Audit log

Every state-changing event for Typus Perp: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-26 19:54:30Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 422,351,499

   sig

   58FDgBChDiMk…1sEPS3g8copyexplorer ↗

   hash

   5QiPWMvca42G…4hCRjoDhcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (5839 B) ▸

   {"actor":"system:backfill","investigation_id":"c904afdd-65c3-4db7-98bb-c96d6f81e74b","kind":"publish","page_slug":"typus-perp","published_at":"2026-05-26T19:54:30.598Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Typus Perp","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://defimon.xyz/blog/typus-finance-hack-october-2025","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-typus-finance-hack-october-2025","type":"other","url":""},{"credibility":3,"name":"https://slowmist.medium.com/is-the-move-language-secure-the-typus-permission-validation-vulnerability-755a5175f7c3","type":"other","url":""},{"credibility":3,"name":"https://unchainedcrypto.com/sui-based-typus-finance-loses-3-4-million-in-hack/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-typus-finance-hack-october-2025","type":"other","url":""},{"credibility":3,"name":"https://slowmist.medium.com/is-the-move-language-secure-the-typus-permission-validation-vulnerability-755a5175f7c3","type":"other","url":""},{"credibility":3,"name":"https://www.coinspeaker.com/typus-finances-unaudited-contract-loses-3m-3rd-major-sui-exploit-in-2025/","type":"other","url":""},{"credibility":3,"name":"https://finance.yahoo.com/news/typus-finance-unaudited-contract-loses-175622463.html","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/@TypusFinance/typus-finance-tlp-oracle-exploit-post-mortem-report-response-plan-ce2d0800808b","type":"other","url":""},{"credibility":3,"name":"https://getfailsafe.com/typus-finance-smart-contract-exploit","type":"other","url":""},{"credibility":3,"name":"https://www.panewslab.com/en/articles/7b951b0a-2ccb-4397-9d33-27594669ffdb","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/typus-perp","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.bitget.com/news/detail/12560605016676","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/sui-based-typus-finance-plummets-35-after-oracle-exploit/","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/typus-perp","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coinspeaker.com/typus-finances-unaudited-contract-loses-3m-3rd-major-sui-exploit-in-2025/","type":"other","url":""},{"credibility":3,"name":"https://slowmist.medium.com/is-the-move-language-secure-the-typus-permission-validation-vulnerability-755a5175f7c3","type":"other","url":""},{"credibility":3,"name":"https://finance.yahoo.com/news/typus-finance-unaudited-contract-loses-175622463.html","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://tracxn.com/d/companies/typusfinance/__mix5JBo-wW80iKTHgL1LgtIIZ2iOtFPfBxBkThKSsHM","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/typus-perp","type":"other","url":""},{"credibility":3,"name":"https://www.panewslab.com/en/articles/txxg1638","type":"other","url":""}]}],"sources_used":[],"summary":"Typus Perp is a GMX-style perpetuals DEX operating on the Sui blockchain, developed by Typus Finance (founded by Tommy Chen). On October 15, 2025, the protocol suffered a $3.44 million oracle manipulation exploit that drained its TLP liquidity pool entirely — caused by an unaudited smart contract module that was excluded from the project's May 2025 MoveBit security audit. As of May 2026, the protocol has minimal TVL ($126K) and the stolen funds have not been recovered.","timeline":[{"date":"2022-01-01","event":"Typus Finance founded by Tommy Chen on Sui blockchain.","source":""},{"date":"2024-11-13","event":"Vulnerable custom oracle contract package deployed to production powering the TLP pool.","source":""},{"date":"2025-05-01","event":"MoveBit security audit of Typus Finance completed. The vulnerable TLP oracle contract was excluded from audit scope.","source":""},{"date":"2025-05-01","event":"Cetus Protocol (primary Sui DEX) hacked for over $220 million — first major Sui exploit of 2025.","source":""},{"date":"2025-09-01","event":"Nemo Protocol exploited for $2.6 million via unaudited developer-deployed code — second major Sui exploit of 2025.","source":""},{"date":"2025-10-15","event":"Oracle manipulation attack begins at 13:05 UTC. Attacker exploits missing assert check in update_v2 function to manipulate prices and drain $3.44 million from the TLP pool across ten transactions.","source":""},{"date":"2025-10-15","event":"Team alerted at 13:24 UTC; all smart contracts paused at 13:39 UTC; root cause identified at 13:42 UTC; Sui Foundation notified at 13:48 UTC; law enforcement report filed at 14:54 UTC.","source":""},{"date":"2025-10-15","event":"TYPUS token falls approximately 35% from $0.009 to $0.0055 following exploit disclosure.","source":""},{"date":"2025-10-15","event":"Stolen assets bridged to Ethereum via Circle CCTP and converted to DAI on Curve.","source":""},{"date":"2025-10-16","event":"Typus Finance publishes post-mortem on Medium detailing attack timeline, vulnerability, and preliminary response plan. White hat bounty of 15% offered on-chain.","source":""},{"date":"2026-01-01","event":"Typus Finance initiates TLP Recovery Plan, requiring large LPs to submit contact information. No confirmed compensation disbursement reported.","source":""},{"date":"2026-05-01","event":"Typus Perp TVL stands at approximately $126,420 on DeFiLlama — down roughly 97% from pre-exploit levels.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 6bb794f2-b9f3-4b5e-a919-d3c0d9d1c7f6copy
2. #2rescoreby systemsystem

   2026-10-10 18:47:22Z
   Score: 28 → 63 (+35)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 28 → 63. Problems weighed by who is responsible: incidents the subject suffered −3.2, problems around the subject, caused by others −3.2, concerns that are not fraud −3.2; legitimacy credit long-running +8.
   anchoranchored

   chain

   ●mainnet-betaslot 455,367,276

   sig

   31LR29hsxSra…uBtF88WWcopyexplorer ↗

   hash

   AJ7wwzsGAnyh…CBJEjn3Ycopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (641 B) ▸

   {"actor":"system","decided_at":"2026-10-10T18:47:21.939Z","decision":"rescore","investigation_id":"c904afdd-65c3-4db7-98bb-c96d6f81e74b","new_score":63,"page_slug":"typus-perp","prev_score":28,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 28 → 63. Problems weighed by who is responsible: incidents the subject suffered −3.2, problems around the subject, caused by others −3.2, concerns that are not fraud −3.2; legitimacy credit long-running +8.","score_delta":35,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 08e95ca0-b1de-4e39-8bcd-61500dfb08c5copy
3. #3reviewby reviewerreviewer

   2026-11-02 03:27:15Z
   Score: 63 → 63 (no score change)
   The core exploit narrative, audit exclusion, deploy date and Sui context figures check out against the sources I could read. The primary post-mortem and DeFiLlama were blocked, so the response timeline and market metrics are unverified. The TVL figure is dated; later data suggests much lower activity.
   anchoranchored

   chain

   ●mainnet-betaslot 464,343,892

   sig

   4HdG87yYBUpQ…hXgmHkkacopyexplorer ↗

   hash

   DHAKuUk2JrRi…d4zW82tGcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1183 B) ▸

   {"actor":"reviewer","artifact_identity":"217a88a8ebcda961be404a61d288902d","blocked_count":2,"decided_at":"2026-11-02T03:27:15.871Z","decision":"review","disputed_pct":0,"findings_hash":"Gfmyc6aCxuwFzvDEs3ydtLiciu6f3W47Gw7pUuiuY4QN","investigation_id":"c904afdd-65c3-4db7-98bb-c96d6f81e74b","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":63,"omissions":{"material":0,"total":1},"page_content_hash":"00e91de3c6cbfd056a487aef03b679ec3e4548a8cf654f67d266511116f7f7f8","page_slug":"typus-perp","prev_score":63,"reason":"The core exploit narrative, audit exclusion, deploy date and Sui context figures check out against the sources I could read. The primary post-mortem and DeFiLlama were blocked, so the response timeline and market metrics are unverified. The TVL figure is dated; later data suggests much lower activity.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":4,"sequence_num":3,"subject_status":"operating","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 26343095-ff95-47cc-a8fb-9dacaa89e06ccopy
4. #4review approveby judgejudge

   2026-11-02 03:27:16Z
   Score: 63 → 63 (no score change)
   Of six claims checked, four were confirmed against readable sources and none were disputed (claim_findings[0], [1], [2], [5]), including the $3.44 million exploit, the Nov 13, 2024 deployment and the audit exclusion. The other two (claim_findings[3], [4]) could not be read because the sources blocked the reviewer, so they are excluded from the disputed rate, which comes to 0%. That is a third of the claims left unchecked, which limits how far this review can be relied on, but it is not a defect of the page. The page's May 2026 TVL figure is dated (the reviewer's snippet suggests about $6K by October 2026), but the reviewer rated this omission minor and found no shutdown or status contradiction. It is worth a refresh, not a penalty.
   anchoranchored

   chain

   ●mainnet-betaslot 464,343,897

   sig

   4SRmfc5qdNDP…WPRjWj5Pcopyexplorer ↗

   hash

   4789boatn8LP…TRoFYK8Mcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1417 B) ▸

   {"actor":"judge","artifact_identity":"217a88a8ebcda961be404a61d288902d","band_override":null,"blocked_count":2,"decided_at":"2026-11-02T03:27:15.871Z","decision":"review_approve","delist_requested":false,"disputed_pct":0,"investigation_id":"c904afdd-65c3-4db7-98bb-c96d6f81e74b","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":63,"page_slug":"typus-perp","prev_score":63,"reason":"Of six claims checked, four were confirmed against readable sources and none were disputed (claim_findings[0], [1], [2], [5]), including the $3.44 million exploit, the Nov 13, 2024 deployment and the audit exclusion. The other two (claim_findings[3], [4]) could not be read because the sources blocked the reviewer, so they are excluded from the disputed rate, which comes to 0%. That is a third of the claims left unchecked, which limits how far this review can be relied on, but it is not a defect of the page. The page's May 2026 TVL figure is dated (the reviewer's snippet suggests about $6K by October 2026), but the reviewer rated this omission minor and found no shutdown or status contradiction. It is worth a refresh, not a penalty.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":4,"sequence_num":4,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 696753ab-7a6c-47cc-b45e-bfb6770d9704copy
5. #5rescoreby systemsystem

   2026-11-02 03:27:17Z
   Score: 63 → 64 (+1)
   Recalculated after the fact-check of 2026-11-02. Rescored under Scoring v2, the published formula (avoid.net/scoring): 63 → 64. Problems weighed by who is responsible: incidents the subject suffered −3.2, concerns that are not fraud −3.2, problems around the subject, caused by others −2.4; legitimacy credit long-running +8; 1 section(s) set aside until a failed fact-check is resolved.
   anchoranchored

   chain

   ●mainnet-betaslot 464,343,903

   sig

   2N4akyiEQqGJ…2umifq8ocopyexplorer ↗

   hash

   BJHze41abKnX…6rCnL5o1copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (751 B) ▸

   {"actor":"system","decided_at":"2026-11-02T03:27:15.871Z","decision":"rescore","investigation_id":"c904afdd-65c3-4db7-98bb-c96d6f81e74b","new_score":64,"page_slug":"typus-perp","prev_score":63,"reason":"Recalculated after the fact-check of 2026-11-02. Rescored under Scoring v2, the published formula (avoid.net/scoring): 63 → 64. Problems weighed by who is responsible: incidents the subject suffered −3.2, concerns that are not fraud −3.2, problems around the subject, caused by others −2.4; legitimacy credit long-running +8; 1 section(s) set aside until a failed fact-check is resolved.","score_delta":1,"score_model":"v2","sequence_num":5,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision f5dc3143-e690-4a25-82d5-51fc0e65f3f1copy