★ Deployer linked within 3 hops to DPRK/Lazarus
Veda (BoringVault)'s assessment for RD-F-125 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
CRITICAL STAR FACTOR. No OFAC SDN match for deployer address, named founders, or any associated entity. No Chainalysis/Arkham public label indicating Lazarus or DPRK cluster proximity within 3 hops of deployer 0x0463e60c. Institutional backing (CoinFund lead, Coinbase Ventures, Anchorage Digital angel Mike Silagadze) provides strong corroborating clean-provenance signal — these VCs perform KYC on founders. Note: DPRK attackers (Lazarus Group) used ether.fi Liquid ETH vault as a drain venue in the Bybit hack (Feb 2025) — but attacker-as-user does NOT constitute team-side DPRK linkage and does NOT flag this factor. No DPRK escalation required. GREEN — no DPRK/Lazarus proximity.
Sources #
- URLOFAC SDN — Lazarus Group DesignationOFAC SDN search for Lazarus Group — Veda Labs, Seven Seas, named founders not listedretrieved 2026-05-17
- Veda $18M Raise — Investors ListedPR Newswire: CoinFund, Coinbase Ventures, Anchorage co-founder Nathan McCauley as investors — institutional KYC corroborates clean team provenanceretrieved 2026-05-17
Methodology #
Determine whether the deployer address has an on-chain path of ≤3 hops to a Chainalysis/OFAC DPRK-labeled cluster address.
See the full factor methodology and distribution across all protocols →