Skip to main content
AVOID.NET
← Swaprum4 decisions on this page

Audit log

Every state-changing event for Swaprum: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

  1. #1publishby system:backfill
    2026-05-28 15:51:45Z
    Score: ? → ? (no score change)
    anchoranchored
    chain
    ●mainnet-betaslot 422,751,047
    sig
    2ZP5T3mi2nfX…iPT4NLaiexplorer ↗
    hash
    4V3nzmFdbBUn…oAxJsxXWsha256 → base58
    verifying row…full verify ↗
    canonical bytes (9333 B) ▸
    {"actor":"system:backfill","investigation_id":"f56b2285-3ee4-4af8-95dd-8f8dd602dfd0","kind":"publish","page_slug":"swaprum","published_at":"2026-05-28T15:51:45.359Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Swaprum","sections":[{"content":"","heading":"","severity":"critical","sources":[{"credibility":2,"name":"PeckShield alert — Swaprum rug pull reported by CoinTelegraph","type":"news_article","url":"https://cointelegraph.com/news/alleged-swaprum-rug-pull-swipes-three-million-in-customer-funds"},{"credibility":2,"name":"The Block — Swaprum DEX team disappears with $3 million in apparent exit scam","type":"news_article","url":"https://www.theblock.co/post/231539/swaprum-dex-exit-scam-arbitrum"},{"credibility":1,"name":"SAPR Token on Arbiscan","type":"on_chain","url":"https://arbiscan.io/token/0x2aE25460c44d578E6f41aB900a7A5425b6492C16"},{"credibility":2,"name":"CryptoGape — Breaking: Swaprum DEX on Arbitrum rug pulls $3M","type":"news_article","url":"https://coingape.com/crypto-news-swaprun-dex-arbitrum-rugpulls-sapr-token-crash/"}]},{"content":"","heading":"","severity":"critical","sources":[{"credibility":2,"name":"QuillAudits — Decoding Swaprum Finance $3 Million Rug Pull","type":"research","url":"https://quillaudits.medium.com/decoding-swaprum-finance-3-million-rug-pull-quillaudits-2c6f9527b589"},{"credibility":2,"name":"Halborn — Explained: The Swaprum Rug Pull (May 2023)","type":"research","url":"https://www.halborn.com/blog/post/explained-the-swaprum-rug-pull-may-2023"},{"credibility":2,"name":"CryptoPotato — Swaprum DEX Drained in $3M Crypto Rugpull","type":"news_article","url":"https://cryptopotato.com/swaprum-dex-drained-in-3m-crypto-rugpull/"}]},{"content":"","heading":"","severity":"critical","sources":[{"credibility":2,"name":"PeckShield alert cited by AMBCrypto — Arbitrum spirals as customers lose $3 million in a rug pull scam","type":"news_article","url":"https://ambcrypto.com/arbitrum-spirals-as-customers-lose-3-million-in-a-rug-pull-scam-what-next/"},{"credibility":2,"name":"Daily Hodl — Arbitrum DEX Burns Investors With $3,000,000 Rug Pull Scam","type":"news_article","url":"https://dailyhodl.com/2023/05/20/arbitrum-dex-burns-investors-with-3000000-rug-pull-scam-according-to-blockchain-security-firm/"},{"credibility":2,"name":"QuillAudits — Tornado Cash transaction hash documentation","type":"research","url":"https://quillaudits.medium.com/decoding-swaprum-finance-3-million-rug-pull-quillaudits-2c6f9527b589"}]},{"content":"","heading":"","severity":"high","sources":[{"credibility":2,"name":"CertiK Skynet — Swaprum Project Insight","type":"research","url":"https://skynet.certik.com/projects/swaprum"},{"credibility":2,"name":"Decrypt — Another CertiK Audited Project Rugs as $3M Disappears From Arbitrum DeFi Exchange","type":"news_article","url":"https://decrypt.co/140744/certik-taking-heat-as-another-project-it-audited-swaprum-gets-rugged"},{"credibility":2,"name":"DL News — DeFi protocol in $3m scam was 'Certik audited'","type":"news_article","url":"https://www.dlnews.com/articles/defi/defi-protocol-swaprum-in-3m-rug-pull-was-certik-audited/"},{"credibility":2,"name":"Yahoo Finance — Another CertiK Certified Project Rugs","type":"news_article","url":"https://finance.yahoo.com/news/another-certik-certified-project-rugs-183430383.html"}]},{"content":"","heading":"","severity":"high","sources":[{"credibility":2,"name":"U.Today — Arbitrum Project Swaprum Suffers Rug Pull, Token's Value Falls to Zero","type":"news_article","url":"https://u.today/arbitrum-project-swaprum-suffers-rug-pull-tokens-value-falls-to-zero"},{"credibility":2,"name":"BecauseBitcoin — Swaprum DEX Team Vanishes in Apparent $3 Million Exit Scam","type":"news_article","url":"https://becausebitcoin.com/post/swaprum-dex-team-vanishes-in-apparent-usd3-million-exit-scam-on-arbitrum-network"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":2,"name":"CoinGape — Breaking: Swaprum DEX on Arbitrum Rug Pulls $3M","type":"news_article","url":"https://coingape.com/crypto-news-swaprun-dex-arbitrum-rugpulls-sapr-token-crash/"}]}],"sources_used":[{"credibility":2,"name":"CoinTelegraph — $3M worth of customer funds swiped via alleged Swaprum DEX rug pull","type":"news_article","url":"https://cointelegraph.com/news/alleged-swaprum-rug-pull-swipes-three-million-in-customer-funds"},{"credibility":2,"name":"The Block — Swaprum DEX team disappears with $3 million in apparent exit scam on Arbitrum network","type":"news_article","url":"https://www.theblock.co/post/231539/swaprum-dex-exit-scam-arbitrum"},{"credibility":2,"name":"Decrypt — Another CertiK Audited Project Rugs as $3M Disappears From Arbitrum DeFi Exchange","type":"news_article","url":"https://decrypt.co/140744/certik-taking-heat-as-another-project-it-audited-swaprum-gets-rugged"},{"credibility":2,"name":"DL News — DeFi protocol in $3m scam was 'Certik audited'","type":"news_article","url":"https://www.dlnews.com/articles/defi/defi-protocol-swaprum-in-3m-rug-pull-was-certik-audited/"},{"credibility":2,"name":"QuillAudits — Decoding Swaprum Finance $3 Million Rug Pull","type":"research","url":"https://quillaudits.medium.com/decoding-swaprum-finance-3-million-rug-pull-quillaudits-2c6f9527b589"},{"credibility":2,"name":"Halborn — Explained: The Swaprum Rug Pull (May 2023)","type":"research","url":"https://www.halborn.com/blog/post/explained-the-swaprum-rug-pull-may-2023"},{"credibility":2,"name":"CertiK Skynet — Swaprum Project Insight","type":"research","url":"https://skynet.certik.com/projects/swaprum"},{"credibility":2,"name":"CryptoPotato — Swaprum DEX Drained in $3M Crypto Rugpull","type":"news_article","url":"https://cryptopotato.com/swaprum-dex-drained-in-3m-crypto-rugpull/"},{"credibility":2,"name":"CoinGape — Breaking: Swaprum DEX on Arbitrum Rug Pulls $3M","type":"news_article","url":"https://coingape.com/crypto-news-swaprun-dex-arbitrum-rugpulls-sapr-token-crash/"},{"credibility":2,"name":"AMBCrypto — Arbitrum spirals as customers lose $3 million in a rug pull scam","type":"news_article","url":"https://ambcrypto.com/arbitrum-spirals-as-customers-lose-3-million-in-a-rug-pull-scam-what-next/"},{"credibility":2,"name":"Daily Hodl — Arbitrum DEX Burns Investors With $3,000,000 Rug Pull Scam","type":"news_article","url":"https://dailyhodl.com/2023/05/20/arbitrum-dex-burns-investors-with-3000000-rug-pull-scam-according-to-blockchain-security-firm/"},{"credibility":2,"name":"U.Today — Arbitrum Project Swaprum Suffers Rug Pull, Token's Value Falls to Zero","type":"news_article","url":"https://u.today/arbitrum-project-swaprum-suffers-rug-pull-tokens-value-falls-to-zero"},{"credibility":2,"name":"Yahoo Finance — Another CertiK Certified Project Rugs","type":"news_article","url":"https://finance.yahoo.com/news/another-certik-certified-project-rugs-183430383.html"},{"credibility":1,"name":"Arbiscan — SAPR Token Contract","type":"on_chain","url":"https://arbiscan.io/token/0x2aE25460c44d578E6f41aB900a7A5425b6492C16"},{"credibility":2,"name":"Invezz — SAPR tokens worthless following $3M rug pull by Swaprum developers","type":"news_article","url":"https://invezz.com/news/2023/05/20/just-in-sapr-tokens-worthless-following-3m-rug-pull-by-swaprum-developers/"}],"summary":"Swaprum was an Arbitrum-based decentralized exchange (DEX) that launched in early 2023 and operated briefly before its anonymous development team executed a deliberate exit scam on May 18, 2023. The team exploited a backdoor function embedded in an upgraded smart contract to drain approximately 1,628 ETH (roughly $3 million) from user liquidity pools, then laundered the proceeds through Tornado Cash and deleted all official communication channels. No funds have been recovered and no arrests have been publicly reported.","timeline":[{"date":"2023-05-01","event":"CertiK begins smart contract audit of Swaprum at the team's request.","source":""},{"date":"2023-05-05","event":"CertiK publishes its audit of Swaprum, flagging 4 major findings related to centralization/privilege. Zero findings are fully resolved by the team.","source":""},{"date":"2023-05-18","event":"Swaprum deployer (0xaaf8b44376f4ef3eD477eeEB3553b7623FEF5E1c) upgrades the MasterChef reward contract to a malicious version containing add() and getToken() backdoor functions, executes the exit scam, and drains approximately 1,628 ETH (~$3 million) from user liquidity pools.","source":""},{"date":"2023-05-18","event":"Stolen ETH is bridged from Arbitrum to Ethereum mainnet via Multichain, AcrossProtocol, and CelerNetwork, then approximately 1,620 ETH is routed through Tornado Cash.","source":""},{"date":"2023-05-18","event":"SAPR token price collapses from approximately $0.147 to $0.000022, a decline of over 99%.","source":""},{"date":"2023-05-19","event":"PeckShield publicly alerts the community to the Swaprum rug pull via Twitter.","source":""},{"date":"2023-05-19","event":"Swaprum team deletes its Twitter/X account, Telegram group, and GitHub repository. The website remains accessible temporarily.","source":""},{"date":"2023-05-20","event":"Multiple major outlets including The Block, CoinTelegraph, Decrypt, and CryptoPotato publish full coverage of the incident. CertiK issues a statement clarifying the backdoor was introduced post-audit.","source":""}]},"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision 0af0688d-67c7-4aab-9cc6-42cb1c265562
  2. #2rescoreby systemsystem
    2026-10-27 06:05:18Z
    Score: 2 → 0 (-2)
    Rescored under Scoring v2, the published formula (avoid.net/scoring): 2 → 0. The page establishes that the subject is itself a scheme, so the score is 0.
    anchoranchored
    chain
    ●mainnet-betaslot 461,965,289
    sig
    itoUhwwCAzRU…q5QqqToRexplorer ↗
    hash
    ERW6CStXxkEh…cPaVCadSsha256 → base58
    verifying row…full verify ↗
    canonical bytes (513 B) ▸
    {"actor":"system","decided_at":"2026-10-27T06:05:18.539Z","decision":"rescore","investigation_id":"f56b2285-3ee4-4af8-95dd-8f8dd602dfd0","new_score":0,"page_slug":"swaprum","prev_score":2,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 2 → 0. The page establishes that the subject is itself a scheme, so the score is 0.","score_delta":-2,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision 40e5db8c-da87-4ecc-8121-7fdfd5b4d2ee
  3. #3reviewby reviewerreviewer
    2026-11-02 05:08:17Z
    Score: 0 → 0 (no score change)
    The core facts hold: about 1,628 ETH (~$3M) was drained, about 1,620 ETH went through Tornado Cash, the social accounts were deleted, and there have been no arrests or recoveries. Three points need attention. The CertiK major-finding count (four on the page, three in Decrypt) needs checking against CertiK's report. The Hope Finance and largest-Arbitrum-scam comparison is unsupported by the fetched sources. QuillAudits-specific details could not be read because of a 403.
    anchoranchored
    chain
    ●mainnet-betaslot 464,372,150
    sig
    TYAQkFzt5qAn…CPacXSA1explorer ↗
    hash
    5xT1gdZYrnRT…MQnFpK1hsha256 → base58
    verifying row…full verify ↗
    canonical bytes (1279 B) ▸
    {"actor":"reviewer","artifact_identity":"e6cf661dc9f52f7daf6d1bd632b0962e","decided_at":"2026-11-02T05:08:17.025Z","decision":"review","disputed_pct":0.2,"findings_hash":"BP7SaeTPjcajr95ezGf3DvQomzYRr2wBLW8Homv3pUdg","investigation_id":"f56b2285-3ee4-4af8-95dd-8f8dd602dfd0","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":0,"page_content_hash":"556d5defb6defc1e4a1acdae190f6fab090b5dad02940e9ad4653944582a8437","page_slug":"swaprum","prev_score":0,"reason":"The core facts hold: about 1,628 ETH (~$3M) was drained, about 1,620 ETH went through Tornado Cash, the social accounts were deleted, and there have been no arrests or recoveries. Three points need attention. The CertiK major-finding count (four on the page, three in Decrypt) needs checking against CertiK's report. The Hope Finance and largest-Arbitrum-scam comparison is unsupported by the fetched sources. QuillAudits-specific details could not be read because of a 403.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"sequence_num":3,"subject_status":"shut_down","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision a73800bc-4dea-49c2-a0df-5ec100f07bc2
  4. #4review reviseby judgejudge
    2026-11-02 05:08:17Z
    Score: 0 → 0 (no score change)
    The core allegations hold up: the roughly 1,628 ETH (~$3M) theft, the ~1,620 ETH routed through Tornado Cash, the deletion of the team's accounts, and the absence of reported arrests were all confirmed by independent news sources (claim_findings[0], [1], [7], [9]). About 20% of claims could not be verified or were unsupported: the Hope Finance / largest-Arbitrum-scam comparison (claim_findings[4]) and the CertiK audit start date (claim_findings[8]) were not found in any consulted source. The CertiK major-finding count (four on the page, three in Decrypt) is unresolved (claim_findings[2], [3]), and the timeline entries carry no sources. The page's account of the QuillAudits transaction details could not be checked because the source refused access, which says nothing against the claim.
    anchoranchored
    chain
    ●mainnet-betaslot 464,372,155
    sig
    3Sgtzhe6sKfv…9PxMxQqmexplorer ↗
    hash
    BEoG4BtKfGBh…3RitGpGMsha256 → base58
    verifying row…full verify ↗
    canonical bytes (1431 B) ▸
    {"actor":"judge","artifact_identity":"e6cf661dc9f52f7daf6d1bd632b0962e","band_override":null,"decided_at":"2026-11-02T05:08:17.025Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.2,"investigation_id":"f56b2285-3ee4-4af8-95dd-8f8dd602dfd0","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":0,"page_slug":"swaprum","prev_score":0,"reason":"The core allegations hold up: the roughly 1,628 ETH (~$3M) theft, the ~1,620 ETH routed through Tornado Cash, the deletion of the team's accounts, and the absence of reported arrests were all confirmed by independent news sources (claim_findings[0], [1], [7], [9]). About 20% of claims could not be verified or were unsupported: the Hope Finance / largest-Arbitrum-scam comparison (claim_findings[4]) and the CertiK audit start date (claim_findings[8]) were not found in any consulted source. The CertiK major-finding count (four on the page, three in Decrypt) is unresolved (claim_findings[2], [3]), and the timeline entries carry no sources. The page's account of the QuillAudits transaction details could not be checked because the source refused access, which says nothing against the claim.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"sequence_num":4,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision b59741d2-5974-43cc-bab1-992436005926
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine — python -m src.verify_decision <event_id>.