★ Deployer linked within 3 hops to DPRK/Lazarus
EigenLayer's assessment for RD-F-125 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No evidence of EigenLayer deployer wallet or team member wallets being within 3 hops of DPRK / Lazarus cluster. OSINT search specifically targeting 'EigenLayer Eigen Labs DPRK Lazarus North Korea developer' returned zero results connecting the EigenLayer development team to the Lazarus cluster. The April 2026 Kelp DAO $292M exploit attributed to the Lazarus Group (DPRK-nexus) targeted a protocol BUILT ON TOP OF EigenLayer via Kelp's own 1/1 LayerZero DVN misconfiguration — this is a downstream user protocol hack, not an EigenLayer team wallet / deployer connection. OFAC SDN list does not contain Eigen Labs, Eigen Foundation, or any named EigenLayer team member. No public Chainalysis report links Eigen Labs wallet to Lazarus cluster. ESCALATION: NOT REQUIRED — RD-F-125 is green.
Sources #
- URLNorth Korea's Lazarus APT stole $290M from Kelp DAO — Security AffairsKelp DAO Lazarus exploit — North Korea's Lazarus targeted Kelp DAO, not EigenLayer teamretrieved 2026-04-28
- Eigen Labs — Engineering and ResearchWebSearch — EigenLayer Eigen Labs DPRK Lazarus North Korea developer — zero relevant results connecting team to DPRKretrieved 2026-04-28
- LayerZero blames Kelp's setup for $290 million exploit — CoinDeskCoinDesk — LayerZero attributes $290M Kelp hack to Lazarus — confirms EigenLayer not implicatedretrieved 2026-04-28
Methodology #
Determine whether the deployer address has an on-chain path of ≤3 hops to a Chainalysis/OFAC DPRK-labeled cluster address.
See the full factor methodology and distribution across all protocols →