★ Deployer linked within 3 hops to DPRK/Lazarus
Venus Protocol's assessment for RD-F-125 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
No DPRK or Lazarus Group proximity found in any public source, Chainalysis publication, OFAC SDN list lookup, or OSINT. Deployer funding chain traces: Deployer ← 0x76aFd2… (intermediate, 25 transactions, Sept 2020 origin) ← Binance Hot Wallet (OFAC-compliant major centralized exchange, not DPRK-associated). Team leadership consists of publicly identified Western individuals: Joselito Lizarondo (Filipino-American entrepreneur, Swipe/Binance affiliation), Brad Harrison (US-based, Harvard/Cambridge academic background). No OFAC SDN list entries found for any Venus-associated entity. No Chainalysis report or public DPRK cluster attribution found connecting Venus, Venus Labs, or any Venus-privileged address to the Lazarus Group or DPRK-affiliated clusters. BSC's Binance infrastructure affiliation does not create Lazarus proximity.
Sources #
- URLHow Chainalysis and Hexagate Stopped the Venus Protocol Hacker | ChainalysisChainalysis - Hexagate stopped Venus governance attack (no Lazarus association)retrieved 2026-04-28
- DPRK/Lazarus proximity search - no Venus resultsWeb search result: no results for 'Venus Protocol DPRK Lazarus North Korea developer'retrieved 2026-04-28
- Deployer funder wallet - funded by Binance Hot Wallet | BscScanBscScan - Deployer funder wallet - funded by Binance Hot Walletretrieved 2026-04-28
Methodology #
Determine whether the deployer address has an on-chain path of ≤3 hops to a Chainalysis/OFAC DPRK-labeled cluster address.
See the full factor methodology and distribution across all protocols →