Audit log

Every state-changing event for Wise Lending V2: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-29 15:54:32Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 422,969,568

   sig

   cwWm9QUW2NHV…6cxi4VVQcopyexplorer ↗

   hash

   XjLtCCFQqFp6…E9TaMoZZcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (5102 B) ▸

   {"actor":"system:backfill","investigation_id":"7bbe4d9d-74e7-4ff7-b64b-d7a630072930","kind":"publish","page_slug":"wise-lending-v2","published_at":"2026-05-29T15:54:32.049Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Wise Lending V2","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://wiselending.com/","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/wise-lending-v2","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://blog.solidityscan.com/wise-lending-hack-analysis-f652f389e397","type":"other","url":""},{"credibility":3,"name":"https://medium.com/@astrasec/wiselending-hack-root-cause-analysis-1a2762f52298","type":"other","url":""},{"credibility":3,"name":"https://www.fxstreet.com/cryptocurrencies/news/wise-lending-market-exploited-for-177-eth-in-a-flash-loan-attack-202401130252","type":"other","url":""},{"credibility":3,"name":"https://coincodecap.com/wise-lending-faces-440k-loss-in-suspected-flash-loan-exploit-of-crypto-assets","type":"other","url":""},{"credibility":3,"name":"https://www.infect3d.xyz/blog/wise-lending-post-mortem","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://cointelegraph.com/news/wise-lending-drained-440k-crypto-apparent-flash-loan-exploit","type":"other","url":""},{"credibility":3,"name":"https://coincodecap.com/wise-lending-faces-440k-loss-in-suspected-flash-loan-exploit-of-crypto-assets","type":"other","url":""},{"credibility":3,"name":"https://cryptorank.io/news/feed/62124-wise-lending-loses-400000-flash-loan-attack","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://code4rena.com/reports/2024-02-wise-lending","type":"other","url":""},{"credibility":3,"name":"https://code4rena.com/audits/2024-02-wise-lending","type":"other","url":""},{"credibility":3,"name":"https://github.com/code-423n4/2024-02-wise-lending","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://blog.solidityscan.com/wise-lending-hack-analysis-f652f389e397","type":"other","url":""},{"credibility":3,"name":"https://medium.com/@astrasec/wiselending-hack-root-cause-analysis-1a2762f52298","type":"other","url":""},{"credibility":3,"name":"https://www.infect3d.xyz/blog/wise-lending-post-mortem","type":"other","url":""},{"credibility":3,"name":"https://code4rena.com/reports/2024-02-wise-lending","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://defillama.com/protocol/wise-lending-v2","type":"other","url":""},{"credibility":3,"name":"https://code4rena.com/reports/2024-02-wise-lending","type":"other","url":""},{"credibility":3,"name":"https://cryptorank.io/news/feed/62124-wise-lending-loses-400000-flash-loan-attack","type":"other","url":""},{"credibility":3,"name":"https://coinpaper.com/3049/major-incidents-from-last-week-wise-lending-exploit-and-xai-token-rug-pull","type":"other","url":""}]}],"sources_used":[],"summary":"Wise Lending V2 is a decentralized lending and yield-farm aggregator protocol deployed on Ethereum and Arbitrum that allows users to supply crypto assets and earn variable yields. The protocol suffered two confirmed exploits: a price manipulation attack in October 2023 that caused approximately $260,000 in losses, followed by a more severe flash loan and share-inflation attack on January 12, 2024 that drained approximately $464,000. The January 2024 attack exploited a precision flaw in the protocol's ERC-4626-style share accounting logic, and a subsequent Code4rena audit in February 2024 identified 5 high-severity and 17 medium-severity vulnerabilities in the codebase.","timeline":[{"date":"2023-10-13","event":"Wise Lending suffers its first confirmed exploit — a price manipulation attack — resulting in approximately $260,000 in losses.","source":""},{"date":"2024-01-12","event":"Wise Lending V2 exploited via flash loan and ERC-4626 share inflation attack. Approximately 177 ETH (~$464,000) drained from the PLP-stETH-Dec2025 pool. Attacker contract: 0x91c49cc7fbfe8f70aceeb075952cd64817f9d82c. Exploit first reported on-chain by researcher Spreek.","source":""},{"date":"2024-02-21","event":"Code4rena competitive audit of Wise Lending V2 begins, covering 44 smart contracts and 6,326 lines of Solidity.","source":""},{"date":"2024-03-11","event":"Code4rena audit concludes. Report identifies 5 HIGH-severity and 17 MEDIUM-severity vulnerabilities.","source":""},{"date":"2024-03-11","event":"Code4rena audit report for Wise Lending V2 published, detailing 22 unique vulnerabilities in the protocol codebase.","source":""},{"date":"2026-02-28","event":"A $66,000 flash loan exploit affecting Wise Lending V2 on both Arbitrum and Ethereum chains is recorded by DeFiLlama's hack tracker. Independent news confirmation was not located at time of investigation.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 2bbf992b-8721-4470-b394-8943fc13f19fcopy
2. #2rescoreby systemsystem

   2026-10-10 18:46:16Z
   Score: 38 → 52 (+14)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 38 → 52. Problems weighed by who is responsible: incidents the subject suffered −9.6, concerns that are not fraud −6.4, problems around the subject, caused by others −0.8; legitimacy credit long-running +4.
   anchoranchored

   chain

   ●mainnet-betaslot 455,365,994

   sig

   3WZv8Qpb279c…tRqbCpEdcopyexplorer ↗

   hash

   DJZZSpD6xwkW…bXqfg7yQcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (646 B) ▸

   {"actor":"system","decided_at":"2026-10-10T18:46:16.537Z","decision":"rescore","investigation_id":"7bbe4d9d-74e7-4ff7-b64b-d7a630072930","new_score":52,"page_slug":"wise-lending-v2","prev_score":38,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 38 → 52. Problems weighed by who is responsible: incidents the subject suffered −9.6, concerns that are not fraud −6.4, problems around the subject, caused by others −0.8; legitimacy credit long-running +4.","score_delta":14,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision d8e85b74-e783-40e0-8875-987be16aff44copy
3. #3reviewby reviewerreviewer

   2026-11-02 03:30:54Z
   Score: 52 → 52 (no score change)
   The January 2024 exploit (date, time, amount range, Spreek as reporter) and the Code4rena audit facts check out. The October 2023 attack, the 'second attack within six months' quote, the $720k total and the ZachXBT attribution could not be found in any source, and several are presented as confirmed. The page also says the protocol continues to operate, while DeFiLlama marks it deprecated with zero active loans. Direct DeFiLlama checks were blocked.
   anchoranchored

   chain

   ●mainnet-betaslot 464,344,824

   sig

   3UgkD6YYZRxR…udujv5mVcopyexplorer ↗

   hash

   Bvjxeqy5sMnd…z5dTr1mGcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1303 B) ▸

   {"actor":"reviewer","artifact_identity":"8267f8c33777625249a201add5764715","decided_at":"2026-11-02T03:30:54.892Z","decision":"review","disputed_pct":0.5,"findings_hash":"2eKFTTxpSnb3n8E26Bhx6W217zjdAHiCLzPCsSx6yVWC","investigation_id":"7bbe4d9d-74e7-4ff7-b64b-d7a630072930","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":52,"omissions":{"material":1,"total":2},"page_content_hash":"b1a188f51b10d53cff62fbd30fb5068578b2550aea65ec51d88989e3bd8b644c","page_slug":"wise-lending-v2","prev_score":52,"reason":"The January 2024 exploit (date, time, amount range, Spreek as reporter) and the Code4rena audit facts check out. The October 2023 attack, the 'second attack within six months' quote, the $720k total and the ZachXBT attribution could not be found in any source, and several are presented as confirmed. The page also says the protocol continues to operate, while DeFiLlama marks it deprecated with zero active loans. Direct DeFiLlama checks were blocked.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"sequence_num":3,"subject_status":"shut_down","subject_status_contradicts_page":true,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision f1245beb-28c9-40cf-b939-01fb86f9cd92copy
4. #4review reviseby judgejudge

   2026-11-02 03:30:55Z
   Score: 52 → 52 (no score change)
   Of 10 checked claims, 5 (50%) could not be verified, which places the page in the significant-issues band. The core allegation of an October 2023 exploit, the 'second attack within six months' quote, the $720,000+ total (claim_findings[0], [1], [5]) and the ZachXBT attribution (claim_findings[6]) were not found in any cited or searched source. The claim that the protocol 'continues to operate' is stale because DeFiLlama lists it as deprecated (claim_findings[8], subject_status). The January 2024 exploit and the Code4rena audit facts were confirmed, so the page is revised rather than denied. The reviewer's confidence is moderate (0.6), and DeFiLlama could not be fetched directly.
   anchoranchored

   chain

   ●mainnet-betaslot 464,344,827

   sig

   5X5fU9wixEzP…qeAeu283copyexplorer ↗

   hash

   BTzMvpanoAUd…zuFCf4fAcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1717 B) ▸

   {"actor":"judge","artifact_identity":"8267f8c33777625249a201add5764715","band_override":null,"decided_at":"2026-11-02T03:30:54.892Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.5,"investigation_id":"7bbe4d9d-74e7-4ff7-b64b-d7a630072930","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":52,"page_slug":"wise-lending-v2","prev_score":52,"reason":"Of 10 checked claims, 5 (50%) could not be verified, which places the page in the significant-issues band. The core allegation of an October 2023 exploit, the 'second attack within six months' quote, the $720,000+ total (claim_findings[0], [1], [5]) and the ZachXBT attribution (claim_findings[6]) were not found in any cited or searched source. The claim that the protocol 'continues to operate' is stale because DeFiLlama lists it as deprecated (claim_findings[8], subject_status). The January 2024 exploit and the Code4rena audit facts were confirmed, so the page is revised rather than denied. The reviewer's confidence is moderate (0.6), and DeFiLlama could not be fetched directly.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"sequence_num":4,"severity_override":{"applied":true,"band":"significant","from_band":"significant","reason":"The review reports a material omission and says the page contradicts the subject's current status: DeFiLlama labels the protocol deprecated with zero active loans, while the page says it continues to operate. This supports at least the significant band, which matches the percentage band."},"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision bbb946ba-fb84-4d0f-9fa6-3dcc4eb6e7e0copy
5. #5rescoreby systemsystem

   2026-11-02 03:30:56Z
   Score: 52 → 59 (+7)
   Recalculated after the fact-check of 2026-11-02. Rescored under Scoring v2, the published formula (avoid.net/scoring): 52 → 59. Problems weighed by who is responsible: incidents the subject suffered −6.4, concerns that are not fraud −3.2, problems around the subject, caused by others −0.8; legitimacy credit long-running +4; 2 section(s) set aside until a failed fact-check is resolved.
   anchoranchored

   chain

   ●mainnet-betaslot 464,344,832

   sig

   3hwcJjqPU6jk…pHcSiV8qcopyexplorer ↗

   hash

   2k8TL45GkK6W…vY6eeEuQcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (756 B) ▸

   {"actor":"system","decided_at":"2026-11-02T03:30:54.892Z","decision":"rescore","investigation_id":"7bbe4d9d-74e7-4ff7-b64b-d7a630072930","new_score":59,"page_slug":"wise-lending-v2","prev_score":52,"reason":"Recalculated after the fact-check of 2026-11-02. Rescored under Scoring v2, the published formula (avoid.net/scoring): 52 → 59. Problems weighed by who is responsible: incidents the subject suffered −6.4, concerns that are not fraud −3.2, problems around the subject, caused by others −0.8; legitimacy credit long-running +4; 2 section(s) set aside until a failed fact-check is resolved.","score_delta":7,"score_model":"v2","sequence_num":5,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision f972d73b-a30d-4e40-bcce-0c1094b803c3copy