Avg attacker reconnaissance time for peer-class protocols
Symbiotic's assessment for RD-F-163 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Attacker reconnaissance time for peer-class protocols. For restaking primitives/LRT-class: KelpDAO rsETH (Apr 2026, $293M) — attributed to TraderTraitor/Lazarus with documented social-engineering reconnaissance over months. Drift Protocol (Apr 2026, $285M) — 6-month social engineering buildup including real-capital deposits (F184 pattern). USPD-class reconnaissance: 78-day documented window. Symbiotic at $472M TVL is a high-priority reconnaissance target in the restaking sector. Paradigm-backed, named founders (Misha Putyatin, Algys Ievlev) with public LinkedIn/conference presence — social engineering surface exists. No confirmed active reconnaissance against Symbiotic detected in public sources but peer-class baseline is 14-78+ days. Elevated yellow: prominent restaking protocol in active DPRK-targeting sector.
Sources #
- InternalSymbiotic profile — dev identity flags.research/protocols/symbiotic/00-profile.md §11 — founders Misha Putyatin and Algys Ievlev; Paradigm-backedretrieved 2026-05-16
- Yellow.com — Lazarus Kelp Hack analysisKelpDAO rsETH exploit context — TraderTraitor/Lazarus reconnaissance in restaking sectorretrieved 2026-05-16
- Wiz — TraderTraitor Deep DiveTraderTraitor deep dive — social engineering and reconnaissance tacticsretrieved 2026-05-16
Methodology #
Report the average number of days of attacker reconnaissance activity before a strike on peer-class protocols (lending/DEX/bridge/perps), sourced from the hack database.
See the full factor methodology and distribution across all protocols →