Audit log

Every state-changing event for YO Protocol: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-27 19:45:53Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 422,568,357

   sig

   PJk9dyXzV6Kv…2wxevJtdcopyexplorer ↗

   hash

   7fyS8S8cn8tp…87FKroDpcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (5674 B) ▸

   {"actor":"system:backfill","investigation_id":"bf7cd9dc-f8da-4e68-b7c5-87ea67ecc13c","kind":"publish","page_slug":"yo-protocol","published_at":"2026-05-27T19:45:53.171Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"YO Protocol","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/web3/2025/12/13/yo-labs-raises-usd10m-to-scale-cross-chain-crypto-yield-optimization-protocol","type":"other","url":""},{"credibility":3,"name":"https://gen.xyz/blog/yo-xyz","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/yo-protocol","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/web3/2025/12/13/yo-labs-raises-usd10m-to-scale-cross-chain-crypto-yield-optimization-protocol","type":"other","url":""},{"credibility":3,"name":"https://finance.yahoo.com/news/crypto-vc-firm-paradigm-leads-141310544.html","type":"other","url":""},{"credibility":3,"name":"https://www.theblock.co/post/174468/ftx-haun-ventures-back-14-million-raise-for-ex-amazon-and-uber-vets-new-defi-platform","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://docs.yo.xyz/protocol/security-audits","type":"other","url":""},{"credibility":3,"name":"https://immunefi.com/bug-bounty/yo-protocol/resources/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://paragraph.com/@parlan/yo-protocols-unseen-dangers-why-code-audits-arent-enough","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.yo.xyz/blog/post/introducing-yo-powering-the-yield-engine-for-crypto","type":"other","url":""},{"credibility":3,"name":"https://www.bitrue.com/blog/yo-token-tokenomics-claiming-guide","type":"other","url":""},{"credibility":3,"name":"https://www.bitget.com/news/detail/12560605175106","type":"other","url":""},{"credibility":3,"name":"https://www.coingecko.com/en/coins/yo","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://en.wikipedia.org/wiki/ZachXBT","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://docs.yo.xyz/protocol/risks","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/web3/2025/12/13/yo-labs-raises-usd10m-to-scale-cross-chain-crypto-yield-optimization-protocol","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/yo-protocol","type":"other","url":""}]}],"sources_used":[],"summary":"YO Protocol (yo.xyz), operated by YO Labs, is a San Francisco-based multi-chain DeFi yield optimization protocol founded by former Uber and Amazon executives and backed by Paradigm, Coinbase Ventures, and Foundation Capital with $24 million in total funding. Independent security research published in September 2025 identified significant centralization risks, MEV attack vectors, and EIP-4626 compliance gaps that existing audits had not fully addressed. No hacks, exploits, or regulatory actions have been publicly confirmed against the protocol; a claimed ZachXBT flag has not been corroborated by any findable public source as of May 2026.","timeline":[{"date":"2022-10-01","event":"Exponential (later rebranded to YO Labs) raises $14 million seed round led by Paradigm, with FTX Ventures, Haun Ventures, Polygon, Solana Ventures, and Circle participating.","source":""},{"date":"2022-11-11","event":"FTX, a seed-round investor via FTX Ventures, collapses and files for bankruptcy amid fraud charges against founder Sam Bankman-Fried.","source":""},{"date":"2024-07-11","event":"Exponential.fi launches an all-in-one DeFi investing platform, setting the foundation for the YO Protocol rebrand.","source":""},{"date":"2025-01-15","event":"Offbeat Security completes audit of the yoVault contract, finding no critical or high-severity vulnerabilities.","source":""},{"date":"2025-01-21","event":"Hunter Security completes audit of the yoVault contract.","source":""},{"date":"2025-05-05","event":"YO Protocol's Immunefi bug bounty program goes live with a $10,000 maximum bounty for critical vulnerabilities.","source":""},{"date":"2025-05-29","event":"Spearbit completes audit of yoVault; audit confirms the onUnderlyingBalanceUpdate function can be sandwiched by MEV bots.","source":""},{"date":"2025-09-16","event":"Independent researcher Parlan publishes 'Yo Protocol's Unseen Dangers: Why Code Audits Aren't Enough,' identifying centralization, MEV, accounting, and EIP-4626 compliance risks.","source":""},{"date":"2025-12-13","event":"YO Labs raises $10 million Series A led by Foundation Capital, with Coinbase Ventures, Scribble Ventures, and Launchpad Capital participating, bringing total funding to $24 million.","source":""},{"date":"2026-01-30","event":"YO Protocol announces $YO token and tokenomics: 1 billion total supply, 8% genesis airdrop, 24% to core contributors, 16.5% to investors.","source":""},{"date":"2026-02-05","event":"Genesis airdrop claim portal opens for early depositors and points program participants.","source":""},{"date":"2026-02-24","event":"Zellic completes security audit of the yoVault Solana deployment.","source":""},{"date":"2026-04-13","event":"Accretion completes second audit of the yoVault Solana deployment.","source":""},{"date":"2026-05-06","event":"Genesis airdrop claim window closes.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 7a75ded7-5f01-4f09-8ddb-4ae9fe28b7decopy
2. #2rescoreby systemsystem

   2026-10-10 18:47:09Z
   Score: 42 → 68 (+26)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 42 → 68. Problems weighed by who is responsible: concerns that are not fraud −6.4, problems around the subject, caused by others −4.8; legitimacy credit long-running +6, audits +8.
   anchoranchored

   chain

   ●mainnet-betaslot 455,367,082

   sig

   5U67NsZQKHTs…PWhDzSRicopyexplorer ↗

   hash

   Fd9duRKeLgE3…TbYkGfZHcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (616 B) ▸

   {"actor":"system","decided_at":"2026-10-10T18:47:09.860Z","decision":"rescore","investigation_id":"bf7cd9dc-f8da-4e68-b7c5-87ea67ecc13c","new_score":68,"page_slug":"yo-protocol","prev_score":42,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 42 → 68. Problems weighed by who is responsible: concerns that are not fraud −6.4, problems around the subject, caused by others −4.8; legitimacy credit long-running +6, audits +8.","score_delta":26,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 866fa482-2b11-4971-a4e7-3667b9ab8aaccopy
3. #3reviewby reviewerreviewer

   2026-11-01 23:24:21Z
   Score: 68 → 68 (no score change)
   Funding, audit dates and bug bounty details check out against CoinDesk, The Block, the YO docs and Immunefi. The audit count ('eight') is inconsistent with the page's own list and the docs, which now include adapter audits. The page omits the January 2026 $3.7M swap loss, which is material to a risk profile. Tokenomics, TVL, Parlan details and the ZachXBT section were not fully verified. The unverified ZachXBT section is appropriately hedged.
   anchoranchored

   chain

   ●mainnet-betaslot 464,275,810

   sig

   5poh1qDmrUQ1…YQxdMe9Acopyexplorer ↗

   hash

   B8NwV27zW3zv…MNXX9L7Qcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1330 B) ▸

   {"actor":"reviewer","artifact_identity":"121d5f4361567aad5330e284ddf4cc37","blocked_count":1,"decided_at":"2026-11-01T23:24:21.480Z","decision":"review","disputed_pct":0.25,"findings_hash":"9fuENAfnihvD9qyaaEJQaUm6WYWgpso1NtiazpEGNeEp","investigation_id":"bf7cd9dc-f8da-4e68-b7c5-87ea67ecc13c","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":68,"omissions":{"material":1,"total":1},"page_content_hash":"00343448f9cec28b9b3aa6bc01e042664b27abfa8a80a13dd889d1aa76c49cee","page_slug":"yo-protocol","prev_score":68,"reason":"Funding, audit dates and bug bounty details check out against CoinDesk, The Block, the YO docs and Immunefi. The audit count ('eight') is inconsistent with the page's own list and the docs, which now include adapter audits. The page omits the January 2026 $3.7M swap loss, which is material to a risk profile. Tokenomics, TVL, Parlan details and the ZachXBT section were not fully verified. The unverified ZachXBT section is appropriately hedged.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":8,"sequence_num":3,"subject_status":"operating","subject_status_contradicts_page":true,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision a3af9dce-a2d2-4c82-8932-60a348b8ab21copy
4. #4review reviseby judgejudge

   2026-11-01 23:24:21Z
   Score: 68 → 68 (no score change)
   Of 8 countable claim findings (one blocked DeFiLlama check excluded), 2 could not be verified (claim_findings[6] and claim_findings[8], both not found), giving a disputed share of 25%. Funding, audit dates and the bug bounty were confirmed, but claim_findings[3] shows the 'eight audits' count is outdated and inconsistent with the page's own list. The page also leaves out a material January 2026 loss of about $3.7 million from a faulty token swap (omission_findings[0]), a high-priority coverage gap, so the page is revised rather than approved. The reviewer's confidence was moderate (0.55), which keeps the penalty in the lower part of the band.
   anchoranchored

   chain

   ●mainnet-betaslot 464,275,816

   sig

   41AneqPWjNuf…TBY4awUZcopyexplorer ↗

   hash

   71JUMgjLk9Br…rnUG5TAdcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1877 B) ▸

   {"actor":"judge","artifact_identity":"121d5f4361567aad5330e284ddf4cc37","band_override":null,"blocked_count":1,"decided_at":"2026-11-01T23:24:21.480Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.25,"investigation_id":"bf7cd9dc-f8da-4e68-b7c5-87ea67ecc13c","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":68,"page_slug":"yo-protocol","prev_score":68,"reason":"Of 8 countable claim findings (one blocked DeFiLlama check excluded), 2 could not be verified (claim_findings[6] and claim_findings[8], both not found), giving a disputed share of 25%. Funding, audit dates and the bug bounty were confirmed, but claim_findings[3] shows the 'eight audits' count is outdated and inconsistent with the page's own list. The page also leaves out a material January 2026 loss of about $3.7 million from a faulty token swap (omission_findings[0]), a high-priority coverage gap, so the page is revised rather than approved. The reviewer's confidence was moderate (0.55), which keeps the penalty in the lower part of the band.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":8,"sequence_num":4,"severity_override":{"applied":true,"band":"minor","from_band":"minor","reason":"omission_findings[0] (material) and subject_status.contradicts_page: the page omits the January 2026 stkGHO swap loss of about $3.7 million, which YO says it covered. The percentage alone would sit in the minor band, so the omission is held to the minor band rather than approve. It is not raised to significant because the page's literal statement of no hacks or exploits is accurate, user balances were reportedly unaffected, and the protocol is still operating."},"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 1b44ea1a-d11e-4aad-8ebc-823757ba8494copy
5. #5rescoreby systemsystem

   2026-11-01 23:24:22Z
   Score: 68 → 72 (+4)
   Recalculated after the fact-check of 2026-11-01. Rescored under Scoring v2, the published formula (avoid.net/scoring): 68 → 72. Problems weighed by who is responsible: problems around the subject, caused by others −4, concerns that are not fraud −3.2; legitimacy credit long-running +6, audits +8; 2 section(s) set aside until a failed fact-check is resolved.
   anchoranchored

   chain

   ●mainnet-betaslot 464,275,821

   sig

   NFHMYXjb6fGD…aBUi6rXUcopyexplorer ↗

   hash

   E83ADrdXZJgn…bHiCuhE9copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (724 B) ▸

   {"actor":"system","decided_at":"2026-11-01T23:24:21.480Z","decision":"rescore","investigation_id":"bf7cd9dc-f8da-4e68-b7c5-87ea67ecc13c","new_score":72,"page_slug":"yo-protocol","prev_score":68,"reason":"Recalculated after the fact-check of 2026-11-01. Rescored under Scoring v2, the published formula (avoid.net/scoring): 68 → 72. Problems weighed by who is responsible: problems around the subject, caused by others −4, concerns that are not fraud −3.2; legitimacy credit long-running +6, audits +8; 2 section(s) set aside until a failed fact-check is resolved.","score_delta":4,"score_model":"v2","sequence_num":5,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 20a1186d-e2a4-476f-94ea-edc20ad6033bcopy