Audit log

Every state-changing event for Zerion Wallet: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-29 02:52:59Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 422,851,187

   sig

   49d7jm4AEkkW…UKGsZct8copyexplorer ↗

   hash

   6S2C2PaAcoKJ…w6mmmXNqcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (5627 B) ▸

   {"actor":"system:backfill","investigation_id":"e7b1c6d3-ee40-43d0-ac0d-f80fea6d7508","kind":"publish","page_slug":"zerion-wallet","published_at":"2026-05-29T02:52:59.637Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Zerion Wallet","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.gemini.com/cryptopedia/zerion-crypto-portfolio-tracker-zerion-wallet-app","type":"other","url":""},{"credibility":3,"name":"https://www.crunchbase.com/person/evgeny-yurtaev","type":"other","url":""},{"credibility":3,"name":"https://zerion.io/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.crowdfundinsider.com/2022/10/197327-crypto-wallet-zerion-raises-12-3-million-series-b/","type":"other","url":""},{"credibility":3,"name":"https://www.prnewswire.com/news-releases/zerion-closes-12m-series-b-fundraise-led-by-wintermute-ventures-301646731.html","type":"other","url":""},{"credibility":3,"name":"https://www.crunchbase.com/organization/zerion/investor_financials","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://coinedition.com/zerion-disables-web-app-after-100k-internal-wallet-breach/","type":"other","url":""},{"credibility":3,"name":"https://www.cryptotimes.io/2026/04/15/north-korean-hackers-target-zerion-in-ai-driven-attack-steal-100k/","type":"other","url":""},{"credibility":3,"name":"https://financefeeds.com/north-korean-hackers-behind-100k-zerion-exploit/","type":"other","url":""},{"credibility":3,"name":"https://cryptorank.io/news/feed/eaff7-zerion-disables-web-app-after-100k-internal-wallet-breach","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://zerion.io/blog/twitter-account-compromised-post-mortem/","type":"other","url":""},{"credibility":3,"name":"https://x.com/realScamSniffer/status/1669152727073722373","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://zerion.io/blog/post-mortem-on-zerions-asset-phishing-attack/","type":"other","url":""},{"credibility":3,"name":"https://www.quadrigainitiative.com/casestudy/zerionbalancerclonephishingattack.php","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.cryptotimes.io/2026/05/22/zero-network-shutting-down-as-zerion-pivots-to-wallet-and-api/","type":"other","url":""},{"credibility":3,"name":"https://en.cryptonomist.ch/2026/05/22/zero-network-shutdown-july-31-2026/","type":"other","url":""},{"credibility":3,"name":"https://en.coin-turk.com/zero-network-will-close-by-july-2026-users-must-withdraw-assets/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://zerion.io/security","type":"other","url":""},{"credibility":3,"name":"https://captainaltcoin.com/zerion-wallet-review/","type":"other","url":""},{"credibility":3,"name":"https://www.bitget.com/academy/zerion-wallet-review","type":"other","url":""}]}],"sources_used":[],"summary":"Zerion is a non-custodial DeFi portfolio tracker and multi-chain wallet founded in 2016, supporting 50+ blockchains including Ethereum and Solana. The platform has experienced multiple security incidents over its history, including a 2026 social engineering attack attributed to North Korean threat actors that resulted in approximately $100,000 in company internal wallet losses, though user funds were unaffected in each incident. Zerion also shut down its ZERO Layer-2 network in May 2026 after 1.5 years due to low adoption, with assets bridgeable until July 31, 2026.","timeline":[{"date":"2016-01-01","event":"Zerion founded by Evgeny Yurtaev and Alexey Bashlykov as a non-custodial DeFi interface and portfolio tracker.","source":""},{"date":"2021-02-01","event":"Asset phishing attack via fake Balancer pool smart contract results in ~$30,000 loss for one user. Zerion publishes post-mortem and patches verification logic.","source":""},{"date":"2022-08-17","event":"Zerion closes $12.3 million Series B funding round led by Wintermute Ventures, with participation from Coinbase Ventures, Placeholder, Alchemy Ventures, and others.","source":""},{"date":"2023-06-14","event":"Official Zerion Twitter/X account compromised via employee social engineering attack. Phishing tweets promote fake airdrop, resulting in ~$24,825 stolen from victims. Employee's internal wallet additionally drained for ~$53,000.","source":""},{"date":"2024-12-01","event":"ZERO Network Layer-2 mainnet active approximately 1.5 years after launch, marketed as first fully gasless EVM rollup.","source":""},{"date":"2026-04-11","event":"Zerion detects abnormal activity and disables its web application. An employee device was compromised via an AI-driven social engineering campaign attributed to North Korean threat actors.","source":""},{"date":"2026-04-15","event":"Zerion publicly confirms approximately $100,000 in internal company hot wallet losses from the North Korean social engineering attack. States no user funds were affected. Web app taken offline for up to 48 hours.","source":""},{"date":"2026-05-21","event":"Zerion announces permanent shutdown of ZERO Network Layer-2. Bridging in disabled immediately; bridging out available until July 31, 2026.","source":""},{"date":"2026-07-31","event":"ZERO Network block production scheduled to cease. Users must bridge all assets off ZERO before this date.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision bd61023c-c143-4a25-a5f2-5967ec5e2eb0copy
2. #2reviewby reviewerreviewer

   2026-06-09 20:01:30Z
   Score: 55 → 55 (no score change)
   The investigation is broadly accurate on the major security incidents, funding round, and ZERO Network shutdown, with all core figures (dollar amounts, dates of incidents, shutdown deadlines) confirmed by independent sources. Three claims are partially supported: the founder list omits co-founder Vadim Koleoshkin, the Series B closing date is stated as August 17, 2022 when official sources place it at October 12, 2022, and the summary's assertion that 'user funds were unaffected in each incident' is contradicted by the 2021 Balancer phishing attack in which one user lost approximately $30,000. Notable coverage gaps include the December 2025–January 2026 ZERO Network block production outage, the absence of any regulatory history, and no ZERO token analysis.
   anchoranchored

   chain

   ●mainnet-betaslot 425,396,128

   sig

   47AgTi6VdGTW…eDGXD1iecopyexplorer ↗

   hash

   8upM8WFzoML5…fuGdUwqRcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1115 B) ▸

   {"actor":"reviewer","decided_at":"2026-06-09T20:01:30.512Z","decision":"review","investigation_id":"e7b1c6d3-ee40-43d0-ac0d-f80fea6d7508","new_score":55,"page_slug":"zerion-wallet","prev_score":55,"reason":"The investigation is broadly accurate on the major security incidents, funding round, and ZERO Network shutdown, with all core figures (dollar amounts, dates of incidents, shutdown deadlines) confirmed by independent sources. Three claims are partially supported: the founder list omits co-founder Vadim Koleoshkin, the Series B closing date is stated as August 17, 2022 when official sources place it at October 12, 2022, and the summary's assertion that 'user funds were unaffected in each incident' is contradicted by the 2021 Balancer phishing attack in which one user lost approximately $30,000. Notable coverage gaps include the December 2025–January 2026 ZERO Network block production outage, the absence of any regulatory history, and no ZERO token analysis.","score_delta":0,"sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 7695d214-9fe5-48c1-adb9-5b310ee05ea3copy
3. #3review reviseby judgejudge

   2026-06-09 20:01:30Z
   Score: 55 → 43 (-12)
   Three of 14 claims (21%) are partially supported rather than confirmed. The most consequential is claim_findings[11]: the page summary states user funds were unaffected in each incident, but the 2021 Balancer phishing attack resulted in approximately $30,000 in real user losses — this overstates Zerion's security track record in the lead text readers encounter first. Additionally, claim_findings[2] omits co-founder Vadim Koleoshkin, who is consistently named in official press releases and third-party sources alongside Yurtaev and Bashlykov. claim_findings[4] records the Series B closing date as August 17, 2022, contradicted by the official PR Newswire release and all major coverage which places it at October 12, 2022. No claims are fully disputed and no link rot was found; the core security incident figures and ZERO Network shutdown details are all confirmed by independent sources including Tier 1 outlets.
   anchoranchored

   chain

   ●mainnet-betaslot 425,396,131

   sig

   KTi45mg3tMfD…A4VDh3Jjcopyexplorer ↗

   hash

   6xY4BUCrQwNy…xDCmhuPWcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1274 B) ▸

   {"actor":"judge","decided_at":"2026-06-09T20:01:30.512Z","decision":"review_revise","investigation_id":"e7b1c6d3-ee40-43d0-ac0d-f80fea6d7508","new_score":43,"page_slug":"zerion-wallet","prev_score":55,"reason":"Three of 14 claims (21%) are partially supported rather than confirmed. The most consequential is claim_findings[11]: the page summary states user funds were unaffected in each incident, but the 2021 Balancer phishing attack resulted in approximately $30,000 in real user losses — this overstates Zerion's security track record in the lead text readers encounter first. Additionally, claim_findings[2] omits co-founder Vadim Koleoshkin, who is consistently named in official press releases and third-party sources alongside Yurtaev and Bashlykov. claim_findings[4] records the Series B closing date as August 17, 2022, contradicted by the official PR Newswire release and all major coverage which places it at October 12, 2022. No claims are fully disputed and no link rot was found; the core security incident figures and ZERO Network shutdown details are all confirmed by independent sources including Tier 1 outlets.","score_delta":-12,"sequence_num":3,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision be0bbf0b-05c2-4e78-84f0-f9e432e765d6copy
4. #4rescoreby systemsystem

   2026-10-10 18:47:55Z
   Score: 43 → 65 (+22)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 43 → 65. Problems weighed by who is responsible: incidents the subject suffered −6.4, problems around the subject, caused by others −4; legitimacy credit long-running +10; fact-check adjustments (−12) now shown as page reliability, not in the score.
   anchoranchored

   chain

   ●mainnet-betaslot 455,367,862

   sig

   57YxBFJ8AUkk…XoRxDqRFcopyexplorer ↗

   hash

   3yXDFYfMqe5z…E9C4JBHucopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (687 B) ▸

   {"actor":"system","decided_at":"2026-10-10T18:47:55.786Z","decision":"rescore","investigation_id":"e7b1c6d3-ee40-43d0-ac0d-f80fea6d7508","new_score":65,"page_slug":"zerion-wallet","prev_score":43,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 43 → 65. Problems weighed by who is responsible: incidents the subject suffered −6.4, problems around the subject, caused by others −4; legitimacy credit long-running +10; fact-check adjustments (−12) now shown as page reliability, not in the score.","score_delta":22,"score_model":"v2","sequence_num":4,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 463784f8-a01c-4042-907f-c30ecfa82408copy
5. #5reviewby reviewerreviewer

   2026-10-16 13:16:13Z
   Score: 65 → 65 (no score change)
   The page's event-level reporting on Zerion's three security incidents (Feb 2021 Balancer-clone phishing, June 2023 Twitter compromise, April 2026 North Korean-attributed social engineering breach) and the ZERO Network shutdown is well sourced and matches primary materials and independent press coverage closely, including exact dollar figures from Zerion's own post-mortems. However, the page gets Zerion's founding year wrong (claims 2016; company materials and CB Insights point to 2019) in three places (summary, overview section, timeline), misstates the ZERO Network's actual mainnet launch month (claims December 2024; multiple outlets date it to November 12, 2024), and misnames the firms behind Zerion's security audits (claims Cube53/PeckShield/Trail of Bits; the cited zerion.io/security page actually lists Cure53/SlowMist/Zokyo/Secfault Security). The security section also overstates that no incident ever involved loss of user funds, glossing over the Feb 2021 incident's $30,000 user loss (later reimbursed). One Scam Sniffer attribution detail could not be verified because the sole cited source (an X/Twitter post) was paywalled, and the one accessible primary source for that incident names a different firm for a related claim. A cited Bitget Academy source is a dead link (404) in two places on the page.
   anchoranchored

   chain

   ●mainnet-betaslot 457,650,850

   sig

   5UeyXYVdmrFs…rZi42Dpscopyexplorer ↗

   hash

   AXKx2nUh23te…gwemJXQacopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1924 B) ▸

   {"actor":"reviewer","artifact_identity":"2d34092c72fee4201a81efc13fdc771b","decided_at":"2026-10-16T13:16:12.971Z","decision":"review","disputed_pct":0.4286,"findings_hash":"53YehfXDwwNkcirsxDquqRwfD28fQX29mYWMKize8wtz","investigation_id":"e7b1c6d3-ee40-43d0-ac0d-f80fea6d7508","mode":"findings_only","new_score":65,"page_content_hash":"775adcbde1521349c9cb73e4c5fe34214c57d42a26af14ea4d25ee1b3951187c","page_slug":"zerion-wallet","prev_score":65,"reason":"The page's event-level reporting on Zerion's three security incidents (Feb 2021 Balancer-clone phishing, June 2023 Twitter compromise, April 2026 North Korean-attributed social engineering breach) and the ZERO Network shutdown is well sourced and matches primary materials and independent press coverage closely, including exact dollar figures from Zerion's own post-mortems. However, the page gets Zerion's founding year wrong (claims 2016; company materials and CB Insights point to 2019) in three places (summary, overview section, timeline), misstates the ZERO Network's actual mainnet launch month (claims December 2024; multiple outlets date it to November 12, 2024), and misnames the firms behind Zerion's security audits (claims Cube53/PeckShield/Trail of Bits; the cited zerion.io/security page actually lists Cure53/SlowMist/Zokyo/Secfault Security). The security section also overstates that no incident ever involved loss of user funds, glossing over the Feb 2021 incident's $30,000 user loss (later reimbursed). One Scam Sniffer attribution detail could not be verified because the sole cited source (an X/Twitter post) was paywalled, and the one accessible primary source for that incident names a different firm for a related claim. A cited Bitget Academy source is a dead link (404) in two places on the page.","score_delta":0,"sequence_num":5,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 7844eb0d-b905-4a4e-a869-13ae0acfa791copy