New ERC-20 approval to unverified contract from whale

Hyperliquid's assessment for RD-F-096 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Not applicable to Hyperliquid's interaction model. Users deposit USDC to Bridge2 via USDC.permit — interaction is with verified USDC ERC20 (0xaf88d065e77c8cC2239327C5EDb3A432268e5831) and verified Bridge2 (0x2Df1c51E09aECF9cacB7bc98cB1742757f163dF7). No approval to unverified contract in the Bridge2 deposit flow. Structural non-applicability.

Sources #

Etherscan
https://arbiscan.io/address/0x2df1c51e09aecf9cacb7bc98cb1742757f163dF7retrieved 2026-04-28

Methodology #

Detect whether a top-TVL depositor grants a new token approval to an unverified contract that interacts with this protocol.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol hyperliquid factor RD-F-096 score gray collected_at 2026-04-28 13:58:49