← TMX TRIBE1 decision on this page
Audit log
Every state-changing event for TMX TRIBE: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.
- #1publishby system:backfill2026-05-27 19:45:41ZScore: ? → ? (no score change)anchoranchored
- chain
- ●mainnet-betaslot 422,568,322
- sig
2pMSjBgLbffv…buWRkHLcexplorer ↗- hash
fEqfy8ihKH4T…mnaPSZbjsha256 → base58
verifying row…full verify ↗canonical bytes (5563 B) ▸
{"actor":"system:backfill","investigation_id":"c1e4e929-48a2-4614-8908-a90fa95f9fd6","kind":"publish","page_slug":"tmx-tribe","published_at":"2026-05-27T19:45:41.333Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"TMX TRIBE","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://x.com/TMXTribe/status/1920163256846479553","type":"other","url":""},{"credibility":3,"name":"https://www.globenewswire.com/news-release/2025/05/26/3088231/0/en/TRIBE-DEX-Brings-Real-DeFi-Utility-to-Life-with-TMX-TGE-Only-485-ETH-Available-After-871K-Raised.html","type":"other","url":""},{"credibility":3,"name":"https://www.weex.com/learn/articles/what-is-tribe-perpetual-tmx-coin-a-comprehensive-guide-983","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/currencies/tmx/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://rekt.news/tmztribe-rekt","type":"other","url":""},{"credibility":3,"name":"https://nulltx.com/certik-flags-1-4m-exploit-linked-to-tmx-tribe-on-arbitrum/","type":"other","url":""},{"credibility":3,"name":"https://bitcoinethereumnews.com/finance/certik-flags-1-4m-exploit-linked-to-tmx-tribe-on-arbitrum/","type":"other","url":""},{"credibility":3,"name":"https://x.com/QuillAudits_AI/status/2008459614711386457","type":"other","url":""},{"credibility":3,"name":"https://smartcontractshacking.com/hacks/tmx-tribe-hack-2026","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://rekt.news/tmztribe-rekt","type":"other","url":""},{"credibility":3,"name":"https://nulltx.com/certik-flags-1-4m-exploit-linked-to-tmx-tribe-on-arbitrum/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://rekt.news/tmztribe-rekt","type":"other","url":""},{"credibility":3,"name":"https://nulltx.com/certik-flags-1-4m-exploit-linked-to-tmx-tribe-on-arbitrum/","type":"other","url":""},{"credibility":3,"name":"https://bitcoinethereumnews.com/finance/certik-flags-1-4m-exploit-linked-to-tmx-tribe-on-arbitrum/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.globenewswire.com/news-release/2025/05/26/3088231/0/en/TRIBE-DEX-Brings-Real-DeFi-Utility-to-Life-with-TMX-TGE-Only-485-ETH-Available-After-871K-Raised.html","type":"other","url":""},{"credibility":3,"name":"https://www.globenewswire.com/news-release/2025/08/26/3139061/0/en/TMX-DEX-Announces-Token-Launch-Empowering-Global-Traders-with-100x-Opportunity.html","type":"other","url":""},{"credibility":3,"name":"https://finance.yahoo.com/news/tribe-dex-brings-real-defi-161200483.html","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://tribe-dex.com/","type":"other","url":""},{"credibility":3,"name":"https://x.com/TMXTribe","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://en.wikipedia.org/wiki/ZachXBT","type":"other","url":""}]}],"sources_used":[],"summary":"TMX TRIBE (also marketed as Tribe DEX) is a decentralized perpetual futures exchange operating on Arbitrum and Optimism that launched its TMX token in mid-2025. On January 5-7, 2026, an attacker exploited a critical logic flaw in unverified, unaudited smart contracts to drain approximately $1.4 million in user funds over 36 hours, with stolen assets subsequently bridged to Ethereum and laundered via Tornado Cash. The team deployed no emergency pause during the attack, issued no public statement for days afterward, and produced no post-mortem or user compensation plan, raising serious concerns about operational competence and transparency. ZachXBT has flagged the entity.","timeline":[{"date":"2025-05-26","event":"Tribe DEX announces public TGE for TMX token, with 485 ETH allocated after $871,000 raised in a private sale.","source":""},{"date":"2025-08-26","event":"TMX DEX announces token launch via GlobeNewswire, marketing '100x Opportunity' and referencing an unspecified 'Top 10 CEX' listing.","source":""},{"date":"2025-09-22","event":"TMX token listed on WEEX exchange as a spot trading pair (TMX/USDT).","source":""},{"date":"2026-01-05","event":"Attack begins on TMX TRIBE's Arbitrum contracts. Primary attacker address 0x763a67E4418278f84c04383071fC00165C112661 begins executing the mint-and-stake loop exploit against unverified LP contracts.","source":""},{"date":"2026-01-05","event":"CertiK Alert flags the exploit in progress. DefimonAlerts also detects anomalous activity.","source":""},{"date":"2026-01-06","event":"Exploitation continues for a second day. Team deploys contract upgrades on-chain but does not trigger an emergency pause. Approximately $1.2 million bridged to Ethereum via Across Protocol.","source":""},{"date":"2026-01-06","event":"TMX TRIBE team sends on-chain bounty message to exploiter from wallet 0x33392e39325013e81874ca7b76326858ec179543, offering 20% retention in exchange for 80% return. Exploiter does not respond.","source":""},{"date":"2026-01-07","event":"Exploitation concludes. Total loss approximately $1.4 million. Stolen funds deposited into Tornado Cash.","source":""},{"date":"2026-01-10","event":"As of at least four days post-exploit, TMX TRIBE has issued no public statement, post-mortem, or compensation plan. Rekt News publishes full incident documentation.","source":""}]},"v":1}Verify offline (run on your own machine)python -m src.verify_decision 196175fa-2d21-4f92-80f4-f6ec20b0a743
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine —
python -m src.verify_decision <event_id>.