Verify a decision
Every moderation decision on AVOID.NET is anchored to the Solana blockchain. You don't have to trust us — you can verify cryptographically that we committed to a verdict at a specific moment and have not rewritten it.
How verification works
- We commit. When a moderator accepts/rejects a submission, we serialize the decision into deterministic UTF-8 bytes (
payload_canonical_string), hash it with SHA-256, encode the digest as base58, and write it to Solana inside an SPL Memo v2 transaction. - We store the bytes. The exact bytes we hashed are stored alongside the decision in our database. Anyone can read them and recompute the hash in any language.
- You compare three values. Database hash, your independently-recomputed hash, and the hash inside the on-chain memo. If all three match, the decision is authentic and timestamped.
The on-chain memo format is
AVOID.NET|v1|h:<b58-sha256>|d:<id>|t:<iso>Find a signature on any investigation page's decision log, or run python -m src.verify_decision --signature <sig> for a CLI check.
Decision
review · HECO Bridge & HTX Exchange Hack
- Sequence
- #2
- Score
- 8 → 8 (0)
- Cluster
- mainnet-beta
- Slot
- 424319668
- Off-chain at
- 2026-06-04T20:53:33.917Z
- Anchored at
- —
- Block time
- —
Independent verification
- 1. Database (off-chain)
- D5GmxQc6YeXhf5NepdoNr9bkSVYYkzLLxXxEQVrYNmVA
- 2. Recomputed (your browser)
- computing…
- 3. On-chain (Solana memo)
- fetching…
Canonical bytes hashed (1261 chars)
{"actor":"reviewer","decided_at":"2026-06-04T20:53:33.842Z","decision":"review","investigation_id":"1eeadbe2-acbf-4170-a5c4-155c66503ee2","new_score":8,"page_slug":"heco-bridge-htx","prev_score":8,"reason":"The page is well-sourced and generally accurate. Core claims about hack amounts, timing, wallet addresses, Lazarus Group attribution, laundering activity, and the HECO Chain shutdown are confirmed by credible primary and secondary sources. Key issues: (1) the section describing Tornado Cash as 'sanctioned' is accurate for the 2024 context but readers in 2025+ should know sanctions were lifted in March 2025; (2) the SEC litigation section is stale — the case settled in March 2026; (3) the same wallet address (0xe47e6dA16Bb83EB0FD26b3F29b15CE8Fab089B9e) is listed twice in Section 2, once as 'main exploiter' and again as 'separate holding address,' which is an internal factual inconsistency; (4) two cited URLs (CoinTelegraph $145M article and The Block $145M article) returned 404/403, reducing direct verifiability of those specific figures, though the figures are corroborated by multiple other sources.","score_delta":0,"sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}