Known-threat-actor cluster has touched protocol
JustLend DAO's assessment for RD-F-158 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Known-threat-actor wallet cluster touching protocol — T-09 phase-2 signal; applicable for TRON substrate but requires proprietary feed. TRON is a documented Lazarus Group laundering destination (Chainalysis 2024). OFAC March 2026 designations for DPRK IT worker schemes included TRON-network cryptocurrency addresses. No public source confirms a designated TRON address interacting specifically with JustLend core contracts (Unitroller, GovernorBravo, PriceOracleProxy). Requires TRM Labs or Chainalysis TRON-native cluster analysis. OFAC public designation list was checked — no specific JustLend contract interaction confirmed.
Sources #
- URLChainalysis — OFAC DPRK IT Workers Crypto Designations March 2026Chainalysis — OFAC Targets DPRK IT Workers Using Crypto, March 2026 — includes TRON-network addresses in designationsretrieved 2026-05-17
- Curator assessment — TRON threat-actor cluster gapPublic OFAC SDN list checked — no specific JustLend contract interaction found. TRON is documented Lazarus laundering channel but no JustLend-specific finding in public sources. Requires TRM Labs or Chainalysis TRON-cluster proprietary feed for definitive assessment.retrieved 2026-05-17
Methodology #
Detect whether an address from the curator-maintained threat-actor cluster (past exploiters, labeled attacker families) interacted with this protocol in the last 30 days.
See the full factor methodology and distribution across all protocols →