Verify a decision
Every moderation decision on AVOID.NET is anchored to the Solana blockchain. You don't have to trust us — you can verify cryptographically that we committed to a verdict at a specific moment and have not rewritten it.
How verification works
- We commit. When a moderator accepts/rejects a submission, we serialize the decision into deterministic UTF-8 bytes (
payload_canonical_string), hash it with SHA-256, encode the digest as base58, and write it to Solana inside an SPL Memo v2 transaction. - We store the bytes. The exact bytes we hashed are stored alongside the decision in our database. Anyone can read them and recompute the hash in any language.
- You compare three values. Database hash, your independently-recomputed hash, and the hash inside the on-chain memo. If all three match, the decision is authentic and timestamped.
The on-chain memo format is
AVOID.NET|v1|h:<b58-sha256>|d:<id>|t:<iso>Find a signature on any investigation page's decision log, or run python -m src.verify_decision --signature <sig> for a CLI check.
Decision
publish · UPCX
- Sequence
- #1
- Score
- →
- Cluster
- mainnet-beta
- Slot
- 422792435
- Off-chain at
- 2026-05-28T20:25:00.916Z
- Anchored at
- —
- Block time
- —
Independent verification
- 1. Database (off-chain)
- 9jxz8Togm5LV9MDYXTWBQJR9njrgR4WCEaQnSH2mSw6C
- 2. Recomputed (your browser)
- computing…
- 3. On-chain (Solana memo)
- fetching…
Canonical bytes hashed (4139 chars)
{"actor":"system:backfill","investigation_id":"92255638-c0e0-4934-b6c1-4fba5bd21afc","kind":"publish","page_slug":"upcx","published_at":"2026-05-28T20:25:00.853Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"UPCX","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.globenewswire.com/news-release/2025/03/21/3047070/0/en/UPCX-From-Japanese-Compliance-to-Global-Expansion.html","type":"other","url":""},{"credibility":3,"name":"https://www.globenewswire.com/news-release/2025/03/17/3043770/0/en/UPCX-UPC-to-Launch-on-Japanese-Crypto-Trading-Platform-BitTrade.html","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-upcx-hack-april-2025","type":"other","url":""},{"credibility":3,"name":"https://cryptoslate.com/upcx-halts-transactions-after-70-million-hack-exposes-vulnerabilities/","type":"other","url":""},{"credibility":3,"name":"https://coinjournal.net/news/blockchain-payments-platform-upcx-exploited-for-70m/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-upcx-hack-april-2025","type":"other","url":""},{"credibility":3,"name":"https://skynet.certik.com/projects/upcx","type":"other","url":""},{"credibility":3,"name":"https://blog.ueex.com/crypto-hacks/upcx-hack/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.globenewswire.com/news-release/2025/03/17/3043770/0/en/UPCX-UPC-to-Launch-on-Japanese-Crypto-Trading-Platform-BitTrade.html","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/academy/article/hacker-steals-dollar70-million-in-upc-tokens-after-gaining-control-of-upcx-smart-contract","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.globenewswire.com/news-release/2025/03/21/3047070/0/en/UPCX-From-Japanese-Compliance-to-Global-Expansion.html","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.globenewswire.com/news-release/2025/07/15/3115534/0/en/UPCX-Staking-Surpasses-975-000-Tokens-as-Web3-Payment-Ecosystem-Accelerates-Expansion.html","type":"other","url":""},{"credibility":3,"name":"https://finance.yahoo.com/news/hacker-steals-70-million-upc-214926542.html","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://skynet.certik.com/projects/upcx","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-upcx-hack-april-2025","type":"other","url":""}]}],"sources_used":[],"summary":"UPCX is a blockchain payment protocol that suffered a $70 million exploit on April 1, 2025, when an attacker compromised an administrative private key and used it to push a malicious smart contract upgrade, draining 18.4 million UPC tokens from management accounts. The attack was enabled by the absence of multisig controls on privileged protocol functions, despite having undergone CertiK and Cyberscope audits that did not catch the operational key management risk. Despite listing on a Japanese FSA-licensed exchange just 11 days prior, no recovery of stolen funds was reported.","timeline":[{"date":"2025-03-17","event":"UPCX announces listing on BitTrade, a Japanese FSA-licensed exchange.","source":""},{"date":"2025-03-27","event":"UPCX UPC token goes live on BitTrade exchange in Japan.","source":""},{"date":"2025-04-01","event":"Attacker compromises admin private key, pushes malicious ProxyAdmin upgrade, drains ~18.4M UPC (~$70M) from three management accounts.","source":""},{"date":"2025-04-01","event":"Cyvers detects the exploit; UPCX halts all transactions and announces investigation.","source":""},{"date":"2025-07-15","event":"UPCX press release reports staking activity resuming, surpassing 975,000 tokens. Stolen funds unrecovered.","source":""}]},"v":1}