score_delta":37,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 9d648198-fdcb-4ef3-8db9-1aa9a5203ca4copy
3. #3reviewby reviewerreviewer

   2026-11-02 00:45:55Z
   Score: 59 → 59 (no score change)
   Core exploit facts (amount drained, mechanism, proceeds, funding trace) are well supported. The headline attribution to a serial hacker behind the OKX and Concentric hacks is not supported by any readable source and appears in the summary, section and timeline. The single-transaction and atomic claim is overstated, and the CoinGecko price figures are stale.
   anchoranchored

   chain

   ●mainnet-betaslot 464,298,683

   sig

   tYPypbnqQBBy…wr5B1BnNcopyexplorer ↗

   hash

   6co33h6RJrCm…UVChh5ZTcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1204 B) ▸

   {"actor":"reviewer","artifact_identity":"fa39721fc29de5a752061ec4ccb23691","blocked_count":1,"decided_at":"2026-11-02T00:45:55.778Z","decision":"review","disputed_pct":0.4545,"findings_hash":"Ap93e5YjHhBSPpmT7CE1ZpyAvCtXpsjpXjQiDgNc93BQ","investigation_id":"b259e90f-71df-4447-a93f-7d6ff994de7d","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":59,"page_content_hash":"9dea90056548e0593adc419c289ea1e5ef64d4360068fca5c9cb5c707dc2b4aa","page_slug":"shido","prev_score":59,"reason":"Core exploit facts (amount drained, mechanism, proceeds, funding trace) are well supported. The headline attribution to a serial hacker behind the OKX and Concentric hacks is not supported by any readable source and appears in the summary, section and timeline. The single-transaction and atomic claim is overstated, and the CoinGecko price figures are stale.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":11,"sequence_num":3,"subject_status":"exploited","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision d3c91eb9-6881-49f4-8b97-cf193d4776f5copy
4. #4review reviseby judgejudge

   2026-11-02 00:45:56Z
   Score: 59 → 59 (no score change)
   Of 12 claims checked, 11 count toward the result (one was unreadable because its source blocked the reviewer). Five of those 11 were disputed or could not be verified, about 45%, which falls in the significant-issues band. The headline attribution to a serial hacker behind the OKX and Concentric Finance hacks is unsupported by any readable source (claim_findings[3] and [4]), and the single-transaction, atomic-sequence claim is overstated (claim_findings[2]). The core exploit facts (amount drained, mechanism, proceeds, funding trace) are confirmed, so the penalty sits in the lower half of the band. CoinGecko figures are also stale (claim_findings[6] and [7]). The reviewer's confidence is moderate (0.6) and no omissions or status contradictions were found.
   anchoranchored

   chain

   ●mainnet-betaslot 464,298,687

   sig

   xpCd8GwUf73m…2gEYYyv6copyexplorer ↗

   hash

   6tFx5FnSh3NY…xyoh6dLecopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1440 B) ▸

   {"actor":"judge","artifact_identity":"fa39721fc29de5a752061ec4ccb23691","band_override":null,"blocked_count":1,"decided_at":"2026-11-02T00:45:55.778Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.4545,"investigation_id":"b259e90f-71df-4447-a93f-7d6ff994de7d","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":59,"page_slug":"shido","prev_score":59,"reason":"Of 12 claims checked, 11 count toward the result (one was unreadable because its source blocked the reviewer). Five of those 11 were disputed or could not be verified, about 45%, which falls in the significant-issues band. The headline attribution to a serial hacker behind the OKX and Concentric Finance hacks is unsupported by any readable source (claim_findings[3] and [4]), and the single-transaction, atomic-sequence claim is overstated (claim_findings[2]). The core exploit facts (amount drained, mechanism, proceeds, funding trace) are confirmed, so the penalty sits in the lower half of the band. CoinGecko figures are also stale (claim_findings[6] and [7]). The reviewer's confidence is moderate (0.6) and no omissions or status contradictions were found.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":11,"sequence_num":4,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 39ded766-8b02-4648-8bfe-19d47cc4a84ccopy
5. #5rescoreby systemsystem

   2026-11-02 00:45:57Z
   Score: 59 → 65 (+6)
   Recalculated after the fact-check of 2026-11-02. Rescored under Scoring v2, the published formula (avoid.net/scoring): 59 → 65. Problems weighed by who is responsible: incidents the subject suffered −6.4; legitimacy credit long-running +6; 4 section(s) set aside until a failed fact-check is resolved.
   anchoranchored

   chain

   ●mainnet-betaslot 464,298,693

   sig

   4pQEiKHCTykv…GL1XaoKzcopyexplorer ↗

   hash

   6csjgfoLH1EG…VTPUpSnNcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (660 B) ▸

   {"actor":"system","decided_at":"2026-11-02T00:45:55.778Z","decision":"rescore","investigation_id":"b259e90f-71df-4447-a93f-7d6ff994de7d","new_score":65,"page_slug":"shido","prev_score":59,"reason":"Recalculated after the fact-check of 2026-11-02. Rescored under Scoring v2, the published formula (avoid.net/scoring): 59 → 65. Problems weighed by who is responsible: incidents the subject suffered −6.4; legitimacy credit long-running +6; 4 section(s) set aside until a failed fact-check is resolved.","score_delta":6,"score_model":"v2","sequence_num":5,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 67ff5871-3e30-48dc-922f-5dbd538a09a1copy