Real-capital social-engineering persona

Evidence summary #

No curator-verified evidence of any 'team contributor' or 'external integrator' persona using >=1M real-capital deposits to build credibility ahead of a social-engineering attack against Uniswap Labs. The Drift Protocol (Apr 2026, UNC4736) was the motivating in-sample event; Uniswap shows none of the precursor patterns. Uniswap Labs is a US C-corp with fully doxxed leadership — inconsistent with persona-building profile. M-only factor per taxonomy; not_assessed is correct disposition absent positive curator signal per PD-019.

Detail #

Combined v2+v3 assessment. RD-F-184 is classified M-only curation in the taxonomy (batch-24 addition). The factor requires curator confidence beyond the on-chain trail for positive attribution per PD-019. The in-sample motivating event is the UNC4736 (DPRK) Drift Protocol attack (April 2026) where Lazarus Group embedded a persona with $1M+ real capital deposits over 6 months including conference appearances before the Solana durable-nonce pre-signing exploit. Uniswap does not match any of the precursor patterns: (1) Uniswap Labs is a US C-corp with publicly named leadership — incompatible with a sustained fake-identity operation; (2) No threat-intelligence source has flagged any Uniswap Labs contributor or integrator as a suspected UNC4736-linked persona; (3) The governance process (on-chain Compound Bravo, public forum, 7-day voting) would not be susceptible to a single-person social-engineering attack that bypasses on-chain mechanisms. Not_assessed is the correct schema value when the M-only factor has no positive curator signal to grade against.

Sources #

Methodology #

Determine whether a curator-flagged "team contributor" or "external integrator" persona has ≥$1M of attributed real-capital deposits to the target protocol or peer protocols, potentially used to build credibility ahead of a social-engineering attack.

See the full factor methodology and distribution across all protocols →