VERIFY · LIVE
Incidents
Every discrepancy found in the ledger, what caused it, what was corrected and what the correction cost. Entries are never edited and this register is never pruned.
Gold moved without the ledger recording it
2026-08-17 · gold-drift-2026-08-17
What was wrong
61 services credited or debited a customer wallet directly, without writing a ledger entry. Gold reached customers with nothing recording that it had, so a wallet balance and the sum of that customer’s entries disagreed. Measured across 879 customers: 145 wallets held more than the books explained, 31 held less.
Cause
There was no single primitive through which Flashy Gold moved. Each service wrote its own balance update, and a service that forgot the ledger entry produced a wallet movement no record could account for. War-bet settlement and the prediction market were the largest two.
Correction
Ratify up, correct down. Where a wallet held more than the books explained, the record was made true and the balance left alone — the defect was ours and the gold stays with the customer. Where a wallet held less, the record was made true and the shortfall paid. Clawing back 7,226 gold from 145 people who had done nothing wrong would have recovered less than it cost in trust. Both writes per customer went out in one transaction, keyed so a re-run is a no-op.
| Figure | Before | After |
|---|---|---|
| Customers whose wallet disagreed with the books | 175 | 0 |
| Total absolute drift (Flashy Gold) | 8,142 | 0 |
| Customers reconciled | 695 | 776 |
| Gold paid to customers who were short | — | 916 to 31 customers |
What the correction cost
Balance-continuity breaks rose from 184 to 279, across 8 → 103 customers. This was caused by the correction and is expected: a ratification bridges from the position across both ledgers, while the continuity check reads one of them, so for a customer whose history is split the two starting points differ and the entry registers as a break. Both properties cannot hold in one entry while the second ledger holds part of the history. Closing the money gap was the correct priority and this is what it cost. Every deliberate break carries the key prefix gold-drift-ratify:2026-08-17: — anything outside that set is a genuine finding, and the nightly invariant now judges them that way rather than by their date.
Basis: ClaimYour.Gold · docs/incident-2026-08-17-gold-drift-correction.md