Audit log

Every state-changing event for Venus Core Pool: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-28 01:44:40Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 422,622,649

   sig

   5KDGnAEFUgb2…WqfijBw8copyexplorer ↗

   hash

   HymKP7mAdCyK…sfnvfc5Bcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (7568 B) ▸

   {"actor":"system:backfill","investigation_id":"a6f1f6b4-01ae-4a64-8bfc-bc12b07c4d22","kind":"publish","page_slug":"venus-core-pool","published_at":"2026-05-28T01:44:40.208Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Venus Core Pool","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://academy.binance.com/en/articles/what-is-venus-protocol","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/venus","type":"other","url":""},{"credibility":3,"name":"https://coincentral.com/venus-protocol-guide/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/tech/2025/09/02/bnb-chain-based-venus-protocol-drained-of-usd27m-on-suspected-contract-compromise","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/business/2025/09/03/venus-protocol-restores-services-recovers-stolen-funds-after-usd27m-exploit","type":"other","url":""},{"credibility":3,"name":"https://crypto-economy.com/venus-protocol-confirms-core-pool-exploit-27m-drained/","type":"other","url":""},{"credibility":3,"name":"https://www.cryptotimes.io/2025/09/03/venus-protocol-fully-resumes-after-27m-phishing-exploit/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://rekt.news/venus-protocol-rekt4","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-venus-protocol-hack-march-2026","type":"other","url":""},{"credibility":3,"name":"https://www.theblock.co/post/393622/venus-protocol-left-with-roughly-2m-in-bad-debt-after-exploit-manipulates-thenas-the-token-price","type":"other","url":""},{"credibility":3,"name":"https://dev.to/ohmygod/the-venus-protocol-donation-attack-how-a-dismissed-audit-finding-became-a-215m-bad-debt-twice-4lk9","type":"other","url":""},{"credibility":3,"name":"https://code4rena.com/reports/2023-05-venus","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/markets/2026/03/19/venus-xvs-token-plunges-9-as-exploit-leaves-protocol-with-bad-debt","type":"other","url":""},{"credibility":3,"name":"https://protos.com/venus-protocol-hacker-lost-4-7m-after-nine-months-of-planning/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://quillhashteam.medium.com/200-m-venus-protocol-hack-analysis-b044af76a1ae","type":"other","url":""},{"credibility":3,"name":"https://thedefiant.io/bscs-venus-protocol-left-with-bad-debt-after-liquidations","type":"other","url":""},{"credibility":3,"name":"https://www.chaincatcher.com/en/article/2252203","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.chaincatcher.com/en/article/2252203","type":"other","url":""},{"credibility":3,"name":"https://messari.io/report/venus-money-market-and-synthetic-stablecoin-protocol-on-bnb-chain","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.theblock.co/post/246291/venus-protocol-bnb","type":"other","url":""},{"credibility":3,"name":"https://thedefiant.io/news/defi/binance-bridge-hacker-hit-by-usd30m-liquidation-on-venus","type":"other","url":""},{"credibility":3,"name":"https://www.web3isgoinggreat.com/single/bnb-chain-team-prepares-to-step-in-to-prevent-massive-venus-protocol-liquidation","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://dev.to/ohmygod/the-venus-protocol-donation-attack-how-a-dismissed-audit-finding-became-a-215m-bad-debt-twice-4lk9","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/business/2025/09/03/venus-protocol-restores-services-recovers-stolen-funds-after-usd27m-exploit","type":"other","url":""},{"credibility":3,"name":"https://rekt.news/venus-protocol-rekt4","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.chaincatcher.com/en/article/2252203","type":"other","url":""},{"credibility":3,"name":"https://protos.com/venus-protocol-hacker-lost-4-7m-after-nine-months-of-planning/","type":"other","url":""},{"credibility":3,"name":"https://www.web3isgoinggreat.com/?id=venus-protocol-bad-debt","type":"other","url":""},{"credibility":3,"name":"https://www.cryptotimes.io/2026/03/19/donation-attack-on-venus-protocol-leaves-2-15-million-in-bad-debt/","type":"other","url":""}]}],"sources_used":[],"summary":"Venus Core Pool is the primary lending market of Venus Protocol, the largest decentralized money market on BNB Chain. The protocol has accumulated over $112 million in cumulative losses across at least five separate security incidents since 2021, including oracle manipulation, a phishing attack draining $27 million from the Core Pool itself in September 2025, and a donation-attack exploit in March 2026 that left $2.15 million in unrecoverable bad debt. A critical vulnerability flagged during a 2023 Code4rena security audit was dismissed by the development team and subsequently exploited twice.","timeline":[{"date":"2020-01-01","event":"Venus Protocol launched on BNB Chain by the Swipe Wallet development team, forking Compound and MakerDAO","source":""},{"date":"2021-05-01","event":"XVS oracle manipulation attack; attacker pumps XVS price from ~$70 to ~$140, borrows ~2,000 BTC and ~5,700 ETH; protocol left with $95 million in bad debt","source":""},{"date":"2022-05-01","event":"Terra/LUNA collapse causes $14 million in bad debt on Venus due to stale Chainlink price feed with hard-coded $0.10 minimum for LUNA","source":""},{"date":"2022-10-01","event":"BNB Chain bridge exploiter deposits 900,000 BNB as collateral on Venus to borrow $150 million in stablecoins; BNB Chain governance intervenes to prevent destabilizing liquidation","source":""},{"date":"2023-05-01","event":"Code4rena audit of Venus Isolated Pools documents donation attack vector under finding M-10; Venus development team dismisses it as 'supported behavior with no negative side effects'","source":""},{"date":"2025-02-01","event":"Venus ZKSync deployment suffers donation-style exploit on wUSDM market; approximately $717,000 in net bad debt incurred; BNB Chain deployment left unpatched","source":""},{"date":"2025-06-01","event":"Alleged attacker begins nine-month accumulation of THE (Thena) tokens on Venus, funded via ~7,400 ETH from Tornado Cash; community members allegedly raise concerns; Venus declines to act","source":""},{"date":"2025-09-02","event":"Core Pool exploit: phishing attack tricks large protocol user into approving malicious transaction; approximately $27 million in vUSDT, vUSDC, and BTCB drained from Venus Core Pool","source":""},{"date":"2025-09-03","event":"Venus 'lightning vote' passes with 100% community support; forced liquidation of attacker assets recovers approximately $13.5 million; protocol fully restores services","source":""},{"date":"2026-03-15","event":"Donation attack on vTHE market: attacker donates 36+ million THE directly to vTHE contract, inflates exchange rate 3.81x, borrows ~$14.9 million in assets; THE price collapses; $2.15 million in bad debt remains","source":""},{"date":"2026-03-19","event":"XVS governance token falls approximately 9% following disclosure of bad debt; Venus pauses THE market and reduces collateral factors to zero on six additional markets","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision c44f29b3-4d2f-439f-8b3c-a0a96be38d34copy
2. #2rescoreby systemsystem

   2026-10-10 18:46:52Z
   Score: 28 → 54 (+26)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 28 → 54. Problems weighed by who is responsible: incidents the subject suffered −9.6, concerns that are not fraud −9.6, problems around the subject, caused by others −1.6; legitimacy credit long-running +10.
   anchoranchored

   chain

   ●mainnet-betaslot 455,366,720

   sig

   2qMo4jMQzAKU…HPcHKrqNcopyexplorer ↗

   hash

   GSTe8txVtPfm…k6ocYVMEcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (647 B) ▸

   {"actor":"system","decided_at":"2026-10-10T18:46:51.923Z","decision":"rescore","investigation_id":"a6f1f6b4-01ae-4a64-8bfc-bc12b07c4d22","new_score":54,"page_slug":"venus-core-pool","prev_score":28,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 28 → 54. Problems weighed by who is responsible: incidents the subject suffered −9.6, concerns that are not fraud −9.6, problems around the subject, caused by others −1.6; legitimacy credit long-running +10.","score_delta":26,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 58db2aa9-e347-4587-a59b-76113e0c3b02copy
3. #3reviewby reviewerreviewer

   2026-11-02 00:01:58Z
   Score: 54 → 54 (no score change)
   The core incidents (2021 XVS, March 2026 donation attack, Sept 2025 phishing) are real and the key March 2026 figures (84%, 3.81x, 8,048 liquidations, $2.15M bad debt, $4.7M attacker loss) check out against two sources. Problems found: the LUNA bad debt ($14M) conflicts with a cited source ($11.2M); the $14.9M borrow and $13.5M recovery are not in the sources I fetched; the THE peak price differs from sources; and the $112M total is the page's own sum. Archive URLs for two sources point to unrelated pages. The entity is operating, with no shutdown or sanction.
   anchoranchored

   chain

   ●mainnet-betaslot 464,286,387

   sig

   eQ1NbbPbv5hK…RbmcXUiPcopyexplorer ↗

   hash

   FGwvJru9cACZ…7iTAQDPzcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1421 B) ▸

   {"actor":"reviewer","artifact_identity":"be26835c8f1258cadfc96230672b8bd6","decided_at":"2026-11-02T00:01:58.706Z","decision":"review","disputed_pct":0.3333,"findings_hash":"6xoXqYDcE9WDjkUnTrQm8pSF25aRoY9dRphT9vK3GGPy","investigation_id":"a6f1f6b4-01ae-4a64-8bfc-bc12b07c4d22","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":54,"omissions":{"material":0,"total":1},"page_content_hash":"46722680561a7532e3cc512875bab5fc8ad112a98c6f422e6ebe4b45b522ea29","page_slug":"venus-core-pool","prev_score":54,"reason":"The core incidents (2021 XVS, March 2026 donation attack, Sept 2025 phishing) are real and the key March 2026 figures (84%, 3.81x, 8,048 liquidations, $2.15M bad debt, $4.7M attacker loss) check out against two sources. Problems found: the LUNA bad debt ($14M) conflicts with a cited source ($11.2M); the $14.9M borrow and $13.5M recovery are not in the sources I fetched; the THE peak price differs from sources; and the $112M total is the page's own sum. Archive URLs for two sources point to unrelated pages. The entity is operating, with no shutdown or sanction.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"sequence_num":3,"subject_status":"operating","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision c02f8d0c-fd42-4791-a8b9-c711309296c4copy
4. #4review reviseby judgejudge

   2026-11-02 00:01:58Z
   Score: 54 → 54 (no score change)
   Of 12 checked claims, 1 was disputed and 3 could not be verified, which gives a 33% disputed share (4 of 12), in the 30-60% band. The Terra/LUNA bad debt figure of about $14 million conflicts with a cited source that says $11.2 million (claim_findings[0]). The $14.9 million borrow figure, the $13.5 million recovery with the lightning vote, and the Coincentral archive link could not be confirmed (claim_findings[2], [5], [11]). The core March 2026 figures (84% of supply, 3.81x, 8,048 liquidations, $2.15 million bad debt, $4.7 million attacker loss) and the 2021 $95 million figure are confirmed, and the one omission is minor, so the penalty sits at the low end of the band. The reviewer's confidence is moderate and several sources were not fetched.
   anchoranchored

   chain

   ●mainnet-betaslot 464,286,393

   sig

   3xEfyycrSE98…zC3jcp4icopyexplorer ↗

   hash

   GUnM3djSa6Ss…x4qe9J3Mcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1403 B) ▸

   {"actor":"judge","artifact_identity":"be26835c8f1258cadfc96230672b8bd6","band_override":null,"decided_at":"2026-11-02T00:01:58.706Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.3333,"investigation_id":"a6f1f6b4-01ae-4a64-8bfc-bc12b07c4d22","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":54,"page_slug":"venus-core-pool","prev_score":54,"reason":"Of 12 checked claims, 1 was disputed and 3 could not be verified, which gives a 33% disputed share (4 of 12), in the 30-60% band. The Terra/LUNA bad debt figure of about $14 million conflicts with a cited source that says $11.2 million (claim_findings[0]). The $14.9 million borrow figure, the $13.5 million recovery with the lightning vote, and the Coincentral archive link could not be confirmed (claim_findings[2], [5], [11]). The core March 2026 figures (84% of supply, 3.81x, 8,048 liquidations, $2.15 million bad debt, $4.7 million attacker loss) and the 2021 $95 million figure are confirmed, and the one omission is minor, so the penalty sits at the low end of the band. The reviewer's confidence is moderate and several sources were not fetched.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"sequence_num":4,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 0b0e840c-dbb6-47bf-860e-39204cb92935copy
5. #5rescoreby systemsystem

   2026-11-02 00:02:00Z
   Score: 54 → 57 (+3)
   Recalculated after the fact-check of 2026-11-02. Rescored under Scoring v2, the published formula (avoid.net/scoring): 54 → 57. Problems weighed by who is responsible: incidents the subject suffered −9.6, concerns that are not fraud −6.4, problems around the subject, caused by others −1.6; legitimacy credit long-running +10; 1 section(s) set aside until a failed fact-check is resolved.
   anchoranchored

   chain

   ●mainnet-betaslot 464,286,398

   sig

   5qt5QDYutZDM…vaVvYp5Pcopyexplorer ↗

   hash

   3hYSme4uFVuf…wiiSHGjWcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (757 B) ▸

   {"actor":"system","decided_at":"2026-11-02T00:01:58.706Z","decision":"rescore","investigation_id":"a6f1f6b4-01ae-4a64-8bfc-bc12b07c4d22","new_score":57,"page_slug":"venus-core-pool","prev_score":54,"reason":"Recalculated after the fact-check of 2026-11-02. Rescored under Scoring v2, the published formula (avoid.net/scoring): 54 → 57. Problems weighed by who is responsible: incidents the subject suffered −9.6, concerns that are not fraud −6.4, problems around the subject, caused by others −1.6; legitimacy credit long-running +10; 1 section(s) set aside until a failed fact-check is resolved.","score_delta":3,"score_model":"v2","sequence_num":5,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision f08ff208-dec3-434b-a945-996a8a475d4acopy