DNS/CDN/frontend hash drift
BENQI's assessment for RD-F-105 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
DNS/frontend hash drift signal applicable to benqi.fi (standard web-hosted frontend; IPFS hash not published). Signal is v1 phase 2; external monitor stack not live. No documented DNS or frontend hash drift for benqi.fi in public data as of 2026-05-16. Note: bnqi.fi (registered 2026-03-11) is a separate phishing domain — not a hash drift of benqi.fi itself; assessed under F161 (Cat 11). BENQI Immunefi bounty scope explicitly includes DNS hijack attacks as in-scope threat. No Halborn webapp pentest anomaly reported for benqi.fi frontend. Pipeline not implemented.
Sources #
- URLBENQI Immunefi bounty scope — DNS hijack attacks in scopehttps://immunefi.com/bug-bounty/benqi/scope/retrieved 2026-05-16
- Halborn BENQI webapp pentest — no active anomaly reportedhttps://www.halborn.com/audits/benqi/benqi-webapp-pentestretrieved 2026-05-16
Methodology #
Detect whether the hash of production frontend JS changes versus the prior published hash, or a DNS config change is detected.
See the full factor methodology and distribution across all protocols →