★ Deployer linked within 3 hops to DPRK/Lazarus
Rocket Pool's assessment for RD-F-125 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No OSINT evidence links the deployer address, any named team member, or any oDAO member to DPRK/Lazarus cluster. Web search 'Rocket Pool DPRK Lazarus North Korea developer' returns zero Rocket Pool-specific results — only generic Lazarus/DPRK threat actor articles. No OFAC SDN match for the deployer address, team names (Rugendyke, Langley, Wallmann, Clapis), or named oDAO entities. Team is Australia-based (Brisbane) with multi-year verified employer and academic histories inconsistent with DPRK-implant profile. oDAO includes OFAC-compliant institutions (Coinbase, Etherscan, Consensys). No Lazarus-labeled wallet visible in deployer transaction history.
Sources #
- EtherscanRocket Pool: Deployer 2 on EtherscanEtherscan Deployer 2 transaction history — 415 transactions; no OFAC-listed or Lazarus-labeled wallets visible in interaction historyretrieved 2026-05-04
- Lazarus group search — null result for Rocket PoolWeb search 'Rocket Pool DPRK Lazarus North Korea developer' — zero Rocket Pool-specific results returned (2026-05-04)retrieved 2026-05-04
- https://github.com/darciusretrieved 2026-05-06
Methodology #
Determine whether the deployer address has an on-chain path of ≤3 hops to a Chainalysis/OFAC DPRK-labeled cluster address.
See the full factor methodology and distribution across all protocols →