★ Deployer linked within 3 hops to DPRK/Lazarus
Stake DAO's assessment for RD-F-125 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Deployer funding chain: Binance (global CEX) to primary deployer to internal relay to active deployer. No OFAC-sanctioned address in this chain. Web searches for 'Stake DAO DPRK Lazarus North Korea developer' and 'Julien Bouteloup DPRK Lazarus group' return zero results linking any Stake DAO team member to DPRK infrastructure. The $41M 'Stake rekt' DPRK event in the data cache refers to Stake.com (online casino), not Stake DAO — confirmed by FBI attribution statement and rekt.news article content identifying 'Stake, an on-chain casino platform backed by Drake'. No Lazarus cluster proximity detected at any hop of the deployer chain. No escalation required.
Sources #
- URLFBI identifies North Korea Lazarus Group as culprit in $41M Stake exploit — CryptoSlateFBI Lazarus attribution for Stake.com casino (NOT Stake DAO) — confirms name collisionretrieved 2026-05-16
- Stake DAO: Deployer — EtherscanPrimary deployer Etherscan — Funded By Binance, no sanctioned address in chainretrieved 2026-05-16
Methodology #
Determine whether the deployer address has an on-chain path of ≤3 hops to a Chainalysis/OFAC DPRK-labeled cluster address.
See the full factor methodology and distribution across all protocols →