★ Deployer linked within 3 hops to DPRK/Lazarus
QuickSwap's assessment for RD-F-125 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
OSINT search 'QuickSwap Sameep Singhania DPRK Lazarus North Korea' returned zero relevant results - only generic DPRK sanctions content with no QuickSwap connection. All four admin signer wallets reviewed on Polygonscan show normal DeFi activity with no OFAC-sanctioned counterparties visible at 1-hop. OFAC SDN list: no QuickSwap address found. No Chainalysis public advisory flags any QuickSwap address. No Lazarus cluster proximity found in available public data. U4 instruction applied: attacker-using-QuickSwap-as-drain-venue does NOT flag F125.
Sources #
- URLOFAC DPRK Cyber Groups Designation - No QuickSwap mentionWebSearch 2026-05-16: 'QuickSwap Sameep Singhania DPRK Lazarus North Korea' - zero QuickSwap-specific resultsretrieved 2026-05-16
- QuickSwap Admin Multisig - Owner Set PolygonscanPolygonscan reviews of all 4 admin signer wallets - no sanctioned counterparties at 1-hopretrieved 2026-05-16
Methodology #
Determine whether the deployer address has an on-chain path of ≤3 hops to a Chainalysis/OFAC DPRK-labeled cluster address.
See the full factor methodology and distribution across all protocols →