New contract with similar bytecode to exploit template

Evidence summary #

No contracts with Bridge2 bytecode similarity deployed by suspicious addresses identified in available public data. The JELLY attack (March 26, 2025) used a CEX market-price manipulation approach, not a contract-deployment exploit. No selector-pattern exploit contracts targeting Hyperliquid identified. Signal does not fire.

Sources #

Methodology #

Detect whether a freshly deployed contract has high bytecode similarity to a known exploit template targeting this protocol class.

See the full factor methodology and distribution across all protocols →