Audit log

Every state-changing event for Vee Finance: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-21 17:13:02Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 421,244,906

   sig

   tT9hA5YxZq3H…YDgE9Yjqcopyexplorer ↗

   hash

   4mJvj5aD5fUf…YKFUF8trcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (6884 B) ▸

   {"actor":"system:backfill","investigation_id":"446f9f73-4903-4ec3-95a6-792f2cd2531c","kind":"publish","page_slug":"vee-finance","published_at":"2026-05-21T17:13:02.647Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Vee Finance","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/tech/2021/09/21/vee-finance-hit-for-35m-in-second-major-exploit-on-avalanche","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/81400/avalanche-defi-platform-vee-finance-suffers-35m-hack","type":"other","url":""},{"credibility":3,"name":"https://rekt.news/veefinance-rekt","type":"other","url":""},{"credibility":3,"name":"https://fullycrypto.com/vee-finance-35-million-hack-passed-to-fbi","type":"other","url":""},{"credibility":3,"name":"https://cryptoslate.com/another-hit-on-avalanche-as-vee-finance-exploited-for-35-million/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-vee-finance-hack-september-2021","type":"other","url":""},{"credibility":3,"name":"https://slowmist.medium.com/the-main-cause-of-vee-finance-attack-52fc8e5fb13d","type":"other","url":""},{"credibility":3,"name":"https://immunebytes.com/blog/vee-finance-exploit-sep-21-2021-detailed-analysis/","type":"other","url":""},{"credibility":3,"name":"https://www.quadrigainitiative.com/casestudy/veefinancepriceoraclemanipulation.php","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-vee-finance-hack-september-2021","type":"other","url":""},{"credibility":3,"name":"https://rekt.news/veefinance-rekt","type":"other","url":""},{"credibility":3,"name":"https://www.certik.com/projects/veefinance","type":"other","url":""},{"credibility":3,"name":"https://github.com/VeeFinance/audit/blob/main/2021-9-09_SlowMist%20Security%20Audit%20Vee%20Finance/Smart%20Contract%20Security%20Audit%20Report%20-%20Vee%20Finance.pdf","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://veefi.medium.com/leveraging-defi-market-with-leveraged-transactions-7a95c4c0b9e4","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-vee-finance-hack-september-2021","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/defi-platform-vee-finance-exploited-for-35m-on-avalanche-blockchain","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://veefi.medium.com/vee-finance-restart-plan-sept-28-314cb2dd734d","type":"other","url":""},{"credibility":3,"name":"https://veefi.medium.com/latest-update-october-2-a547aa853744","type":"other","url":""},{"credibility":3,"name":"https://veefi.medium.com/5-ways-how-vee-finance-v2-makes-funds-secure-f17caf306607","type":"other","url":""},{"credibility":3,"name":"https://veefi.medium.com/vee-finance-integrates-chainlink-price-feeds-to-secure-vee-finance-money-market-335b4bed261a","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://coinmarketcap.com/currencies/vee-finance/","type":"other","url":""},{"credibility":3,"name":"https://www.coingecko.com/en/coins/vee-finance","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/tech/2021/09/21/vee-finance-hit-for-35m-in-second-major-exploit-on-avalanche","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://rekt.news/veefinance-rekt","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/81400/avalanche-defi-platform-vee-finance-suffers-35m-hack","type":"other","url":""}]}],"sources_used":[],"summary":"Vee Finance is a decentralized lending and leveraged trading protocol deployed on the Avalanche blockchain that launched its mainnet on September 14, 2021. Within one week of launch, on September 20-21, 2021, an attacker exploited price oracle manipulation and a decimal calculation error in the protocol's smart contracts, draining approximately $35 million in ETH and BTC — a hack that ranks among the largest DeFi exploits on Avalanche. The protocol relaunched as V2 with improved security measures including Chainlink oracle integration, but the stolen funds were never recovered, and activity and token value have declined precipitously since the incident.","timeline":[{"date":"2021-05-26","event":"CertiK completes smart contract security audit of Vee Finance. CertiK lists the project as high-risk.","source":""},{"date":"2021-09-09","event":"SlowMist completes pre-launch security audit of Vee Finance smart contracts, identifying oracle-related concerns.","source":""},{"date":"2021-09-14","event":"Vee Finance mainnet launches on Avalanche. Total value locked surpasses $300 million within days.","source":""},{"date":"2021-09-20","event":"Vee Finance team identifies abnormal transfers. Exploit begins; attacker drains 8,804.7 ETH (~$26M) and 213.93 BTC (~$9M) via oracle manipulation and decimal calculation error.","source":""},{"date":"2021-09-21","event":"Exploit confirmed publicly. VEE token crashes from $0.25 to $0.085. Protocol suspends all smart contracts. SlowMist publishes technical post-mortem. Rekt.news ranks exploit #7 on its DeFi leaderboard.","source":""},{"date":"2021-09-21","event":"Vee Finance files police report and offers $500,000 USD bounty for attacker identification. Attacker begins moving funds through CoinJoin mixer.","source":""},{"date":"2021-09-24","event":"Vee Finance publishes initial compensation plan, establishing a pool for affected users payable in AVAX, WBTC, WETH, LINK, and USDT.","source":""},{"date":"2021-09-25","event":"Case escalated to the FBI due to scale of loss and alleged links to other attacks.","source":""},{"date":"2021-09-28","event":"Vee Finance publishes formal restart plan for V2 with security improvements.","source":""},{"date":"2021-10-02","event":"Vee Finance publishes updated compensation pool and relaunch plan details. Compensation pool opens.","source":""},{"date":"2021-10-04","event":"SlowMist completes Phase 2 security audit of Vee Finance V2 contracts.","source":""},{"date":"2021-12-28","event":"Vee Finance reports 24,475 USDT deposited into compensation pool from platform revenue — a small fraction of the $35M lost.","source":""},{"date":"2022-01-01","event":"V2 relaunches with Chainlink oracle integration for money market; leveraged trading function remains suspended.","source":""},{"date":"2025-01-01","event":"VEE token trading near $0.00001 USD with 24-hour volume below $100, representing over 99.99% decline from pre-hack levels.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 362d4a90-ad4d-4ec5-a94d-d61900953763copy
2. #2rescoreby systemsystem

   2026-10-10 18:48:42Z
   Score: 12 → 53 (+41)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 12 → 53. Problems weighed by who is responsible: concerns that are not fraud −9.6, incidents the subject suffered −6.4, problems around the subject, caused by others −1.6; legitimacy credit long-running +6.
   anchoranchored

   chain

   ●mainnet-betaslot 455,368,611

   sig

   2skXazEVSHJL…wNRnxKpscopyexplorer ↗

   hash

   538NaB9mNMtN…HVr7usKZcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (642 B) ▸

   {"actor":"system","decided_at":"2026-10-10T18:48:42.825Z","decision":"rescore","investigation_id":"446f9f73-4903-4ec3-95a6-792f2cd2531c","new_score":53,"page_slug":"vee-finance","prev_score":12,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 12 → 53. Problems weighed by who is responsible: concerns that are not fraud −9.6, incidents the subject suffered −6.4, problems around the subject, caused by others −1.6; legitimacy credit long-running +6.","score_delta":41,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision d9bd00d8-e7dc-4242-9dd7-1bcc04b6e5b3copy
3. #3reviewby reviewerreviewer

   2026-11-02 00:49:05Z
   Score: 53 → 53 (no score change)
   Core exploit facts (amount, ETH/BTC split, Zabu context, price drop, Rekt rank) match CoinDesk and Rekt. The FBI escalation rests on a dead fullycrypto link and no other reachable source. Audit-ignored framing slightly overstates Rekt, which only says SlowMist recommendations were ignored. The V2 relaunch, post-2021 status and several timeline dates are unsourced or unverified, and current operating status could not be determined.
   anchoranchored

   chain

   ●mainnet-betaslot 464,299,472

   sig

   233WPnvpUQ63…xc2hSq5Lcopyexplorer ↗

   hash

   yc1hgqJzPAEA…avzVomRicopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1283 B) ▸

   {"actor":"reviewer","artifact_identity":"0fd15ddf05ff582c35813e15e7c815b6","blocked_count":1,"decided_at":"2026-11-02T00:49:04.943Z","decision":"review","disputed_pct":0.3333,"findings_hash":"9zSVJxpUjux8eMPvJArMdX9u4DHKBFP9rTNPK4ihfW1i","investigation_id":"446f9f73-4903-4ec3-95a6-792f2cd2531c","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":53,"page_content_hash":"62202ade901dfa020c28a6e53237b01fb0bbddfe806c36af796309a28e86238d","page_slug":"vee-finance","prev_score":53,"reason":"Core exploit facts (amount, ETH/BTC split, Zabu context, price drop, Rekt rank) match CoinDesk and Rekt. The FBI escalation rests on a dead fullycrypto link and no other reachable source. Audit-ignored framing slightly overstates Rekt, which only says SlowMist recommendations were ignored. The V2 relaunch, post-2021 status and several timeline dates are unsourced or unverified, and current operating status could not be determined.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":12,"sequence_num":3,"subject_status":"unknown","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 2e3c7a8a-fadd-4414-a7c8-afd55e681aaecopy
4. #4review reviseby judgejudge

   2026-11-02 00:49:05Z
   Score: 53 → 53 (no score change)
   The core exploit facts (about $35M lost, the ETH/BTC split, the Zabu Finance context, the VEE price drop) were confirmed against CoinDesk and Rekt, and no claim was disputed outright. However, 4 of the 12 checkable claims (33%) could not be verified: the FBI escalation depends on a dead fullycrypto link (claim_findings[3], [4]), and the mainnet launch date, the AVOID.NET ZachXBT flag and the 2025 price figures have no reachable source (claim_findings[6], [10], [12]). The audit-ignored framing also overstates Rekt, which attributes ignored recommendations to SlowMist only (claim_findings[7], [8]). The V2 relaunch is cited only to unarchivable project posts and is a high-priority coverage gap. One further claim was excluded from the percentage because its source blocked the reviewer. Because nothing was contradicted and the reviewer's confidence was moderate, the penalty is at the mild end of the band.
   anchoranchored

   chain

   ●mainnet-betaslot 464,299,477

   sig

   2ZqLGXamvZBi…CT1PZ5qtcopyexplorer ↗

   hash

   7ecdceSr8Fyv…k4dpVyDqcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1595 B) ▸

   {"actor":"judge","artifact_identity":"0fd15ddf05ff582c35813e15e7c815b6","band_override":null,"blocked_count":1,"decided_at":"2026-11-02T00:49:04.943Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.3333,"investigation_id":"446f9f73-4903-4ec3-95a6-792f2cd2531c","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":53,"page_slug":"vee-finance","prev_score":53,"reason":"The core exploit facts (about $35M lost, the ETH/BTC split, the Zabu Finance context, the VEE price drop) were confirmed against CoinDesk and Rekt, and no claim was disputed outright. However, 4 of the 12 checkable claims (33%) could not be verified: the FBI escalation depends on a dead fullycrypto link (claim_findings[3], [4]), and the mainnet launch date, the AVOID.NET ZachXBT flag and the 2025 price figures have no reachable source (claim_findings[6], [10], [12]). The audit-ignored framing also overstates Rekt, which attributes ignored recommendations to SlowMist only (claim_findings[7], [8]). The V2 relaunch is cited only to unarchivable project posts and is a high-priority coverage gap. One further claim was excluded from the percentage because its source blocked the reviewer. Because nothing was contradicted and the reviewer's confidence was moderate, the penalty is at the mild end of the band.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":12,"sequence_num":4,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 5ed213f1-03ea-4eb3-b910-66fc9b2364ddcopy
5. #5rescoreby systemsystem

   2026-11-02 00:49:06Z
   Score: 53 → 54 (+1)
   Recalculated after the fact-check of 2026-11-02. Rescored under Scoring v2, the published formula (avoid.net/scoring): 53 → 54. Problems weighed by who is responsible: concerns that are not fraud −9.6, incidents the subject suffered −6.4, problems around the subject, caused by others −0.8; legitimacy credit long-running +6; 1 section(s) set aside until a failed fact-check is resolved.
   anchoranchored

   chain

   ●mainnet-betaslot 464,299,627

   sig

   3ATkkjzbkgi5…GfFxFPt3copyexplorer ↗

   hash

   4UgMAZdptQfM…MWpJZ8v3copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (752 B) ▸

   {"actor":"system","decided_at":"2026-11-02T00:49:04.943Z","decision":"rescore","investigation_id":"446f9f73-4903-4ec3-95a6-792f2cd2531c","new_score":54,"page_slug":"vee-finance","prev_score":53,"reason":"Recalculated after the fact-check of 2026-11-02. Rescored under Scoring v2, the published formula (avoid.net/scoring): 53 → 54. Problems weighed by who is responsible: concerns that are not fraud −9.6, incidents the subject suffered −6.4, problems around the subject, caused by others −0.8; legitimacy credit long-running +6; 1 section(s) set aside until a failed fact-check is resolved.","score_delta":1,"score_model":"v2","sequence_num":5,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision b1f6efc8-1036-494a-9e28-1af6293952c2copy