Audit log

Every state-changing event for Vulcan Forged: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-25 18:20:06Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 422,120,689

   sig

   3LadJW1Co3hH…jhzV4hGecopyexplorer ↗

   hash

   5RktzUsE5K3E…9bwg4abJcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (6797 B) ▸

   {"actor":"system:backfill","investigation_id":"176142ef-6cc0-4fd2-9c2f-50b62c6e9fc1","kind":"publish","page_slug":"vulcan-forged","published_at":"2026-05-25T18:20:06.884Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Vulcan Forged","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://cryptonews.com/exclusives/jamie-thomson-ceo-of-vulcan-forged-on-the-future-of-blockchain-gaming-and-growing-a-company-from-1-120-employees-ep-205/","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/business/2022/09/21/play-to-earn-gaming-platform-vulcan-forged-raises-8m-in-series-a-funding","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/what-is-vulcan-forged-pyr-and-how-to-make-money-playing-it","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.theblock.co/post/127270/96-private-keys-stolen-from-vulcan-forged-in-140-million-theft","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/88177/hacker-steals-140-million-polygon-gaming-platform-nft-marketplace-vulcan-forged","type":"other","url":""},{"credibility":3,"name":"https://www.venly.io/blog/venly-informs-of-vulcan-forged-hack-with-at-least-96-vulcan-forged-wallets-affected","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/business/2021/12/14/gaming-platform-vulcan-forged-refunds-users-after-140m-hack","type":"other","url":""},{"credibility":3,"name":"https://forkast.news/headlines/vulcan-forged-replaces-token-stolen-hack/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://skynet.certik.com/projects/vulcanforged","type":"other","url":""},{"credibility":3,"name":"https://dappradar.com/blog/vulcan-forged-ecosystem-learns-valuable-lessons-in-recent-hack","type":"other","url":""},{"credibility":3,"name":"https://www.venly.io/blog/venly-informs-of-vulcan-forged-hack-with-at-least-96-vulcan-forged-wallets-affected","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coingecko.com/en/coins/vulcan-forged","type":"other","url":""},{"credibility":3,"name":"https://coincodex.com/crypto/vulcan-forged/","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/88177/hacker-steals-140-million-polygon-gaming-platform-nft-marketplace-vulcan-forged","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/business/2021/12/14/gaming-platform-vulcan-forged-refunds-users-after-140m-hack","type":"other","url":""},{"credibility":3,"name":"https://forkast.news/headlines/vulcan-forged-replaces-token-stolen-hack/","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/business/2022/09/21/play-to-earn-gaming-platform-vulcan-forged-raises-8m-in-series-a-funding","type":"other","url":""},{"credibility":3,"name":"https://skynet.certik.com/projects/vulcanforged","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/vulcan-forged-pyr-rallies-after-virtual-land-sales-and-the-elysium-testnet-launch","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://skynet.certik.com/projects/vulcanforged","type":"other","url":""},{"credibility":3,"name":"https://www.coingecko.com/en/coins/vulcan-forged","type":"other","url":""},{"credibility":3,"name":"https://blog.vulcanforged.com/forge-on-into-2025-a-recap-and-looking-ahead/","type":"other","url":""},{"credibility":3,"name":"https://vulcanforged.com/Home/ComingSoon","type":"other","url":""}]}],"sources_used":[],"summary":"Vulcan Forged is a UK-based blockchain gaming studio and NFT marketplace operating on Polygon and its own Elysium Layer-1 blockchain, best known for VulcanVerse and its native PYR token. In December 2021 the platform suffered one of the largest gaming-sector hacks on record: an attacker exploited Vulcan Forged's servers to extract private keys from 96 semi-custodial wallets, stealing approximately 4.5 million PYR tokens then valued at roughly $140 million. The platform subsequently refunded affected users from its treasury and pledged to migrate to non-custodial wallets, but the incident exposed fundamental centralization and custodial risks in its architecture.","timeline":[{"date":"2019-01-01","event":"Vulcan Forged founded by Jamie Thomson as a small NFT art site, initially with two employees.","source":""},{"date":"2021-05-14","event":"Vulcan Forged listed on CertiK Skynet for security monitoring.","source":""},{"date":"2021-11-30","event":"PYR token reaches all-time high of approximately $41.72.","source":""},{"date":"2021-12-12","event":"Attacker exploits Vulcan Forged servers, obtains Venly credentials, and extracts private keys from 96 MyForge semi-custodial wallets. Approximately 4.5 million PYR (~$140M), ETH, and MATIC are stolen. Venly confirms all export calls originated from Vulcan Forged's own IP address.","source":""},{"date":"2021-12-13","event":"Vulcan Forged publicly discloses the hack. CEO Jamie Thomson confirms the server exploit. PYR drops over 30% within 24 hours, market cap falls from ~$612M to ~$397M.","source":""},{"date":"2021-12-14","event":"Vulcan Forged refunds affected users with PYR and LAVA from the project treasury within approximately 24 hours of disclosure. Platform announces transition to non-custodial wallets.","source":""},{"date":"2022-01-28","event":"Elysium blockchain testnet launched, described as 'the blockchain for Metaverses.'","source":""},{"date":"2022-09-21","event":"Vulcan Forged raises $8 million in a Series A funding round led by SkyBridge Capital, with an option for an additional $33 million.","source":""},{"date":"2023-02-10","event":"CertiK completes a second audit of Vulcan Forged smart contracts, finding zero critical or high-severity findings in the reviewed code. Only 27.49% of codebase covered.","source":""},{"date":"2023-03-06","event":"New Elysium blockchain LAVA token airdropped to wallets following a snapshot from March 1, 2023.","source":""},{"date":"2024-03-01","event":"PYR reaches secondary high of approximately $10.79 during broader crypto market recovery.","source":""},{"date":"2025-06-01","event":"PYR declines to approximately $0.78, representing a greater than 98% decline from all-time high.","source":""},{"date":"2025-11-25","event":"KuCoin removes margin trading access for PYR.","source":""},{"date":"2026-05-01","event":"PYR trading at approximately $0.26, down over 99% from all-time high. Vulcan Forged main website shows 'Coming Soon' page.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision cce13f58-3acf-4aae-be66-56ffab5f9bcbcopy
2. #2rescoreby systemsystem

   2026-10-10 18:44:26Z
   Score: 28 → 61 (+33)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 28 → 61. Problems weighed by who is responsible: concerns that are not fraud −9.6, incidents the subject suffered −3.2, problems around the subject, caused by others −1.6; legitimacy credit long-running +10.
   anchoranchored

   chain

   ●mainnet-betaslot 455,364,088

   sig

   2u5YRv7yaSoi…p4SXGYaTcopyexplorer ↗

   hash

   j8Kjghgc9jtU…Prhy2fYDcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (645 B) ▸

   {"actor":"system","decided_at":"2026-10-10T18:44:26.133Z","decision":"rescore","investigation_id":"176142ef-6cc0-4fd2-9c2f-50b62c6e9fc1","new_score":61,"page_slug":"vulcan-forged","prev_score":28,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 28 → 61. Problems weighed by who is responsible: concerns that are not fraud −9.6, incidents the subject suffered −3.2, problems around the subject, caused by others −1.6; legitimacy credit long-running +10.","score_delta":33,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision ba333897-c441-4278-8905-665162ca06d2copy
3. #3reviewby reviewerreviewer

   2026-10-28 00:46:57Z
   Score: 61 → 61 (no score change)
   The core hack facts (96 wallets, 4.5M PYR, $140M, Venly role, 30% drop, Series A) are confirmed. Problems: the page contradicts itself on headquarters (UK vs Greece), with neither supported; the CertiK figures (81.51% concentration, 27.49% coverage) do not match the cited CertiK page, which shows 86.43% major holding ratio; the Thomson quote is not verbatim. Price-tracker claims and the 2026 website claim could not be checked, and there is no current status source.
   anchoranchored

   chain

   ●mainnet-betaslot 462,278,798

   sig

   4tgxczZWEWKX…HuSohJDjcopyexplorer ↗

   hash

   3tofxCUz3QDH…PFosztnFcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1317 B) ▸

   {"actor":"reviewer","artifact_identity":"5409fcd12a2be126a6c429cad7557be2","blocked_count":2,"decided_at":"2026-10-28T00:46:57.277Z","decision":"review","disputed_pct":0.5,"findings_hash":"Aq8wTyHx97sBJeg2xDW9ftwMRsj4j61iULkBAfDLSsZf","investigation_id":"176142ef-6cc0-4fd2-9c2f-50b62c6e9fc1","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":61,"page_content_hash":"e90e3e59d6c128dd12358b0dc0de048b4e27068dea6f3362dceb4cfb3cbef720","page_slug":"vulcan-forged","prev_score":61,"reason":"The core hack facts (96 wallets, 4.5M PYR, $140M, Venly role, 30% drop, Series A) are confirmed. Problems: the page contradicts itself on headquarters (UK vs Greece), with neither supported; the CertiK figures (81.51% concentration, 27.49% coverage) do not match the cited CertiK page, which shows 86.43% major holding ratio; the Thomson quote is not verbatim. Price-tracker claims and the 2026 website claim could not be checked, and there is no current status source.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":12,"sequence_num":3,"subject_status":"unknown","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision aebdea0a-9417-4223-b9ab-7890e79484f6copy
4. #4review reviseby judgejudge

   2026-10-28 00:46:57Z
   Score: 61 → 61 (no score change)
   Of 14 claims reviewed, 2 price-tracker claims could not be checked because the source blocked the reviewer and were left out of the count. Of the remaining 12, 6 (50%) were disputed or could not be verified: the CertiK concentration figure was disputed (claim_findings[6]), the 27.49% audit-coverage figure was not found on the cited page (claim_findings[7]), the page contradicts itself on headquarters, UK versus Greece, with neither supported (claim_findings[3], [4]), and the 2026 website claim and the ZachXBT claim have no supporting source (claim_findings[12], [13]). The core hack facts (96 wallets, 4.5M PYR, $140M, price drop, Series A) were confirmed by Tier 2 sources, so the penalty sits at the lower end of the significant band. No shutdown, sanction or material omission was reported.
   anchoranchored

   chain

   ●mainnet-betaslot 462,278,803

   sig

   3wwPC2B2LZvp…MtphXiurcopyexplorer ↗

   hash

   EMfu94dHLFbh…atq2KZLScopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1480 B) ▸

   {"actor":"judge","artifact_identity":"5409fcd12a2be126a6c429cad7557be2","band_override":null,"blocked_count":2,"decided_at":"2026-10-28T00:46:57.277Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.5,"investigation_id":"176142ef-6cc0-4fd2-9c2f-50b62c6e9fc1","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":61,"page_slug":"vulcan-forged","prev_score":61,"reason":"Of 14 claims reviewed, 2 price-tracker claims could not be checked because the source blocked the reviewer and were left out of the count. Of the remaining 12, 6 (50%) were disputed or could not be verified: the CertiK concentration figure was disputed (claim_findings[6]), the 27.49% audit-coverage figure was not found on the cited page (claim_findings[7]), the page contradicts itself on headquarters, UK versus Greece, with neither supported (claim_findings[3], [4]), and the 2026 website claim and the ZachXBT claim have no supporting source (claim_findings[12], [13]). The core hack facts (96 wallets, 4.5M PYR, $140M, price drop, Series A) were confirmed by Tier 2 sources, so the penalty sits at the lower end of the significant band. No shutdown, sanction or material omission was reported.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":12,"sequence_num":4,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision ad20d676-d84b-46ea-ae2b-f745082c6153copy