Audit log

Every state-changing event for XT Exchange: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-28 02:27:05Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 422,629,098

   sig

   388sH9FJv7qE…4wSPXpb5copyexplorer ↗

   hash

   Dxnqj9GEeaYs…6yMEjWBbcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (6310 B) ▸

   {"actor":"system:backfill","investigation_id":"1e2ac659-6a87-484f-acda-a0f0d7c781fa","kind":"publish","page_slug":"xt-exchange","published_at":"2026-05-28T02:27:05.450Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"XT Exchange","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://iq.wiki/wiki/xt","type":"other","url":""},{"credibility":3,"name":"https://www.crunchbase.com/person/albin-warin-032c","type":"other","url":""},{"credibility":3,"name":"https://medium.com/@XT_com/web3-tv-interviews-xt-com-ceo-albin-warin-on-crypto-market-and-nfts-at-crypto-expo-dubai-2023-d49552b22615","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.fca.org.uk/news/warnings/xtcom","type":"other","url":""},{"credibility":3,"name":"https://www.vara.ae/en/regulations/regulatory-notices/vara-consumer-and-marketplace-alert-xt/","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/policy/2025/05/30/thailand-to-block-okx-bybit-and-others-citing-lack-of-license","type":"other","url":""},{"credibility":3,"name":"https://fsaseychelles.sc/media-corner/regulatory-updates","type":"other","url":""},{"credibility":3,"name":"https://www.cryptopolitan.com/dubais-regulator-alert-xt-other-entities/","type":"other","url":""},{"credibility":3,"name":"https://beincrypto.com/thailand-sec-blocks-crypto-exchanges/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/business/2024/11/28/crypto-exchange-xt-is-hacked-for-1-7-m","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-xt-exchange-hack-november-2024","type":"other","url":""},{"credibility":3,"name":"https://cer.live/blog/xt-com-hit-by-access-control-exploit-1-7m-lost","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/crypto-exchange-xt-com-withdrawal-halt-1-7-million-hack","type":"other","url":""},{"credibility":3,"name":"https://beincrypto.com/xt-dot-com-hacked-withdrawals-suspended/","type":"other","url":""},{"credibility":3,"name":"https://cryptoslate.com/xt-exchange-assures-users-after-1-7-million-asset-theft-disrupts-services/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://github.com/ccxt/ccxt/issues/18315","type":"other","url":""},{"credibility":3,"name":"https://www.trustpilot.com/review/xt.com","type":"other","url":""},{"credibility":3,"name":"https://www.brokerhivex.com/en/broker-reviews/68bb286d71f3f","type":"other","url":""},{"credibility":3,"name":"https://xtsupport.zendesk.com/hc/en-us/articles/900006675406-XT-s-Risk-Control-Protocol","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://coinpaprika.com/exchanges/xt/","type":"other","url":""},{"credibility":3,"name":"https://www.brokerhivex.com/en/broker-reviews/68bb286d71f3f","type":"other","url":""},{"credibility":3,"name":"https://www.xt.com/en/accounts/proof-of-reserves","type":"other","url":""},{"credibility":3,"name":"https://xtsupport.zendesk.com/hc/en-us/articles/27400354423961-XT-COM-Announcement-on-Reserves-Disclosure","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/policy/2025/05/30/thailand-to-block-okx-bybit-and-others-citing-lack-of-license","type":"other","url":""},{"credibility":3,"name":"https://www.vara.ae/en/regulations/regulatory-notices/vara-consumer-and-marketplace-alert-xt/","type":"other","url":""},{"credibility":3,"name":"https://fsaseychelles.sc/media-corner/regulatory-updates","type":"other","url":""},{"credibility":3,"name":"https://cryptonews.com/reviews/xt-exchange-review/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://t.me/s/investigations","type":"other","url":""},{"credibility":3,"name":"https://x.com/zachxbt","type":"other","url":""}]}],"sources_used":[],"summary":"XT Exchange (XT.com), founded in 2018 and registered in Seychelles, is a centralized cryptocurrency exchange that has been flagged by multiple regulatory authorities — including the UK FCA, Dubai VARA, Thailand SEC, and the Seychelles FSA — for operating without proper licensing. The exchange suffered a $1.7 million hot wallet exploit in November 2024 due to a compromised private key, and has accumulated substantial user complaints alleging unjustified account freezing, asset seizure, and blocked withdrawals. Independent analysis has also raised concerns about inflated trading volumes and inadequate proof-of-reserves transparency.","timeline":[{"date":"2018-01-01","event":"XT.com founded by Weber Woo and Ada Too, registered in Seychelles as Fibtc Ltd","source":""},{"date":"2022-03-01","event":"Albin Warin joins XT.com as Global Ecosystem Director","source":""},{"date":"2023-01-01","event":"Albin Warin becomes CEO of XT.com","source":""},{"date":"2024-01-08","event":"XT.com publishes reserves disclosure claiming approximately $56.22 million in total assets","source":""},{"date":"2024-11-28","event":"$1.7 million stolen from XT.com hot wallets via compromised private key; withdrawals suspended for approximately 12 hours. PeckShield identifies the breach.","source":""},{"date":"2024-11-29","event":"Dubai VARA issues Consumer and Marketplace Alert warning that XT.com is not licensed to provide virtual asset services in Dubai","source":""},{"date":"2025-03-25","event":"UK FCA issues warning that XT.com may be promoting financial services without FCA permission and is not authorized or registered","source":""},{"date":"2025-05-30","event":"Thailand SEC files charges against XT.com with the Economic Crime Suppression Division for operating without a license under the Digital Asset Business Act","source":""},{"date":"2025-06-28","event":"Thailand blocks access to XT.com following SEC enforcement action","source":""},{"date":"2026-04-09","event":"Seychelles FSA issues notice stating XT.com is not linked to any entity licensed or regulated by the FSA under the Virtual Asset Service Providers Act","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision eda24f87-79aa-4a6d-a7f4-cad1dd4a4d26copy
2. #2reviewby reviewerreviewer

   2026-10-27 19:19:35Z
   Score: 22 → 22 (no score change)
   The main regulatory and hack claims (FCA, VARA, Thai SEC, the $1.7M hot wallet theft on 2024-11-28) are confirmed by primary or reputable sources. Weaker points: the hack cause is stated as fact when Halborn says 'most likely'; the 12-hour withdrawal halt, the Seychelles FSA notice date (2026-04-09), the Trustpilot score and the ZachXBT section are not verified; and the timeline treats the Thai block as having occurred when sources only describe it as scheduled. The subject appears still operating. Only a sample of claims was checked, and the user-complaint, volume and PoR sections were not individually verified.
   anchoranchored

   chain

   ●mainnet-betaslot 462,186,571

   sig

   2Rte7w5zBzeB…hgVyUxUucopyexplorer ↗

   hash

   GDkKAuE1NYjg…xa4ZDC4qcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1469 B) ▸

   {"actor":"reviewer","artifact_identity":"db3950763ca4d80913902e4dc6ba305a","blocked_count":1,"decided_at":"2026-10-27T19:19:35.047Z","decision":"review","disputed_pct":0.375,"findings_hash":"7G7uTMu3fytLGCqqp8k9aN8p1XYMxzKc17BRTGMp1R9t","investigation_id":"1e2ac659-6a87-484f-acda-a0f0d7c781fa","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":22,"page_content_hash":"6da5b8990f963365961eb01538962947525eda26b05165f48fab7fce4810def5","page_slug":"xt-exchange","prev_score":22,"reason":"The main regulatory and hack claims (FCA, VARA, Thai SEC, the $1.7M hot wallet theft on 2024-11-28) are confirmed by primary or reputable sources. Weaker points: the hack cause is stated as fact when Halborn says 'most likely'; the 12-hour withdrawal halt, the Seychelles FSA notice date (2026-04-09), the Trustpilot score and the ZachXBT section are not verified; and the timeline treats the Thai block as having occurred when sources only describe it as scheduled. The subject appears still operating. Only a sample of claims was checked, and the user-complaint, volume and PoR sections were not individually verified.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":8,"sequence_num":2,"subject_status":"operating","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision e3185bec-29e5-4cf0-96d7-fce3b94f5944copy
3. #3review reviseby judgejudge

   2026-10-27 19:19:35Z
   Score: 22 → 7 (-15)
   Of 9 claims checked, none were disputed, but 3 of the 8 counted claims (37.5%, excluding one Trustpilot claim the source blocked) could not be verified: the 12-hour withdrawal halt (claim_findings[2]), the Seychelles FSA notice date (claim_findings[6]) and the ZachXBT section (claim_findings[8]), which cites only generic channel and profile URLs. The core allegations were confirmed by primary or reputable sources: the $1.7M hack (claim_findings[0]) and the FCA, VARA and Thai SEC actions (claim_findings[3], [4], [5]). Because the confirmed core and the reviewer's moderate confidence point to a mild penalty, the delta sits at the lighter end of the band. The page also states the hack cause as fact when Halborn says 'most likely' (claim_findings[1]), and describes the Thai block as having happened when sources say it was scheduled.
   anchoranchored

   chain

   ●mainnet-betaslot 462,186,576

   sig

   scp91nT6V4iQ…i4Q2P9Wvcopyexplorer ↗

   hash

   A5KQzkEw1S35…2QDVyhoJcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1521 B) ▸

   {"actor":"judge","artifact_identity":"db3950763ca4d80913902e4dc6ba305a","band_override":null,"blocked_count":1,"decided_at":"2026-10-27T19:19:35.047Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.375,"investigation_id":"1e2ac659-6a87-484f-acda-a0f0d7c781fa","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":7,"page_slug":"xt-exchange","prev_score":22,"reason":"Of 9 claims checked, none were disputed, but 3 of the 8 counted claims (37.5%, excluding one Trustpilot claim the source blocked) could not be verified: the 12-hour withdrawal halt (claim_findings[2]), the Seychelles FSA notice date (claim_findings[6]) and the ZachXBT section (claim_findings[8]), which cites only generic channel and profile URLs. The core allegations were confirmed by primary or reputable sources: the $1.7M hack (claim_findings[0]) and the FCA, VARA and Thai SEC actions (claim_findings[3], [4], [5]). Because the confirmed core and the reviewer's moderate confidence point to a mild penalty, the delta sits at the lighter end of the band. The page also states the hack cause as fact when Halborn says 'most likely' (claim_findings[1]), and describes the Thai block as having happened when sources say it was scheduled.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":-15,"scored_claims":8,"sequence_num":3,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision d2c48885-1f36-4965-8381-281726d7e790copy