Social-media impersonation scam spike
JustLend DAO's assessment for RD-F-109 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Social-media impersonation scam-spike — applicable; posture yellow. Active impersonation infrastructure confirmed: (1) justlend-dao.com presents as 'JustLend DAO' phishing site; (2) multiple typedream/teachable wallet phishing pages confirmed via web search 2026-05-17; (3) TRON DAO X account (adjacent ecosystem) was compromised via social engineering May 2, 2025 — hacker solicited $45K from followers. TRON ecosystem is a documented social engineering target (SlowMist fake TronLink extension campaign May 2026). No confirmed JustLend-specific X account compromise found in this session. P2 signal; pipeline not wired.
Sources #
- URLURLScan — justlend-dao.comURLScan record for justlend-dao.com — active phishing domain impersonating JustLend DAOretrieved 2026-05-17
- SlowMist — Fake TronLink Extension Phishing Campaign AnalysisSlowMist — Threat Intelligence: Analysis of fake TronLink Chrome extension phishing campaign, May 2026retrieved 2026-05-17
- CoinTelegraph — Tron DAO X account hack, $45K stolenTRON DAO X account hack via social engineering — $45K stolen, May 2025retrieved 2026-05-17
Methodology #
Detect a sharp uptick in Discord/Telegram/X accounts impersonating the protocol team or announcing fake airdrops.
See the full factor methodology and distribution across all protocols →