Mixer withdrawal → protocol interaction
PancakeSwap's assessment for RD-F-090 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
v1-phase-2 signal (Tier-C). Historically confirmed: Lazarus Group wallets laundered $263M of Bybit hack proceeds through PancakeSwap (Feb-Mar 2025) — past the 30-day lookback threshold as of 2026-04-28. As a permissionless BSC DEX, ongoing baseline mixer-to-protocol flows are structurally inherent but no specific live fire confirmed via public proxy sources today. Historical interaction is captured under RD-F-158 (Cat 11).
Sources #
- URLBybit Hack: How the Lazarus Group Exploited DeFi Protocols to Launder $400MAllium.so Bybit DeFi laundering breakdownretrieved 2026-04-28
- The Bybit Hack: Following North Korea's Largest ExploitTRM Labs Bybit hack laundering analysisretrieved 2026-04-28
Methodology #
Detect whether a wallet that recently withdrew from Tornado Cash, Railgun, or similar mixer has interacted with this protocol.
See the full factor methodology and distribution across all protocols →