Audit log

Every state-changing event for Yield Protocol: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-30 05:05:30Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 423,089,284

   sig

   4QuUcJ4yzb4C…h4djUwwTcopyexplorer ↗

   hash

   6GckWqaX3nbQ…ABCasEKdcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (6205 B) ▸

   {"actor":"system:backfill","investigation_id":"c23832e5-c885-4fee-8d4e-28e2d4ca9576","kind":"publish","page_slug":"yield-protocol","published_at":"2026-05-30T05:05:30.488Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Yield Protocol","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/financial-narratives/understanding-the-yield-protocol-6e4ecc688bec","type":"other","url":""},{"credibility":3,"name":"https://exponential.fi/protocols/yield-protocol/aa11da42-a185-4aec-8bb0-9b825a170e92","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/business/2023/10/04/defi-project-yield-protocol-to-wind-down-by-years-end","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/yield-protocol/yield-closes-10mm-funding-round-led-by-paradigm-7e456e72b5e3","type":"other","url":""},{"credibility":3,"name":"https://www.theblock.co/linked/109352/yield-team-raises-10-million-to-build-out-defi-bond-market","type":"other","url":""},{"credibility":3,"name":"https://decrypt.co/74300/defi-yield-fixed-income","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://immunefi.com/blog/bug-fix-reviews/yield-protocol-logic-error/","type":"other","url":""},{"credibility":3,"name":"https://medium.com/immunefi/yield-protocol-logic-error-bugfix-review-7b86741e6f50","type":"other","url":""},{"credibility":3,"name":"https://coincodecap.com/defunct-yield-protocol-faces-smart-contract-exploit-over-180k-drained-report","type":"other","url":""},{"credibility":3,"name":"https://www.thecoinrepublic.com/2024/04/30/crypto-scam-hacker-steals-181k-from-defunct-defi-protocol/","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/euler-attack-causes-locked-tokens-losses-in-11-defi-protocols-including-balancer","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://yield-protocol.medium.com/winding-down-yield-protocol-0974b38066cc","type":"other","url":""},{"credibility":3,"name":"https://www.coindesk.com/business/2023/10/04/defi-project-yield-protocol-to-wind-down-by-years-end","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/yield-protocol-permanently-wind-down-december-2023","type":"other","url":""},{"credibility":3,"name":"https://blockworks.co/news/yield-protocol-defi-project-shutter-fixed-rate-platform","type":"other","url":""},{"credibility":3,"name":"https://invezz.com/news/2023/10/04/yield-protocol-winds-up-operations-cites-deteriorated-demand-regulatory-woes/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://coincodecap.com/defunct-yield-protocol-faces-smart-contract-exploit-over-180k-drained-report","type":"other","url":""},{"credibility":3,"name":"https://www.thecoinrepublic.com/2024/04/30/crypto-scam-hacker-steals-181k-from-defunct-defi-protocol/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://yield-protocol.medium.com/winding-down-yield-protocol-0974b38066cc","type":"other","url":""},{"credibility":3,"name":"https://invezz.com/news/2023/10/04/yield-protocol-winds-up-operations-cites-deteriorated-demand-regulatory-woes/","type":"other","url":""}]}],"sources_used":[],"summary":"Yield Protocol was a decentralized finance protocol offering fixed-rate, fixed-term borrowing and lending on Ethereum and Arbitrum, launched in October 2020 and funded by Paradigm. It suffered multiple security incidents including collateral damage from the March 2023 Euler Finance hack and a critical smart contract vulnerability patched via Immunefi in April 2023, before announcing a full wind-down in October 2023 citing insufficient demand and regulatory pressure. After official operations ceased in December 2023, abandoned smart contracts on Arbitrum were exploited in April 2024 for approximately $181,000 via a flash loan attack on pool balance discrepancies.","timeline":[{"date":"2020-10-01","event":"Yield Protocol launches on Ethereum, offering fixed-rate collateralized borrowing and lending via fyTokens.","source":""},{"date":"2021-06-23","event":"Yield Protocol closes a $10 million Series A funding round led by Paradigm, with participation from Framework Ventures, Symbolic Capital Partners, CMS Holdings, Variant, and the DeFi Alliance.","source":""},{"date":"2022-04-01","event":"Yield Protocol reaches its peak total value locked of over $22 million.","source":""},{"date":"2023-03-13","event":"Euler Finance suffers a $197 million flash loan exploit. Yield Protocol, which held assets in Euler-based pools, suffers collateral losses estimated under $1.5 million.","source":""},{"date":"2023-04-28","event":"Whitehat Paludo0x responsibly discloses a critical logic error in Yield Protocol's strategy contract burn() function via Immunefi. Approximately $950,000 in funds protected. Bounty of $95,000 USDC awarded.","source":""},{"date":"2023-07-01","event":"Yield Protocol confirms full recovery of funds lost in the March 2023 Euler Finance hack, after the Euler hacker returned stolen assets.","source":""},{"date":"2023-10-04","event":"Yield Protocol announces permanent wind-down by end of December 2023, citing insufficient demand for fixed-rate borrowing and regulatory pressures in the U.S., Europe, and U.K.","source":""},{"date":"2023-12-29","event":"Yield Protocol's final December series matures. All borrowing and lending operations officially cease.","source":""},{"date":"2024-02-02","event":"Yield Protocol formally ends all official support.","source":""},{"date":"2024-04-30","event":"An attacker exploits abandoned Yield Protocol smart contracts on Arbitrum via a flash loan attack targeting a discrepancy between pool token balance and total supply. Approximately $181,000 drained. PeckShield first alerts; CertiK confirms. No team response due to protocol being defunct.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 685454e6-3e2e-4c9e-bb49-ab831115ea22copy
2. #2rescoreby systemsystem

   2026-10-27 06:07:28Z
   Score: 38 → 50 (+12)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 38 → 50. Problems weighed by who is responsible: incidents the subject suffered −6.4, concerns that are not fraud −6.4, problems around the subject, caused by others −2.4; legitimacy credit long-running +6; no longer operating, so capped at 50.
   anchoranchored

   chain

   ●mainnet-betaslot 461,966,675

   sig

   3bTb8Gygjznv…Mk3JP3dQcopyexplorer ↗

   hash

   3mHd7r6d1oZu…mM2qL1gDcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (683 B) ▸

   {"actor":"system","decided_at":"2026-10-27T06:07:28.927Z","decision":"rescore","investigation_id":"c23832e5-c885-4fee-8d4e-28e2d4ca9576","new_score":50,"page_slug":"yield-protocol","prev_score":38,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 38 → 50. Problems weighed by who is responsible: incidents the subject suffered −6.4, concerns that are not fraud −6.4, problems around the subject, caused by others −2.4; legitimacy credit long-running +6; no longer operating, so capped at 50.","score_delta":12,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 33d36c9f-025e-4311-8a34-6773b5289e1dcopy
3. #3reviewby reviewerreviewer

   2026-11-02 04:59:10Z
   Score: 50 → 50 (no score change)
   The core factual spine holds: the Immunefi bug bounty details, the Euler collateral losses, the October 2023 wind-down and the roughly $181k April 2024 exploit all match sources I could read. Weak points are the unsourced ZachXBT flag section, the CertiK post-mortem attribution and the 'DeFi security literature' claim, which no source supports, and the exact Euler recovery timing and the Feb 2, 2024 date, which I could not confirm. The page's current status (shut down, later exploited) is stated accurately.
   anchoranchored

   chain

   ●mainnet-betaslot 464,369,594

   sig

   2k8YLxU3uaKy…3PpTaxorcopyexplorer ↗

   hash

   U4NDnqAUCqZw…Zu2au6E4copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1365 B) ▸

   {"actor":"reviewer","artifact_identity":"ee605ec35527354c9bb1377ab5cb4e0c","blocked_count":1,"decided_at":"2026-11-02T04:59:10.131Z","decision":"review","disputed_pct":0.4286,"findings_hash":"28oLY8DHaTZDDWVfn8P4NmPQkvzbdmWDT9KRHRXc4HYZ","investigation_id":"c23832e5-c885-4fee-8d4e-28e2d4ca9576","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":50,"page_content_hash":"fc401aacd7ce84885c6069ddbbdae0c6aa4e29162ee1f5d74ef4d199211a32b2","page_slug":"yield-protocol","prev_score":50,"reason":"The core factual spine holds: the Immunefi bug bounty details, the Euler collateral losses, the October 2023 wind-down and the roughly $181k April 2024 exploit all match sources I could read. Weak points are the unsourced ZachXBT flag section, the CertiK post-mortem attribution and the 'DeFi security literature' claim, which no source supports, and the exact Euler recovery timing and the Feb 2, 2024 date, which I could not confirm. The page's current status (shut down, later exploited) is stated accurately.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":7,"sequence_num":3,"subject_status":"shut_down","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 9ac6c8ca-f38f-49a8-b8d8-fef9d058614ccopy
4. #4review reviseby judgejudge

   2026-11-02 04:59:10Z
   Score: 50 → 50 (no score change)
   The core facts hold up: the Immunefi bounty details (claim_findings[0]), the roughly $181,000 April 2024 exploit (claim_findings[1]) and the Euler loss figures (claim_findings[7]) match sources. However, 3 of the 7 checkable claims (about 43%) could not be supported: the ZachXBT flag has no source (claim_findings[4]), the CertiK post-mortem attribution appears to be the page's own inference (claim_findings[5]), and the claim that the incident is cited in DeFi security literature has no source (claim_findings[6]). The Euler recovery date and 'Jacob' alias were only partly supported (claim_findings[2]). One finding was excluded because the source blocked the reviewer (claim_findings[3]). Because the central facts are confirmed and reviewer confidence is moderate, the penalty sits in the lower part of the significant-issues range.
   anchoranchored

   chain

   ●mainnet-betaslot 464,369,599

   sig

   T6iryke2nson…wrdvEUcqcopyexplorer ↗

   hash

   7sq4pPqZfi7p…9wBf6F3ucopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1523 B) ▸

   {"actor":"judge","artifact_identity":"ee605ec35527354c9bb1377ab5cb4e0c","band_override":null,"blocked_count":1,"decided_at":"2026-11-02T04:59:10.131Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.4286,"investigation_id":"c23832e5-c885-4fee-8d4e-28e2d4ca9576","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":50,"page_slug":"yield-protocol","prev_score":50,"reason":"The core facts hold up: the Immunefi bounty details (claim_findings[0]), the roughly $181,000 April 2024 exploit (claim_findings[1]) and the Euler loss figures (claim_findings[7]) match sources. However, 3 of the 7 checkable claims (about 43%) could not be supported: the ZachXBT flag has no source (claim_findings[4]), the CertiK post-mortem attribution appears to be the page's own inference (claim_findings[5]), and the claim that the incident is cited in DeFi security literature has no source (claim_findings[6]). The Euler recovery date and 'Jacob' alias were only partly supported (claim_findings[2]). One finding was excluded because the source blocked the reviewer (claim_findings[3]). Because the central facts are confirmed and reviewer confidence is moderate, the penalty sits in the lower part of the significant-issues range.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":7,"sequence_num":4,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision f85f0b11-5874-403a-87ab-f85b6e7a6287copy