Contributor paid to DPRK-cluster wallet
Yearn Finance's assessment for RD-F-122 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Chainalysis or TRM DPRK cluster feed not publicly queryable for individual contributor payment address traversal. The Coordinape/Keller incident: banteg confirmed Keller's work was restricted to Coordinape (payroll coordination app); no confirmed routing of Keller wages to DPRK cluster via Yearn deployer or treasury addresses was publicly documented. Individual contributor payment addresses for the broader Yearn team are not enumerated publicly. Cannot assess without CTI feed access.
Sources #
- URLHow North Korea Infiltrated the Crypto IndustryCoinDesk DPRK investigation (Yahoo Finance mirror) — Keller scope confirmed by banteg; no routing to deployer chain documentedretrieved 2026-05-16
Methodology #
Determine whether protocol payments to any contributor wallet have an on-chain path ≤3 hops to a known DPRK-labeled cluster.
See the full factor methodology and distribution across all protocols →