Contributor paid to DPRK-cluster wallet
Uniswap (v2 + v3)'s assessment for RD-F-122 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No evidence of contributor payment routing within 3 hops to DPRK cluster. Uniswap Labs is a VC-funded Delaware C-corp paying salaries in USD fiat. On-chain protocol payments transit Compound Bravo governance Timelock and Foundation multisig — not direct deployer-to-contributor paths. No OFAC SDN entry for any Uniswap Labs contributor. DPRK adversarial DEX use (Bybit 2025) is categorically different from contributor payment proximity.
Detail #
Combined v2+v3 assessment. The DPRK distinction is explicitly documented: IC3 PSA250226 (March 2025) describes North Korea's use of Uniswap V3 pools as part of Bybit hack fund laundering. This is adversarial third-party use of permissionless DEX infrastructure — not a payment routed from Uniswap Labs to a DPRK-labeled wallet. TRM Labs Bybit analysis confirms the same distinction. The Uniswap Foundation distributes grants via its multisig through a DAO-approved process, with all signers publicly identified.
Sources #
- URL
- IC3 — North Korea Responsible for $1.5B Bybit HackFBI/IC3 PSA250226 — North Korea responsible for Bybit hack (adversarial DEX use, not dev identity link)retrieved 2026-05-12
- The Bybit Hack: Following North Korea's Largest Exploit — TRM LabsTRM Labs — Bybit hack laundering trail (DEX usage, no Uniswap dev proximity)retrieved 2026-05-12
Methodology #
Determine whether protocol payments to any contributor wallet have an on-chain path ≤3 hops to a known DPRK-labeled cluster.
See the full factor methodology and distribution across all protocols →