Verify a decision
Every moderation decision on AVOID.NET is anchored to the Solana blockchain. You don't have to trust us — you can verify cryptographically that we committed to a verdict at a specific moment and have not rewritten it.
How verification works
- We commit. When a moderator accepts/rejects a submission, we serialize the decision into deterministic UTF-8 bytes (
payload_canonical_string), hash it with SHA-256, encode the digest as base58, and write it to Solana inside an SPL Memo v2 transaction. - We store the bytes. The exact bytes we hashed are stored alongside the decision in our database. Anyone can read them and recompute the hash in any language.
- You compare three values. Database hash, your independently-recomputed hash, and the hash inside the on-chain memo. If all three match, the decision is authentic and timestamped.
The on-chain memo format is
AVOID.NET|v1|h:<b58-sha256>|d:<id>|t:<iso>Find a signature on any investigation page's decision log, or run python -m src.verify_decision --signature <sig> for a CLI check.
Decision
- Sequence
- #5
- Score
- 0 → 0 (0)
- Cluster
- mainnet-beta
- Slot
- 457587706
- Off-chain at
- 2026-10-16T09:29:27.441Z
- Anchored at
- 2026-10-16T09:29:30.190Z
- Block time
- —
Independent verification
- 1. Database (off-chain)
- Ec7b3JF5rvnc4wKUkvtCz9mW67vVCvMFESea3vCLBC75
- 2. Recomputed (your browser)
- computing…
- 3. On-chain (Solana memo)
- fetching…
Canonical bytes hashed (2451 chars)
{"actor":"reviewer","artifact_identity":"4ba23aa95782ee30b5ae0403181dc390","decided_at":"2026-10-16T09:29:27.206Z","decision":"review","disputed_pct":0.2727,"findings_hash":"AmQW8id82gY7FQNAwu7gPqp4P2xnAaioyd5mUGgAZe4X","investigation_id":"e9d60bed-425b-4fc6-b70b-15d7d8e9722d","mode":"findings_only","new_score":0,"page_content_hash":"e4cee30b245f32c2d6f7cd6384514015674f196a63ccfdaa92dff716dd7bc2d7","page_slug":"lazarus-group-mach-o-man-macos-campaign-2026","prev_score":0,"reason":"The page's core narrative — a Lazarus/Chollima-attributed, Go-compiled macOS malware kit called Mach-O Man, disclosed April 21–22, 2026 by Bitso's Quetzal Team and ANY.RUN, delivered via ClickFix social engineering over Telegram, and operationally concurrent with the Drift Protocol and KelpDAO thefts — holds up well against independent reporting, including a direct fetch of the Chainalysis post-mortem and the CoinDesk article. However, the Attribution section's claim that 'OFAC designated Lazarus Group on April 14, 2022' is wrong on both the date and the characterization: the page's own cited OFAC document is dated April 22, 2022 and is an update (adding ETH addresses) to a listing that actually began September 13, 2019 under Executive Order 13722 — a defect repeated in the timeline's date field and event text. The TRM Labs attribution for the cumulative '$6 billion' theft figure in the Attribution section conflicts with the page's own cited CoinDesk source, which credits Chainalysis. The Drift Protocol timeline entry misattributes the exploit to a 'TraderTraitor' sub-unit; both Drift's own disclosure and CoinDesk instead name UNC4736 (aka AppleJeus/Labyrinth Chollima) — 'TraderTraitor' is the subgroup named for the separate KelpDAO exploit. The gbhackers.com citation used in three places on the page returned no content on repeated fetches and could not be located live via search; a working alternative with equivalent content was found. The KelpDAO 'phantom burn' mechanism description is well supported and matches Chainalysis's own wording closely. A handful of other claims (the $578M combined figure, and the attribution of a specific '$500M/two weeks' framing to Natalie Newson by name) are directionally correct but slightly overstate precision relative to what the cited sources actually say.","score_delta":0,"sequence_num":5,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}