Skip to main content
AVOID.NET
← SolvBTC3 decisions on this page

Audit log

Every state-changing event for SolvBTC: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

  1. #1publishby system:backfill
    2026-05-26 19:24:38Z
    Score: ? → ? (no score change)
    anchoranchored
    chain
    ●mainnet-betaslot 422,346,978
    sig
    4wQKb5bZb1JQ…nc9wm78Vexplorer ↗
    hash
    7SpxVj5EPFLP…wuBgdd3Lsha256 → base58
    verifying row…full verify ↗
    canonical bytes (6942 B) ▸
    {"actor":"system:backfill","investigation_id":"243aa43a-27c9-4bd1-9794-e5923d008b77","kind":"publish","page_slug":"solvbtc","published_at":"2026-05-26T19:24:38.510Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"SolvBTC","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://docs.solv.finance/key-products/solvbtc","type":"other","url":""},{"credibility":3,"name":"https://solv.finance/","type":"other","url":""},{"credibility":3,"name":"https://www.gate.com/learn/articles/what-is-solv-protocol-all-you-need-to-know-about-solv-btc/4422","type":"other","url":""},{"credibility":3,"name":"https://en.cryptonomist.ch/2025/09/01/solv-and-chainlink-integrate-proof-of-reserve-into-solvbtc-live-on-chain-anti-manipulation-feed-on-ethereum/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://beincrypto.com/solv-protocol-hack-bro-vault-exploit/","type":"other","url":""},{"credibility":3,"name":"https://www.theblock.co/post/392492/solv-protocol-says-exploit-drained-2-7-million-from-bitcoin-yield-vault","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/hacker-steals-nearly-3-million-from-solv-protocol","type":"other","url":""},{"credibility":3,"name":"https://blog.verichains.io/p/solv-protocol-hack-analysis","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-solv-hack-march-2026","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/solv-protocol-exploit-drains-2-7m-in-solvbtc-10-bounty-offered/","type":"other","url":""},{"credibility":3,"name":"https://www.web3isgoinggreat.com/single/solv-protocol-exploit","type":"other","url":""},{"credibility":3,"name":"https://invezz.com/news/2026/03/06/solv-protocol-vault-exploit-drains-2-7m-worth-of-solvbtc/","type":"other","url":""},{"credibility":3,"name":"https://certificate.quantstamp.com/full/solv-protocol-solv-btc/1eca9413-0b03-4b7d-9885-e5373ee2d722/index.html","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.cryptopolitan.com/solv-protocol-accused-of-manipulating-tvl/","type":"other","url":""},{"credibility":3,"name":"https://beincrypto.com/solv-protocol-dismisses-tvl-inflation/","type":"other","url":""},{"credibility":3,"name":"https://www.chaincatcher.com/en/article/2160857","type":"other","url":""},{"credibility":3,"name":"https://www.bitget.com/news/detail/12560604473051","type":"other","url":""},{"credibility":3,"name":"https://cryptorank.io/news/feed/77900-solv-protocol-accused-of-manipulating-tvl","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://docs.solv.finance/staking-btc-with-solv/solvbtc/reserves","type":"other","url":""},{"credibility":3,"name":"https://coinbureau.com/review/solv-protocol-review/","type":"other","url":""},{"credibility":3,"name":"https://www.bitget.com/academy/solv-protocol-btc","type":"other","url":""},{"credibility":3,"name":"https://wublock.substack.com/p/talk-with-solv-from-wbtc-trust-crisis","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://coinbureau.com/review/solv-protocol-review/","type":"other","url":""},{"credibility":3,"name":"https://www.bitget.com/academy/solv-protocol-guide","type":"other","url":""},{"credibility":3,"name":"https://www.chaincatcher.com/en/article/2160857","type":"other","url":""},{"credibility":3,"name":"https://controverity.com/2025/01/16/solv-token-launches-a-new-chapter-in-bitcoin-staking/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.bitget.com/academy/solv-protocol-guide","type":"other","url":""},{"credibility":3,"name":"https://www.stakingrewards.com/asset/solv-protocol-solvbtc-bbn","type":"other","url":""},{"credibility":3,"name":"https://www.cryptoeq.io/articles/solv-protocol-bitcoin","type":"other","url":""},{"credibility":3,"name":"https://olympixai.medium.com/the-2-7m-solv-protocol-exploit-a-reentrancy-bug-that-should-never-have-shipped-and-how-olympix-617e4703a531","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.chaincatcher.com/en/article/2160857","type":"other","url":""},{"credibility":3,"name":"https://tradersunion.com/news/airdrops/show/44264-solv-protocol-launches/","type":"other","url":""},{"credibility":3,"name":"https://controverity.com/2025/01/16/solv-token-launches-a-new-chapter-in-bitcoin-staking/","type":"other","url":""}]}],"sources_used":[],"summary":"SolvBTC is the flagship wrapped Bitcoin product of Solv Protocol, designed to represent Bitcoin in DeFi systems across multiple chains. In March 2026, the BRO vault component of the protocol suffered a $2.7 million exploit due to a double-mint logic flaw in the BitcoinReserveOffering smart contract. Separately, in January 2025, the protocol faced credible public allegations of TVL manipulation prior to its SOLV token launch.","timeline":[{"date":"2020-12-01","event":"Solv Protocol founded by Ryan Chow and Will Wang.","source":""},{"date":"2025-01-03","event":"Nubit co-founder Lianchuang Hans publicly alleges Solv Protocol is manipulating TVL figures by recycling BTC deposits across multiple protocols. A Bitcoin whale separately claims her 1,800 BTC was used as reserve backing while remaining under her personal control.","source":""},{"date":"2025-01-05","event":"Solv Protocol co-founder Ryan Chow and marketing director Eva Binari publicly deny TVL manipulation allegations, describe them as a smear campaign, and threaten legal action against accusers.","source":""},{"date":"2025-01-07","event":"Binance Megadrop for SOLV token begins, offering up to 4.7 million SOLV to participants.","source":""},{"date":"2025-01-17","event":"SOLV governance token officially launches.","source":""},{"date":"2025-09-01","event":"Solv Protocol and Chainlink announce integration of Proof of Reserve into SolvBTC, enabling real-time on-chain verification of reserve backing on Ethereum.","source":""},{"date":"2026-03-03","event":"BRO vault exploit occurs: attacker exploits double-mint logic flaw in BitcoinReserveOffering contract 22 times, draining 38.0474 SolvBTC (~$2.7M). Fewer than 10 users directly affected.","source":""},{"date":"2026-03-06","event":"Solv Protocol publicly confirms the exploit, pledges full reimbursement to affected users, and offers the attacker a 10% white-hat bounty ($270,000) for return of funds. Security firms Hypernative, SlowMist, and CertiK engaged.","source":""},{"date":"2026-03-13","event":"Verichains publishes technical post-mortem classifying the vulnerability as a double-mint logic flaw rather than a canonical reentrancy attack.","source":""}]},"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision e0c9ba81-515f-43f0-b798-04c56a94710d
  2. #2reviewby reviewerreviewer
    2026-11-02 04:16:50Z
    Score: 38 → 38 (no score change)
    The core March 2026 BRO exploit facts (date, amount, mechanics, contract, response) are well supported. Two defects were found: the page misattributes to Halborn a 'not reentrancy' view when Halborn calls it a classic reentrancy exploit, and the confirmation timeline date is likely March 5, not March 6. Several secondary claims (TVL, tokenomics, reserve composition, audits) were not verified in this pass. No shutdown or sanction was found.
    anchoranchored
    chain
    ●mainnet-betaslot 464,357,629
    sig
    65LnHBHtKVzC…dYLwxH6Gexplorer ↗
    hash
    FiixsFCkYSkA…JBAFb5Dgsha256 → base58
    verifying row…full verify ↗
    canonical bytes (1290 B) ▸
    {"actor":"reviewer","artifact_identity":"66a30ead7b52e577ed9f36347b8ddbf4","decided_at":"2026-11-02T04:16:50.034Z","decision":"review","disputed_pct":0.5455,"findings_hash":"FAXTPyWdgSyjJmeRB1W7MuK3hJ2rNjwYE3PD18fgcKWu","investigation_id":"243aa43a-27c9-4bd1-9794-e5923d008b77","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":38,"omissions":{"material":0,"total":1},"page_content_hash":"55e850ce611025c92ac72ccbcf84b110363125fa8fd2ce7e75e8313eb85add58","page_slug":"solvbtc","prev_score":38,"reason":"The core March 2026 BRO exploit facts (date, amount, mechanics, contract, response) are well supported. Two defects were found: the page misattributes to Halborn a 'not reentrancy' view when Halborn calls it a classic reentrancy exploit, and the confirmation timeline date is likely March 5, not March 6. Several secondary claims (TVL, tokenomics, reserve composition, audits) were not verified in this pass. No shutdown or sanction was found.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"sequence_num":2,"subject_status":"operating","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision 9d44d267-4760-4b2a-9d0f-ba74500d4086
  3. #3review reviseby judgejudge
    2026-11-02 04:16:50Z
    Score: 38 → 23 (-15)
    Of 11 claims checked, 2 were disputed and 4 could not be verified, giving a disputed rate of about 55%. The core March 2026 exploit facts (date, amount, mechanics, response) were confirmed (claim_findings[2], [3]). However, the page misattributes to Halborn a 'not reentrancy' view when Halborn calls it a classic reentrancy exploit (claim_findings[0]), and the confirmation date appears to be March 5, not March 6 (claim_findings[1]). The TVL figures, audits, DeFiLlama figure and a named role could not be confirmed, so the penalty is kept at the low end of the band because the reviewer's confidence was moderate and most unverified items were simply not checked.
    anchoranchored
    chain
    ●mainnet-betaslot 464,357,635
    sig
    4L4Xutnr8iL9…4HmnEB4Nexplorer ↗
    hash
    FZppyM98VgYK…N55jwB3ysha256 → base58
    verifying row…full verify ↗
    canonical bytes (1414 B) ▸
    {"actor":"judge","artifact_identity":"66a30ead7b52e577ed9f36347b8ddbf4","band_override":null,"decided_at":"2026-11-02T04:16:50.034Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.5455,"investigation_id":"243aa43a-27c9-4bd1-9794-e5923d008b77","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":23,"page_slug":"solvbtc","prev_score":38,"reason":"Of 11 claims checked, 2 were disputed and 4 could not be verified, giving a disputed rate of about 55%. The core March 2026 exploit facts (date, amount, mechanics, response) were confirmed (claim_findings[2], [3]). However, the page misattributes to Halborn a 'not reentrancy' view when Halborn calls it a classic reentrancy exploit (claim_findings[0]), and the confirmation date appears to be March 5, not March 6 (claim_findings[1]). The TVL figures, audits, DeFiLlama figure and a named role could not be confirmed, so the penalty is kept at the low end of the band because the reviewer's confidence was moderate and most unverified items were simply not checked.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":-15,"score_limit":{"applied":-15,"limited":false,"proposed":-15,"rule":"second_opinion_agreed","second":-16},"sequence_num":3,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision 027b1de7-2684-4c31-9a9a-88db7ab4e7ed
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine — python -m src.verify_decision <event_id>.