defirisk.co
rubric v1.7.0

Deployer linked within 3 hops to DPRK/Lazarus

Wormhole's assessment for RD-F-125 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Deployer address linked within 3 hops to DPRK/Lazarus cluster | No DPRK/Lazarus cluster link found for deployer or any named team member. The 2022 hack attacker is DPRK-attributed but that is an external attacker who exploited the protocol — not a developer or contributor. No contributor wallet is known to have funding from or payment to DPRK-labeled addresses. OFAC SDN: no team member or guardian is listed. Chainalysis Lazarus cluster: not linked to any Wormhole-side address. | https://www.c...

Sources #

Methodology #

Determine whether the deployer address has an on-chain path of ≤3 hops to a Chainalysis/OFAC DPRK-labeled cluster address.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol wormhole factor RD-F-125 score gray collected_at 2026-04-28 01:38:43