Fact-check findings
What an automated fact-checker found when it re-read Themis Protocol against the sources the page cites. Only the most recent review is shown.
These findings are produced by an automated reviewer, and its results vary between runs: the same page, checked three times on the same day, came back with 15%, 20% and 34% of its claims disputed, mostly because each run extracted a different number of claims. Treat what follows as leads, not rulings.
“Disputed” means the reviewer could not reconcile the claim with the evidence it cited. It does not mean the claim is false. “Unverifiable” means no reachable source settled it either way.
Nothing here changes the page on its own. A proposed correction is applied only after a human moderator approves it; until then the page reads as it did when reviewed.
unverifiable
2 claimsNo source the reviewer could reach confirms or contradicts the claim.
- #3[unverifiable][awaiting moderator]in section: On-Chain Evidence and Fund Flow
“Neptune Mutual's post-mortem analysis confirmed that approximately 191 ETH were subsequently deposited into Tornado Cash, a sanctioned cryptocurrency mixing service, in an effort to obscure the transaction trail.”
reviewerApproximately 191 ETH were laundered through Tornado Cash, attributed to Neptune Mutual's post-mortem.The primary cited source was blocked, and two other cited sources do not mention it. Not scored. - #4[unverifiable][awaiting moderator]in the timeline
“Attacker cross-chains stolen funds via Stargate Finance and begins laundering approximately 191 ETH through Tornado Cash.”
reviewerTimeline places the Tornado Cash laundering and Stargate bridging specifically on 2023-06-28.No fetched source gives the specific date for laundering. The timeline entry also has an empty source field.
partially supported
2 claimsThe cited evidence supports part of the claim but not all of it.
- #2[partially supported][awaiting moderator]in section: Flash Loan Oracle Manipulation Exploit (June 2023)
“The attacker, identified by the on-chain address 0xdb73eb484e7dea3785520d750eabef50a9b9ab33, initiated the exploit by obtaining approximately 40,000 WETH through flash loans sourced from Aave v3 and two Uniswap v3 pools.”
reviewerAttacker flash-loan and swap figures: 40,000 WETH, 220 WETH collateral, 54.665 BLP, 39,725 WETH swapped for 2,423 wstETH, 317.62 WETH borrowed.Core structure and address verified; granular numbers likely come from the Neptune Mutual post that could not be read (blocked). - #7[partially supported][awaiting moderator]in section: Team Response and Compensation Claims
“No publicly verifiable evidence of fund recovery or completion of a compensation scheme has been identified in available sources as of the time of this investigation.”
reviewerNo evidence of a compensation scheme completion has been identified.A search snippet (not fetched) says Themis announced Themis 2.0 and compensation details in late July 2023. The page may be incomplete here; worth a follow-up.
confirmed
3 claimsThe cited evidence supports the claim as written.
- #1[confirmed][no action needed]in section: Flash Loan Oracle Manipulation Exploit (June 2023)
“The drained amount totaled approximately 220 wrapped ETH, nominally worth around $417,000, though due to liquidity constraints only approximately 94 ETH (~$178,000) and approximately $190,000 in stablecoins were successfully converted, yielding a total haul of approximately $368,000–$370,000.”
reviewerExploit on June 27, 2023, about 11 days after the June 16 beta launch, with a total haul of about $368,000-$370,000 (220 wrapped ETH nominally ~$417,000; ~94 ETH ~$178,000 plus ~$190,000 stablecoins).Web3 Is Going Great matches the figures and dates. SolidityScan gives ~$365K and dates its post June 28, so there is minor source variance. - #5[confirmed][no action needed]in section: Root Cause: Oracle Design Vulnerability
“Security analysts noted that the vulnerable contract was at address 0x75f805 on Arbitrum One.”
reviewerThe vulnerable contract is 0x75f805 and the attack tx is 0xff3682 on Arbitrum One.Matches SolidityScan. The truncated hashes are low-utility but accurate. - #6[confirmed][no action needed]in section: Protocol Overview
“Themis publicly promoted security as a core priority, citing multiple audits from PeckShield in its documentation.”
reviewerDocumentation cites multiple PeckShield audits.Confirmed.