defirisk.co
rubric v1.7.0

Social-media impersonation scam spike

Sanctum's assessment for RD-F-109 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Sanctum is a high-recognition Solana DeFi brand ($1.37B TVL, top-10 by TVL on Solana). Two confirmed malicious impersonator domains active: sanctumsol.com (registered 2024-05-27, trust score 0, flagged as malware by Gridinsoft and DNSFilter) and sanctums.network (registered 2024-05-29, trust score 0, flagged suspicious by IPQS, explicitly claims LST trading on Solana). Historical: July 2024 unstake.it domain loss used for phishing. Brand impersonation is a persistent elevated threat for this protocol. v1 deferred signal.

Sources #

Methodology #

Detect a sharp uptick in Discord/Telegram/X accounts impersonating the protocol team or announcing fake airdrops.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol sanctum factor RD-F-109 score yellow collected_at 2026-05-04 18:49:23