★ Deployer linked within 3 hops to DPRK/Lazarus

Stargate Finance's assessment for RD-F-125 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Deployer address linked within 3 hops to DPRK/Lazarus cluster | Deployer funded by Coinbase Prime 1 (hop 1 = US regulated CEX = clean terminal). The Kelp DAO DPRK exploit (Apr 2026) targeted LayerZero's off-chain RPC nodes (external infrastructure attack), not deployer or team wallets. No public Chainalysis, Arkham, or OFAC source labels the deployer or multisig as proximate to Lazarus cluster. Full 3-hop trace from deployer not completable without paid API access. **CRITICAL GUIDANCE APPLIED...

Sources #

Curator note
Extracted from 07-dev-identity.md — RD-F-125; no URL citedretrieved 2026-04-28

Methodology #

Determine whether the deployer address has an on-chain path of ≤3 hops to a Chainalysis/OFAC DPRK-labeled cluster address.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol stargate factor RD-F-125 score gray collected_at 2026-04-28 01:38:41