Skip to main content
Sign in
Tropykus RSK1 decision on this page

Audit log

Every state-changing event for Tropykus RSK: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

  1. #1publishby system:backfill
    2026-05-30 12:11:53Z
    Score: ?? (no score change)
    anchoranchored
    chain
    mainnet-betaslot 423,153,895
    sig
    3nJEy6nnzCRf…wpi3CS2Bexplorer ↗
    hash
    jNUK6hWptxHS…abg9cFa3sha256 → base58
    verifying row…full verify ↗
    canonical bytes (9791 B) ▸
    {"actor":"system:backfill","investigation_id":"db07f732-3a6a-48a9-9450-a59c52c3e302","kind":"publish","page_slug":"tropykus-rsk","published_at":"2026-05-30T12:11:53.236Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Tropykus RSK","sections":[{"content":"","heading":"","severity":"low","sources":[{"credibility":2,"name":"Tropykus RSK — DefiLlama Protocol Page","type":"research","url":"https://defillama.com/protocol/tropykus-rsk"},{"credibility":2,"name":"Rootstock Helpdesk: Tropykus","type":"official","url":"https://helpdesk.rootstock.io/solutions/tropykus.html"},{"credibility":2,"name":"Tropykus Finance — GitHub Repository","type":"official","url":"https://github.com/Tropykus/protocol-rsk"},{"credibility":2,"name":"Becoming a Bitcoiner in the DeFi World — Rootstock Blog","type":"official","url":"https://rootstock.io/blog/becoming-a-bitcoiner-in-the-defi-world/"}]},{"content":"","heading":"","severity":"high","sources":[{"credibility":2,"name":"La Plataforma DeFi Tropykus Sufre Un Exploit De 150.000 Dolares — Criptotendencias","type":"news_article","url":"https://www.criptotendencias.com/defi/tropykus-defi-exploit-hackers/"},{"credibility":2,"name":"Tropykus Finance sufre exploit por $150,000 — BeinCrypto ES","type":"news_article","url":"https://es.beincrypto.com/tropykus-finance-sufre-exploit-150000-10-porciento-depositos/"},{"credibility":3,"name":"Tropikus Report: Aftermath of the Exploit — Medium","type":"community_report","url":"https://medium.com/@IndependentAcademy/tropikus-report-aftermath-of-the-exploit-a0118ee43eaa"},{"credibility":2,"name":"DeFi Hacks Database — DefiLlama","type":"research","url":"https://defillama.com/hacks"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"Tropikus Report: Aftermath of the Exploit — Medium","type":"community_report","url":"https://medium.com/@IndependentAcademy/tropikus-report-aftermath-of-the-exploit-a0118ee43eaa"},{"credibility":2,"name":"Tropykus Finance sufre exploit por $150,000 — BeinCrypto ES","type":"news_article","url":"https://es.beincrypto.com/tropykus-finance-sufre-exploit-150000-10-porciento-depositos/"},{"credibility":2,"name":"HackenProof: Tropykus Bug Bounty Program","type":"official","url":"https://hackenproof.com/public-bug-bounty-list/tropykus-bug-bounty-program"}]},{"content":"","heading":"","severity":"high","sources":[{"credibility":2,"name":"Tropykus to Launch on Polygon zkEVM Using API3 Data Feeds — API3 Medium","type":"news_article","url":"https://medium.com/api3/tropykus-to-launch-on-polygon-zkevm-using-api3s-data-feeds-710fdc29b1c8"},{"credibility":2,"name":"Rounding Errors: Minor but Major Hacks — Extropy.IO Medium","type":"research","url":"https://extropy-io.medium.com/rounding-errors-minor-but-major-hacks-445dc9996ecc"},{"credibility":2,"name":"Tropykus Finance Protocol Whitepaper (Firebase PDF)","type":"official","url":"https://firebasestorage.googleapis.com/v0/b/tropycofinance.appspot.com/o/Tropykus_Protocol%20V4.pdf?alt=media&token=8667d3a7-cdc2-46f2-b35f-5e82bb407b02"},{"credibility":2,"name":"Market Risk Assessment of Tropykus Financial Protocol (HubSpot PDF)","type":"research","url":"https://f.hubspotusercontent30.net/hubfs/21211885/Documentos%20PDF/Tropykus%20Finance%20-%20Quant%20Assesment%20version%202.pdf"}]},{"content":"","heading":"","severity":"low","sources":[{"credibility":2,"name":"Tropykus Finance — Crunchbase Company Profile","type":"other","url":"https://www.crunchbase.com/organization/tropykus-finance"},{"credibility":2,"name":"Tropykus — Outlier Ventures Portfolio","type":"official","url":"https://outlierventures.io/portfolio/tropykus/"},{"credibility":2,"name":"Tropykus Finance — RootstockLabs Blog","type":"news_article","url":"https://www.rootstocklabs.com/blog/tropykus-finance-defi-en-bitcoin-con-impacto-social/"},{"credibility":2,"name":"Tropykus Finance — Tracxn Funding Profile","type":"other","url":"https://tracxn.com/d/companies/tropykus/__d45iyYN5-yD6ugvnyVJ2tq-kCj38Thbr4TDzewjsKqs/funding-and-investors"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":2,"name":"ZachXBT — Wikipedia","type":"other","url":"https://en.wikipedia.org/wiki/ZachXBT"}]}],"sources_used":[{"credibility":2,"name":"Tropykus RSK — DefiLlama","type":"research","url":"https://defillama.com/protocol/tropykus-rsk"},{"credibility":2,"name":"Tropykus Finance — DefiLlama","type":"research","url":"https://defillama.com/protocol/tropykus-finance"},{"credibility":2,"name":"Tropykus Finance sufre exploit por $150,000 — BeinCrypto ES","type":"news_article","url":"https://es.beincrypto.com/tropykus-finance-sufre-exploit-150000-10-porciento-depositos/"},{"credibility":2,"name":"La Plataforma DeFi Tropykus Sufre Un Exploit De 150.000 Dolares — Criptotendencias","type":"news_article","url":"https://www.criptotendencias.com/defi/tropykus-defi-exploit-hackers/"},{"credibility":3,"name":"Tropikus Report: Aftermath of the Exploit — Medium","type":"community_report","url":"https://medium.com/@IndependentAcademy/tropikus-report-aftermath-of-the-exploit-a0118ee43eaa"},{"credibility":2,"name":"Tropykus Finance — GitHub","type":"official","url":"https://github.com/Tropykus/protocol-rsk"},{"credibility":2,"name":"Tropykus — Outlier Ventures Portfolio","type":"official","url":"https://outlierventures.io/portfolio/tropykus/"},{"credibility":2,"name":"Tropykus Finance — Crunchbase","type":"other","url":"https://www.crunchbase.com/organization/tropykus-finance"},{"credibility":2,"name":"Tropykus to Launch on Polygon zkEVM Using API3 Data Feeds — API3 Medium","type":"news_article","url":"https://medium.com/api3/tropykus-to-launch-on-polygon-zkevm-using-api3s-data-feeds-710fdc29b1c8"},{"credibility":2,"name":"RootstockLabs Blog: Tropykus Finance DeFi en Bitcoin con Impacto Social","type":"news_article","url":"https://www.rootstocklabs.com/blog/tropykus-finance-defi-en-bitcoin-con-impacto-social/"},{"credibility":2,"name":"Rootstock Helpdesk: Tropykus","type":"official","url":"https://helpdesk.rootstock.io/solutions/tropykus.html"},{"credibility":2,"name":"HackenProof: Tropykus Bug Bounty Program","type":"official","url":"https://hackenproof.com/public-bug-bounty-list/tropykus-bug-bounty-program"},{"credibility":2,"name":"Tropykus Finance — Tracxn Funding Profile","type":"other","url":"https://tracxn.com/d/companies/tropykus/__d45iyYN5-yD6ugvnyVJ2tq-kCj38Thbr4TDzewjsKqs/funding-and-investors"},{"credibility":3,"name":"Tropykus — Altcoin Buzz DeFi Overview","type":"news_article","url":"https://www.altcoinbuzz.io/defi/tropykus-and-emerging-economies/"},{"credibility":2,"name":"Rounding Errors: Minor but Major Hacks — Extropy.IO Medium","type":"research","url":"https://extropy-io.medium.com/rounding-errors-minor-but-major-hacks-445dc9996ecc"}],"summary":"Tropykus is a DeFi lending and borrowing protocol deployed on the Rootstock (RSK) Bitcoin sidechain, founded in 2021 by a Colombian team targeting Latin American underbanked communities. On June 14, 2023, the protocol suffered an exploit in its rBTC micro-market due to a redeem rounding error and exchange rate manipulation, resulting in losses of approximately $150,000 — roughly 10% of total value locked at the time. The team committed to full reimbursement of affected users and subsequently reverted to Compound Finance's original codebase, but the incident highlighted unresolved smart contract risks in a customized fork.","timeline":[{"date":"2021-04-01","event":"Tropykus launches on Rootstock (RSK) testnet.","source":"RootstockLabs Blog","source_url":"https://www.rootstocklabs.com/blog/tropykus-finance-defi-en-bitcoin-con-impacto-social/"},{"date":"2021-05-01","event":"Tropykus mainnet deployment on Rootstock goes live, supporting RBTC, DOC, RIF, and USDT markets.","source":"Rootstock Blog","source_url":"https://rootstock.io/blog/becoming-a-bitcoiner-in-the-defi-world/"},{"date":"2023-05-24","event":"Tropykus deploys experimental version on Polygon zkEVM, integrating API3 self-funded dAPIs for price oracles.","source":"API3 Medium / Cointelegraph ES","source_url":"https://medium.com/api3/tropykus-to-launch-on-polygon-zkevm-using-api3s-data-feeds-710fdc29b1c8"},{"date":"2023-06-14","event":"Tropykus RSK suffers a $150,000 exploit targeting the rBTC micro-market via a redeem rounding error and exchange rate manipulation. Approximately 10% of total deposits are drained.","source":"BeinCrypto ES / Criptotendencias","source_url":"https://es.beincrypto.com/tropykus-finance-sufre-exploit-150000-10-porciento-depositos/"},{"date":"2023-06-14","event":"Tropykus temporarily disables the platform and identifies two attacker wallet addresses, flagging them across chains.","source":"Criptotendencias","source_url":"https://www.criptotendencias.com/defi/tropykus-defi-exploit-hackers/"},{"date":"2023-06-16","event":"Tropykus sets a 23:59 GMT-5 deadline for the attacker to contact them before pursuing legal action, referencing the $50,000 Immunefi bug bounty as an alternative.","source":"BeinCrypto ES","source_url":"https://es.beincrypto.com/tropykus-finance-sufre-exploit-150000-10-porciento-depositos/"},{"date":"2023-07-01","event":"Tropykus publicly commits to full reimbursement of all user losses; removes the rBTC micro-market and reverts protocol to Compound Finance's original codebase.","source":"Medium — Tropikus Exploit Aftermath Report","source_url":"https://medium.com/@IndependentAcademy/tropikus-report-aftermath-of-the-exploit-a0118ee43eaa"},{"date":"2023-09-18","event":"Tropykus Finance closes a venture funding round, raising $700,000 total from Outlier Ventures, Pomp Investments, and RootstockLabs.","source":"Crunchbase / Tracxn","source_url":"https://www.crunchbase.com/organization/tropykus-finance/company_financials"}]},"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision 7c592e00-f783-4d28-8d99-6270cad0d992
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine — python -m src.verify_decision <event_id>.