Audit log

Every state-changing event for XBridge: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-28 04:23:34Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 422,646,766

   sig

   2dS1EFqok4ds…Ns9aLmkKcopyexplorer ↗

   hash

   7RWQiJiw8j11…Hj9KKdY9copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (4929 B) ▸

   {"actor":"system:backfill","investigation_id":"533ef894-9f56-462a-b4b1-0ba74465f47c","kind":"publish","page_slug":"xbridge","published_at":"2026-05-28T04:23:34.183Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"XBridge","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/neptune-mutual/understanding-the-xbridge-exploit-d3d56c0dc19c","type":"other","url":""},{"credibility":3,"name":"https://www.cryptotimes.io/2024/04/24/saitachains-xbridge-experienced-a-security-breach/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.bnnbloomberg.ca/business/company-news/2024/10/09/crypto-firms-charged-with-market-manipulation-in-us-sting/","type":"other","url":""},{"credibility":3,"name":"https://www.justice.gov/usao-ma/pr/eighteen-individuals-and-entities-charged-international-operation-targeting-widespread","type":"other","url":""},{"credibility":3,"name":"https://www.sec.gov/enforcement-litigation/litigation-releases/lr-26155","type":"other","url":""},{"credibility":3,"name":"https://www.mlex.com/mlex/articles/2347836/crypto-chief-kohli-in-uk-court-for-us-extradition-bid-over-alleged-saitama-scam","type":"other","url":""},{"credibility":3,"name":"https://www.mlex.com/mlex/articles/2409142/saitama-crypto-chief-kohli-seeks-dismissal-of-us-fraud-manipulation-charges","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://academy.suncrypto.in/suncrypto-suspends-trading-for-saitachain/","type":"other","url":""},{"credibility":3,"name":"https://www.cryptotimes.io/2024/04/24/saitachains-xbridge-experienced-a-security-breach/","type":"other","url":""},{"credibility":3,"name":"https://insidebitcoins.com/news/fbi-sting-created-nexfundai-crypto-token-to-bring-down-fraud-scheme","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/neptune-mutual/understanding-the-xbridge-exploit-d3d56c0dc19c","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/neptune-mutual/understanding-the-xbridge-exploit-d3d56c0dc19c","type":"other","url":""},{"credibility":3,"name":"https://home.treasury.gov/news/press-releases/jy0916","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://coinmarketcap.com/currencies/saitama-inu-new/","type":"other","url":""},{"credibility":3,"name":"https://academy.suncrypto.in/suncrypto-suspends-trading-for-saitachain/","type":"other","url":""},{"credibility":3,"name":"https://www.mlex.com/mlex/articles/2347836/crypto-chief-kohli-in-uk-court-for-us-extradition-bid-over-alleged-saitama-scam","type":"other","url":""}]}],"sources_used":[],"summary":"XBridge is a cross-chain bridge protocol built by SaitaChain (formerly Saitama Inu), designed to connect Ethereum Mainnet and BNB Chain. On April 24, 2024, the protocol suffered a $1.44 million exploit caused by a critical access-control vulnerability in its smart contracts, with stolen funds subsequently routed through Tornado Cash. The parent company, Saitama LLC, faces U.S. federal charges of wire fraud and market manipulation, with CEO Manpreet Kohli arrested in the UK in October 2024 and facing extradition proceedings.","timeline":[{"date":"2021-08","event":"Saitama LLC incorporated in Massachusetts; launches SAITAMA meme token with alleged undisclosed insider sell-offs and wash trading.","source":""},{"date":"2023-01","event":"SaitaChain rebrands from Saitama Inu ecosystem; XBridge launched as cross-chain bridge product connecting Ethereum Mainnet and BNB Chain.","source":""},{"date":"2024-04-24","event":"XBridge exploited on Ethereum and BNB Chain via access-control vulnerability; $1.44 million stolen. Attacker address: 0x0cfc28d16d07219249c6d6d6ae24e7132ee4caa7. Approximately $198,604 laundered through Tornado Cash.","source":""},{"date":"2024-10-07","event":"Saitama LLC CEO Manpreet Singh Kohli arrested in the United Kingdom ahead of federal charges.","source":""},{"date":"2024-10-09","event":"U.S. DOJ unseals charges against 18 individuals and entities including Saitama LLC for wire fraud, market manipulation, and wash trading. SEC files civil complaint. SaitaChain named by FBI as a project under investigation.","source":""},{"date":"2024-10-10","event":"Indian exchange SunCrypto suspends trading of STC (SaitaChain Coin) in response to U.S. federal charges.","source":""},{"date":"2025-01","event":"Manpreet Kohli appears in London court for extradition proceedings; hearing adjourned pending trial date.","source":""},{"date":"2025-04","event":"Kohli files motion to dismiss U.S. fraud and market manipulation charges, challenging SEC jurisdiction.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision deb3482d-e44d-403a-bad6-48fcffa96522copy
2. #2rescoreby systemsystem

   2026-10-10 18:40:42Z
   Score: 12 → 42 (+30)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 12 → 42. Problems weighed by who is responsible: the subject's own conduct −16, incidents the subject suffered −9.6, concerns that are not fraud −3.2; legitimacy credit long-running +6.
   anchoranchored

   chain

   ●mainnet-betaslot 455,359,207

   sig

   4Jk6wG3Lbenf…229PWhy9copyexplorer ↗

   hash

   9pmfFCPXnJpF…cFZr4PU8copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (617 B) ▸

   {"actor":"system","decided_at":"2026-10-10T18:40:42.457Z","decision":"rescore","investigation_id":"533ef894-9f56-462a-b4b1-0ba74465f47c","new_score":42,"page_slug":"xbridge","prev_score":12,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 12 → 42. Problems weighed by who is responsible: the subject's own conduct −16, incidents the subject suffered −9.6, concerns that are not fraud −3.2; legitimacy credit long-running +6.","score_delta":30,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 51b50932-7029-4f8d-901a-4676e3cf5c40copy
3. #3reviewby reviewerreviewer

   2026-11-02 03:48:06Z
   Score: 42 → 42 (no score change)
   Most claims could not be checked, because the Medium, Crypto Times and DOJ sources were blocked or empty, and that is not scored against the page. Two findings are firm. The Kohli extradition and dismissal status is out of date: the extradition challenge was rejected in August 2026 and the dismissal bid was rejected. The exploit loss figures do not add up, since $830,920 plus $416,231 is about $1.25M, not $1.44M. The Tornado Cash sanction framing may also be dated. XBridge's own current status could not be established.
   anchoranchored

   chain

   ●mainnet-betaslot 464,349,681

   sig

   5JnavrM8nUaF…dHzj13eUcopyexplorer ↗

   hash

   9r2PcbTCKLGt…wpCbJELtcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1404 B) ▸

   {"actor":"reviewer","artifact_identity":"37e645ba346e13f1f656ab55d60eb8a3","blocked_count":2,"decided_at":"2026-11-02T03:48:06.243Z","decision":"review","disputed_pct":0.375,"findings_hash":"BQGKPQyQuuqafU6JY2LVE8XBYxhyGqps7n6xfMLAmu8d","investigation_id":"533ef894-9f56-462a-b4b1-0ba74465f47c","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":42,"omissions":{"material":1,"total":1},"page_content_hash":"88df7806b809ad106de03f84e0a86339cbf8fc492c86fae75c00c80ef925133f","page_slug":"xbridge","prev_score":42,"reason":"Most claims could not be checked, because the Medium, Crypto Times and DOJ sources were blocked or empty, and that is not scored against the page. Two findings are firm. The Kohli extradition and dismissal status is out of date: the extradition challenge was rejected in August 2026 and the dismissal bid was rejected. The exploit loss figures do not add up, since $830,920 plus $416,231 is about $1.25M, not $1.44M. The Tornado Cash sanction framing may also be dated. XBridge's own current status could not be established.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":8,"sequence_num":3,"subject_status":"unknown","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 031379b3-d554-4f19-b27e-d10dfade65f4copy
4. #4review reviseby judgejudge

   2026-11-02 03:48:06Z
   Score: 42 → 42 (no score change)
   Of 10 claim findings, 2 were left out because the sources refused the reviewer (claim_findings[3], [5]). Of the remaining 8, 3 could not be verified (claim_findings[2], [8], [9]), which gives about 37.5% and the significant band. The page also treats Kohli's extradition and dismissal motion as pending (claim_findings[0], [1]) and omits the August 2026 rulings, and the stated loss figures do not add up (claim_findings[4]). The reviewer's confidence is low (0.4) and the updates rest on secondary sources, so the penalty is set in the lower half of the band and the page is revised rather than denied.
   anchoranchored

   chain

   ●mainnet-betaslot 464,349,686

   sig

   57C4KFEEHzhH…xCrYJoqucopyexplorer ↗

   hash

   APKUMU4L7hrR…xK81zm2Jcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1702 B) ▸

   {"actor":"judge","artifact_identity":"37e645ba346e13f1f656ab55d60eb8a3","band_override":null,"blocked_count":2,"decided_at":"2026-11-02T03:48:06.243Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.375,"investigation_id":"533ef894-9f56-462a-b4b1-0ba74465f47c","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":42,"page_slug":"xbridge","prev_score":42,"reason":"Of 10 claim findings, 2 were left out because the sources refused the reviewer (claim_findings[3], [5]). Of the remaining 8, 3 could not be verified (claim_findings[2], [8], [9]), which gives about 37.5% and the significant band. The page also treats Kohli's extradition and dismissal motion as pending (claim_findings[0], [1]) and omits the August 2026 rulings, and the stated loss figures do not add up (claim_findings[4]). The reviewer's confidence is low (0.4) and the updates rest on secondary sources, so the penalty is set in the lower half of the band and the page is revised rather than denied.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":8,"sequence_num":4,"severity_override":{"applied":true,"band":"significant","from_band":"significant","reason":"The review reports a material omission: the August 2026 UK ruling rejecting Kohli's extradition challenge and the Boston federal court's rejection of his dismissal bid are missing, and the page presents both as pending. The percentage band is already significant, so this confirms that band rather than moving to a harsher one."},"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision b30903a8-bffa-483e-b205-c934772ac231copy
5. #5rescoreby systemsystem

   2026-11-02 03:48:07Z
   Score: 42 → 61 (+19)
   Recalculated after the fact-check of 2026-11-02. Rescored under Scoring v2, the published formula (avoid.net/scoring): 42 → 61. Problems weighed by who is responsible: incidents the subject suffered −9.6; legitimacy credit long-running +6; 3 section(s) set aside until a failed fact-check is resolved.
   anchoranchored

   chain

   ●mainnet-betaslot 464,349,691

   sig

   2Xb4Wfseq5zG…zQma2mDocopyexplorer ↗

   hash

   38LhxCFfVMk3…11W8hXHdcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (663 B) ▸

   {"actor":"system","decided_at":"2026-11-02T03:48:06.243Z","decision":"rescore","investigation_id":"533ef894-9f56-462a-b4b1-0ba74465f47c","new_score":61,"page_slug":"xbridge","prev_score":42,"reason":"Recalculated after the fact-check of 2026-11-02. Rescored under Scoring v2, the published formula (avoid.net/scoring): 42 → 61. Problems weighed by who is responsible: incidents the subject suffered −9.6; legitimacy credit long-running +6; 3 section(s) set aside until a failed fact-check is resolved.","score_delta":19,"score_model":"v2","sequence_num":5,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision a6612b52-8b01-46e4-a4d8-3fa9bb12e5f8copy