defirisk.co
rubric v1.7.0

Handle reuse across failed/rugged projects

A dev identity & insider risk factor in the v1.7.0 rubric. Measured per protocol on a s cadence.

Methodology how we score#

What this measures
This factor checks whether any team member's social handles — Twitter/X, Discord, GitHub username, or Telegram — have previously been associated with a rugged or failed project under a different protocol name. Measurement is manual OSINT by the curator, cross-referencing current handles against archived social records, Wayback Machine captures, and curator-maintained alias databases. Category 7 context: handle reuse is a signature behavior of serial exit-scam operators who rebrand after each rug while retaining their online presence.

Why it matters
Serial exit-scam operators rarely create entirely new online identities — doing so sacrifices follower counts and credibility signals that are operationally useful for attracting new victims. More commonly, they retain the same handle but change the protocol branding, or use closely related handles across iterations. Handle reuse is documented in the rekt.news dataset for several BSC-era rug operators and in the Snowdog incident where wallet funding via FTX-KYC'd accounts provided cross-reference opportunities. The signal is weak in isolation but becomes strong when combined with pseudonymous identity, short protocol age, and no audit.

Green / Yellow / Red
Green is scored when no handle associated with any core team member appears in curator rug alias databases or in archived references to failed/rugged projects under different protocol names. Yellow applies when a handle has a documented prior association with a project that failed (team dissolved, protocol sunsetted) but without confirmed rug attribution — normal project failure is not a risk signal. Red is scored when a verified handle reuse links a current team member to a prior confirmed rug or exit-scam protocol.

Common gray cases
Gray is assigned when the team is fully pseudonymous and no handles are publicly attributable, or when the OSINT trail is too sparse to cross-reference against rug databases with confidence.

Notable historical examples
No cross-hacked incidents currently linked in database for this factor.

Measurement what to look for#

Determine whether any social handle (Twitter, Discord) has been associated with a prior rugged or failed project under a different alias.

Data & output #

Data source
OSINT: Twitter/X Wayback Machine + Discord handle history + archived project sites + rekt.news
Output format
Green / Yellow / Red
Evidence artifact
Handle + prior project association + evidence URL
Confidence signal
green = no reuse detected; red = confirmed handle reuse with prior rug; gray = handles not publicly associated with team

Scored protocols 0 carry this factor#

No protocols have been scored for this factor yet.

Linked hacks no historical incidents linked#

No historical incidents are linked to this factor.
rubric_version v1.7.0factor RD-F-118category 7carried 0critical no