defirisk.co
rubric v1.7.0

Real-capital social-engineering persona

Convex Finance's assessment for RD-F-184 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Gray by policy for protocols with no curator-flagged persona. F184 requires curator-confirmed attribution of a social-engineering capital-build-up pattern (Drift/UNC4736 comparator: $1M+ deposits over 6 months). No public report links any Convex Finance investor, contributor, or team persona to such a pattern. The June 2025 Resupply exploit was an external code-exploitation attack (collateral price manipulation via cvcrvUSD), not a persona-based social-engineering event. Cannot prove absence of a pattern with no public trace; P1 factor requires curator confidence beyond on-chain trail before grading.

Sources #

  • Curator note
    F184 gray policy per taxonomy batch-24F184 gray policy: attribution requires curator confidence beyond on-chain trail per taxonomy batch-24 P1 note; no public curator flag for Convex Financeretrieved 2026-05-16
  • URL
    Resupply Exploit Nets Attacker $9.5M via Collateral Price Manipulation - Crypto EconomyResupply exploit reporting confirming external code attack via collateral price manipulation; no insider persona pattern foundretrieved 2026-05-16

Methodology #

Determine whether a curator-flagged "team contributor" or "external integrator" persona has ≥$1M of attributed real-capital deposits to the target protocol or peer protocols, potentially used to build credibility ahead of a social-engineering attack.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol convex-finance factor RD-F-184 score gray collected_at 2026-05-16 02:41:28