defirisk.co
rubric v1.7.0

Real-capital social-engineering persona

Hyperliquid's assessment for RD-F-184 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No curator-flagged social-engineering persona with >=1M attributed real-capital deposits identified for Hyperliquid. The DPRK trading activity in December 2024 (~$70M+ in/out) was characterized by researchers as reconnaissance/platform familiarization by external state-actor wallets, not an insider persona-building operation matching the F184 definition (team contributor or external integrator with deliberate credibility-building capital). No Drift-Protocol-UNC4736-class (6-month conference in-person infiltration) pattern found. Low-confidence assessment due to M-curation requirement; curator should review if any later intelligence identifies a persona-building campaign targeting Hyperliquid team specifically.

Sources #

Methodology #

Determine whether a curator-flagged "team contributor" or "external integrator" persona has ≥$1M of attributed real-capital deposits to the target protocol or peer protocols, potentially used to build credibility ahead of a social-engineering attack.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol hyperliquid factor RD-F-184 score green collected_at 2026-04-28 13:58:49