Social-media impersonation scam spike
USDD (Decentralized USD)'s assessment for RD-F-109 — scored yellow on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Social-media impersonation scam-spike signal is applicable. USDD/TRON/Justin Sun is a very high-recognition brand with a documented scam-impersonation surface. Evidence: (1) Blockaid 2025 documented 4,200+ malicious dApps using stablecoin branding in URLs/page titles — USDD is a named stablecoin brand. (2) JustLend ecosystem (TRON protocol sharing Justin Sun/TRON DAO brand) had confirmed phishing infrastructure (justlend-dao.com, per JustLend process-learnings Cat 11 red finding). (3) Justin Sun's high social media presence and SEC settlement (March 2026) create ongoing opportunistic impersonation surface. (4) Over 54,000 fraudulent stablecoin tokens documented across chains (Cybernews). Yellow: persistently elevated social-media impersonation baseline; no confirmed acute single-day scam spike in accessible public records today but structural conditions make this signal near-continuously elevated for USDD.
Sources #
- URLBlockaid: Stablecoin Impersonation Threats 2025Blockaid — stablecoin impersonation threats: 4,200+ malicious dApps using stablecoin branding in 2025retrieved 2026-05-17
- M3a process learnings JustLend Cat 11 outcomeprocess-learnings.md §justlend outcome: Cat 11 red for F161 justlend-dao.com phishing infra — same TRON/Justin Sun brand ecosystemretrieved 2026-05-17
Methodology #
Detect a sharp uptick in Discord/Telegram/X accounts impersonating the protocol team or announcing fake airdrops.
See the full factor methodology and distribution across all protocols →