Skip to main content
Sign in
Unleash Protocol1 decision on this page

Audit log

Every state-changing event for Unleash Protocol: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

  1. #1publishby system:backfill
    2026-05-26 19:42:36Z
    Score: ?? (no score change)
    anchoranchored
    chain
    mainnet-betaslot 422,349,677
    sig
    5t33CncG6wmq…rGoLxyBbexplorer ↗
    hash
    5dDYvSMt4j2n…jYxofEqNsha256 → base58
    verifying row…full verify ↗
    canonical bytes (6079 B) ▸
    {"actor":"system:backfill","investigation_id":"52ea6c6f-9de0-4ac0-809e-729d8224fa64","kind":"publish","page_slug":"unleash-protocol","published_at":"2026-05-26T19:42:35.984Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Unleash Protocol","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/business/2025/12/30/unleash-protocol-hit-by-usd3-9-million-exploit-with-funds-routed-through-tornado-cash","type":"other","url":""},{"credibility":3,"name":"https://www.bleepingcomputer.com/news/security/hackers-drain-39m-from-unleash-protocol-after-multisig-hijack/","type":"other","url":""},{"credibility":3,"name":"https://coinpedia.org/news/unleash-protocol-hack-drains-3-9m-after-multisig-exploit-peckshield-reveals/","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/academy/article/unleash-protocol-loses-dollar39m-in-governance-exploit","type":"other","url":""},{"credibility":3,"name":"https://www.scorechain.com/blog/unleash-protocol-incident-shows-how-governance-failures-escalate-risk","type":"other","url":""},{"credibility":3,"name":"https://coinjournal.net/news/how-a-governance-failure-led-to-the-unleash-protocol-hack/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://coinjournal.net/news/how-a-governance-failure-led-to-the-unleash-protocol-hack/","type":"other","url":""},{"credibility":3,"name":"https://www.scorechain.com/blog/unleash-protocol-incident-shows-how-governance-failures-escalate-risk","type":"other","url":""},{"credibility":3,"name":"https://coinpedia.org/news/unleash-protocol-hack-drains-3-9m-after-multisig-exploit-peckshield-reveals/","type":"other","url":""},{"credibility":3,"name":"https://www.bleepingcomputer.com/news/security/hackers-drain-39m-from-unleash-protocol-after-multisig-hijack/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/business/2025/12/30/unleash-protocol-hit-by-usd3-9-million-exploit-with-funds-routed-through-tornado-cash","type":"other","url":""},{"credibility":3,"name":"https://www.bleepingcomputer.com/news/security/hackers-drain-39m-from-unleash-protocol-after-multisig-hijack/","type":"other","url":""},{"credibility":3,"name":"https://www.cryptotimes.io/2025/12/31/unleash-protocol-exploit-3-9m-stolen-via-multisig-governance-breach/","type":"other","url":""},{"credibility":3,"name":"https://www.scorechain.com/blog/unleash-protocol-incident-shows-how-governance-failures-escalate-risk","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.bleepingcomputer.com/news/security/hackers-drain-39m-from-unleash-protocol-after-multisig-hijack/","type":"other","url":""},{"credibility":3,"name":"https://www.cryptopolitan.com/unleash-protocol-unauthorized-withdrawals/","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/unleash-protocol","type":"other","url":""},{"credibility":3,"name":"https://coinpedia.org/news/unleash-protocol-hack-drains-3-9m-after-multisig-exploit-peckshield-reveals/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://docs.unleashprotocol.xyz/others/team","type":"other","url":""},{"credibility":3,"name":"https://coinjournal.net/news/how-a-governance-failure-led-to-the-unleash-protocol-hack/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://bitcoinethereumnews.com/tech/unleash-protocol-exploit-causes-3-9m-loss-ip-token-dips-on-story-concerns/","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/unleash-protocol","type":"other","url":""},{"credibility":3,"name":"https://www.scworld.com/brief/crypto-heist-pilfers-about-3-9m-from-unleash-protocol","type":"other","url":""},{"credibility":3,"name":"https://www.cryptotimes.io/2025/12/31/unleash-protocol-exploit-3-9m-stolen-via-multisig-governance-breach/","type":"other","url":""}]}],"sources_used":[],"summary":"Unleash Protocol is a decentralized intellectual property finance (IPFi) platform built on the Story Protocol blockchain, launched in early 2024. On December 30, 2025, the protocol suffered a confirmed $3.9 million exploit in which an attacker gained unauthorized administrative control through its multisignature governance system, executed an unauthorized smart contract upgrade, and laundered 1,337 ETH through Tornado Cash. The protocol subsequently paused all operations; as of early 2026 no recovery or user compensation plan has been publicly confirmed.","timeline":[{"date":"2024-01-01","event":"Unleash Protocol founded by 11-member team, positioning as an IPFi (Intellectual Property Finance) platform on Story Protocol.","source":""},{"date":"2025-12-30","event":"Attacker gains unauthorized administrative control via Unleash Protocol's multisig governance system, executes unapproved contract upgrade, and drains approximately $3.9M in WIP, USDC, WETH, stIP, and vIP tokens.","source":""},{"date":"2025-12-30","event":"PeckShieldAlert and CertiK flag the incident publicly. Attacker bridges stolen assets to Ethereum and begins depositing 1,337.1 ETH into Tornado Cash across 34 structured transactions over 11–12 hours.","source":""},{"date":"2025-12-30","event":"Unleash Protocol announces the breach on X (formerly Twitter), pauses all operations, and advises users to halt all contract interactions. States no compromise to Story Protocol infrastructure.","source":""},{"date":"2025-12-31","event":"Multiple security outlets including BleepingComputer, CoinDesk, and Coinpedia publish detailed coverage. LookonChain and Scorechain confirm governance-layer root cause.","source":""},{"date":"2026-01-01","event":"Unleash Protocol TVL recorded at $0 on DefiLlama. No user compensation or recovery timeline announced as of available reporting.","source":""}]},"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision 9ad7efcb-0d74-4c20-8167-016efc64d6ab
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine — python -m src.verify_decision <event_id>.