Social-media impersonation scam spike
crvUSD (Curve Stablecoin)'s assessment for RD-F-109 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Social-media impersonation scam-spike. Applicable: Curve Finance is a top-10 DeFi brand with large social presence. In early May 2025, the Curve Finance X (Twitter) account was compromised/breached, followed within days by the May 12, 2025 DNS hijack — a coordinated multi-vector attack pattern documented by crypto.news. Curve's X account compromise is a confirmed scam-spike vector (fake announcements from official account). Current scam-spike level in trailing 30 days to 2026-05-16 is not confirmable via OSINT without a social monitoring feed. Historical pattern elevates risk rating to yellow.
Sources #
- URLcrypto.news Curve X breach + DNS attackcrypto.news: Curve Finance battles DNS hijack days after X account breach — confirms X account compromise preceding May 2025 DNS attackretrieved 2026-05-16
Methodology #
Detect a sharp uptick in Discord/Telegram/X accounts impersonating the protocol team or announcing fake airdrops.
See the full factor methodology and distribution across all protocols →