Incident response time (minutes)
dYdX v4 (dYdX Chain)'s assessment for RD-F-085 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Oct 2025: Chain halt began 5:35 PM ET Oct 10; dYdX communicated publicly same evening; formal incident review published Oct 24 (~14 days). Feb 2026 supply-chain: disclosure Jan 28 ~12:19 UTC; dYdX acknowledged same day via X. Response appears prompt in both cases but exact first-statement minute-level timestamps not confirmed from primary sources. Yellow — directionally good but precise timing not fully confirmed.
Sources #
- URLMalicious dYdX Packages Published to npm and PyPISocket.dev disclosure timeline — Feb 2026 supply chainretrieved 2026-05-17
- October 2025: dYdX Chain Incident Review & Community UpdateOct 2025 incident review — timeline detailsretrieved 2026-05-17
Methodology #
Measure the time in minutes from the first exploit transaction to the first official team statement for the most recent incident.
See the full factor methodology and distribution across all protocols →