Audit log

Every state-changing event for Vesper Finance: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-28 17:44:13Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 422,768,068

   sig

   2LVoxxFxJFxN…9ccwFeowcopyexplorer ↗

   hash

   ACcCVcgHg6Ya…fvcLpd78copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (5468 B) ▸

   {"actor":"system:backfill","investigation_id":"d91b85b1-e27d-487b-8210-6e5276e87204","kind":"publish","page_slug":"vesper-finance","published_at":"2026-05-28T17:44:13.475Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Vesper Finance","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://cointelegraph.com/news/jeff-garzik-s-defi-protocol-vesper-finance-tops-1b-tvl-in-six-weeks","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/vesper","type":"other","url":""},{"credibility":3,"name":"https://docs.vesper.finance/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://cointelegraph.com/news/jeff-garzik-segwit2x-bitcoin-upgrade-comments-spark-trolling-campaign","type":"other","url":""},{"credibility":3,"name":"https://www.ccn.com/segwit2x-dev-jeff-garzik-expelled-from-bitcoin-core-repository/","type":"other","url":""},{"credibility":3,"name":"https://www.crunchbase.com/person/jeff-garzik","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.web3isgoinggreat.com/?id=2021-11-02-0","type":"other","url":""},{"credibility":3,"name":"https://medium.com/vesperfinance/on-the-vesper-lend-beta-rari-fuse-pool-23-exploit-9043ccd40ac9","type":"other","url":""},{"credibility":3,"name":"https://www.quadrigainitiative.com/hackfraudscam/vesperfinanceoracleattack.php","type":"other","url":""},{"credibility":3,"name":"https://fairyproof.substack.com/p/preliminary-analysis-of-attack-on-vesper-lend-beta-31844b6c274c","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://gov.vesper.finance/t/discussion-sonne-exploit-remediation/158","type":"other","url":""},{"credibility":3,"name":"https://x.com/VesperFi/status/1794100976355283022","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/immunefi/vesper-rebase-vulnerability-postmortem-and-bug-bounty-55354a49d184","type":"other","url":""},{"credibility":3,"name":"https://immunefi.com/bug-bounty/vesper/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coingecko.com/en/coins/vesper-finance","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/currencies/vesper/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://docs.vesper.finance/reports/smart-contract-audits","type":"other","url":""},{"credibility":3,"name":"https://immunefi.com/bug-bounty/vesper/","type":"other","url":""},{"credibility":3,"name":"https://docs.vesper.finance/vesper-pools-and-strategies/risk-framework","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://defillama.com/protocol/vesper","type":"other","url":""},{"credibility":3,"name":"https://medium.com/vesperfinance/vesper-performance-report-november-2024-90c80c24f7a5","type":"other","url":""},{"credibility":3,"name":"https://www.coingecko.com/en/coins/vesper-finance","type":"other","url":""}]}],"sources_used":[],"summary":"Vesper Finance is an Ethereum-based DeFi yield aggregator co-founded by former Bitcoin Core developer Jeff Garzik that launched in early 2021 and briefly exceeded $1 billion in TVL. The protocol suffered a confirmed $3.37 million oracle manipulation exploit on Rari Fuse Pool #23 in November 2021, and was indirectly exposed to a May 2024 Sonne Finance exploit that required treasury remediation. Vesper remains operational as of 2025 with approximately $48–55 million TVL, though its native VSP token has lost over 99% of its all-time-high value.","timeline":[{"date":"2021-02-01","event":"Vesper Finance launches beta on Ethereum, co-founded by Jeff Garzik, Matthew Roszak, and Jordan Kruger.","source":""},{"date":"2021-03-01","event":"Vesper Finance surpasses $1 billion in TVL within approximately six weeks of launch.","source":""},{"date":"2021-11-02","event":"Oracle manipulation attack on Rari Fuse Pool #23 (Vesper Lend Beta) results in $3.37 million stolen. Attacker used Tornado Cash and Uniswap v3 TWAP manipulation. Attacker address: 0xa3f447feb0b2bddc50a44ccd6f412a5f98619264.","source":""},{"date":"2023-03-16","event":"Dedaub team discovers rebase vulnerability in Vesper's yield rebalance mechanism. Vulnerability is disclosed responsibly, patched before any exploitation, and a bug bounty is paid.","source":""},{"date":"2023-01-01","event":"Vesper joins Immunefi with a $200,000 maximum bug bounty program for smart contract vulnerabilities.","source":""},{"date":"2024-05-14","event":"Sonne Finance exploit (~$20 million total) indirectly affects three Vesper Optimism pools (OP, USDC, wstETH), restricting withdrawals.","source":""},{"date":"2024-05-21","event":"Vesper governance approves $156,833 treasury allocation to remediate Sonne-related pool debt; all Optimism pools restored to operation.","source":""},{"date":"2024-08-01","event":"Vesper DAO votes to restart VSP buyback mechanisms and transitions from vVSP to locked VSP tokenomics model.","source":""},{"date":"2025-11-01","event":"Vesper treasury reaches approximately $460,649; protocol reports TVL near $55 million, highest since 2022.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 895d2cfc-7d7b-4f9d-a35b-4d4d13405d2acopy
2. #2rescoreby systemsystem

   2026-10-10 18:47:34Z
   Score: 38 → 62 (+24)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 38 → 62. Problems weighed by who is responsible: incidents the subject suffered −6.4, problems around the subject, caused by others −4.8; legitimacy credit long-running +8.
   anchoranchored

   chain

   ●mainnet-betaslot 455,367,469

   sig

   5whBWmJ86vsF…Dfic5Jjkcopyexplorer ↗

   hash

   3YFsqyqePFti…5RHpKgjYcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (611 B) ▸

   {"actor":"system","decided_at":"2026-10-10T18:47:34.089Z","decision":"rescore","investigation_id":"d91b85b1-e27d-487b-8210-6e5276e87204","new_score":62,"page_slug":"vesper-finance","prev_score":38,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 38 → 62. Problems weighed by who is responsible: incidents the subject suffered −6.4, problems around the subject, caused by others −4.8; legitimacy credit long-running +8.","score_delta":24,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision bd467f21-621d-4e93-a722-b952efe6ef22copy
3. #3reviewby reviewerreviewer

   2026-11-02 10:21:44Z
   Score: 62 → 62 (no score change)
   The exploit narrative (Nov 2021, Tornado Cash, attacker address) matches Fairyproof. The Dedaub rebase vulnerability and Immunefi bounty are dated 2023 on the page but were 2021 per Immunefi. The Sonne remediation is a governance discussion, not a confirmed approval. Market and TVL figures could not be verified because the sources were blocked. Vesper appears to still be operating.
   anchoranchored

   chain

   ●mainnet-betaslot 464,459,949

   sig

   5oDwzpM67FrU…fuRFv8XTcopyexplorer ↗

   hash

   8hH9dEGds7vG…PJhmDwiecopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1233 B) ▸

   {"actor":"reviewer","artifact_identity":"3626b18a04da02cf5705fb1196ae3aa3","blocked_count":1,"decided_at":"2026-11-02T10:21:44.296Z","decision":"review","disputed_pct":0.6,"findings_hash":"NNRMeMfNtQBzAvDfrJSB3zWZz5KGU7LybispLGVq4y2","investigation_id":"d91b85b1-e27d-487b-8210-6e5276e87204","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":62,"page_content_hash":"56fdf3c74c94d1a707f46e89b5cecd97375bff5aa9ee2f1108f6fe6c4ba26f32","page_slug":"vesper-finance","prev_score":62,"reason":"The exploit narrative (Nov 2021, Tornado Cash, attacker address) matches Fairyproof. The Dedaub rebase vulnerability and Immunefi bounty are dated 2023 on the page but were 2021 per Immunefi. The Sonne remediation is a governance discussion, not a confirmed approval. Market and TVL figures could not be verified because the sources were blocked. Vesper appears to still be operating.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":5,"sequence_num":3,"subject_status":"operating","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 5d98aafa-2193-47da-904a-897b06991d0dcopy
4. #4review reviseby judgejudge

   2026-11-02 10:21:44Z
   Score: 62 → 62 (no score change)
   Three of the five checkable claims (60%) were disputed: the Dedaub rebase vulnerability and the Immunefi bounty are dated 2023 on the page, but Immunefi's own write-up places them in 2021 (claim_findings[0], [1], [2]). The Sonne remediation is described as a governance approval, yet the cited thread is only a discussion (claim_findings[3]). The core November 2021 exploit narrative was confirmed against an independent source (claim_findings[4]), and no shutdown or omission was found. Because the errors are mostly date mistakes rather than false core allegations, and the reviewer's confidence is moderate, the page is revised rather than denied. One TVL claim could not be checked because the source blocked the reviewer, which is a coverage limit rather than a defect of the page.
   anchoranchored

   chain

   ●mainnet-betaslot 464,459,954

   sig

   5j6qy4UGM5pt…Jo9zZqy7copyexplorer ↗

   hash

   EhomAn59dSV1…TwZ4NHedcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (2402 B) ▸

   {"actor":"judge","artifact_identity":"3626b18a04da02cf5705fb1196ae3aa3","band_override":{"actual_delta":-28,"actual_verdict":"review_revise","disputed_pct":0.6,"expected_delta_range":[-50,-30],"expected_verdict":"review_deny","rationale":"Three of the five checkable claims (60%) were disputed: the Dedaub rebase vulnerability and the Immunefi bounty are dated 2023 on the page, but Immunefi's own write-up places them in 2021 (claim_findings[0], [1], [2]). The Sonne remediation is described as a governance approval, yet the cited thread is only a discussion (claim_findings[3]). The core November 2021 exploit narrative was confirmed against an independent source (claim_findings[4]), and no shutdown or omission was found. Because the errors are mostly date mistakes rather than false core allegations, and the reviewer's confidence is moderate, the page is revised rather than denied. One TVL claim could not be checked because the source blocked the reviewer, which is a coverage limit rather than a defect of the page."},"blocked_count":1,"decided_at":"2026-11-02T10:21:44.296Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.6,"investigation_id":"d91b85b1-e27d-487b-8210-6e5276e87204","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":62,"page_slug":"vesper-finance","prev_score":62,"reason":"Three of the five checkable claims (60%) were disputed: the Dedaub rebase vulnerability and the Immunefi bounty are dated 2023 on the page, but Immunefi's own write-up places them in 2021 (claim_findings[0], [1], [2]). The Sonne remediation is described as a governance approval, yet the cited thread is only a discussion (claim_findings[3]). The core November 2021 exploit narrative was confirmed against an independent source (claim_findings[4]), and no shutdown or omission was found. Because the errors are mostly date mistakes rather than false core allegations, and the reviewer's confidence is moderate, the page is revised rather than denied. One TVL claim could not be checked because the source blocked the reviewer, which is a coverage limit rather than a defect of the page.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":5,"sequence_num":4,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision aab2e8f5-2031-48b8-9706-f05d76cf768bcopy
5. #5rescoreby systemsystem

   2026-11-02 10:21:45Z
   Score: 62 → 63 (+1)
   Recalculated after the fact-check of 2026-11-02. Rescored under Scoring v2, the published formula (avoid.net/scoring): 62 → 63. Problems weighed by who is responsible: incidents the subject suffered −6.4, problems around the subject, caused by others −4; legitimacy credit long-running +8; 1 section(s) set aside until a failed fact-check is resolved.
   anchoranchored

   chain

   ●mainnet-betaslot 464,459,960

   sig

   3YaE4sLwXno1…hwQB8BvDcopyexplorer ↗

   hash

   6bcF31RTb1Mg…Kpa67Vnbcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (719 B) ▸

   {"actor":"system","decided_at":"2026-11-02T10:21:44.296Z","decision":"rescore","investigation_id":"d91b85b1-e27d-487b-8210-6e5276e87204","new_score":63,"page_slug":"vesper-finance","prev_score":62,"reason":"Recalculated after the fact-check of 2026-11-02. Rescored under Scoring v2, the published formula (avoid.net/scoring): 62 → 63. Problems weighed by who is responsible: incidents the subject suffered −6.4, problems around the subject, caused by others −4; legitimacy credit long-running +8; 1 section(s) set aside until a failed fact-check is resolved.","score_delta":1,"score_model":"v2","sequence_num":5,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision d110706a-07cf-40aa-b329-04e0a12db046copy