Preview surface — demo data. Where real data exists today (e.g. RealT, BlackRock BUIDL, Lift Dollar) we render it; everywhere else we render synthetic enrichment generated deterministically from public signal and clearly marked Demo or Inferred. The Phase 3 roadmap replaces every synthetic source with live ingestion — see Methodology → Exposure Graph & Similarity Engine.

Hubpay

Payment Rails, On/Off-Ramps & CBDCsmedium·risk 0.4300·TVL ·blast $0·active
Static profile (Identity / Contract / Dependency / Governance / Reputation)

Identity

Sector
Payment Rails, On/Off-Ramps & CBDCs
Subsector tags
infra_tooling, general_defiDemo
Chain deployments
Website
https://www.hubpay.xyzDemo
Launch date
Immutable
noDemo
Permissionless
noDemo

Contract

Primary address
Proxy pattern
n/a
Upgrade authority
n/a
Multisig threshold
Compiler
0.8.19
Uses assembly
noDemo
Bug bounty
noneDemo
Contract addresses
0xe8eec2d575d3ce5f174a2f014c318158da49dc89Demo
Audits tier
3

Dependency

Oracle providers
Bridge dependencies
Stablecoin dependencies
LST / LRT deps
Demo
DEX liquidity venues
velodrome, camelot, balancerDemo
CEX listings
Demo
Custodian
Demo
KMS provider
unknownDemo
RPC provider
quicknodeDemo
Frontend host
vercelDemo
npm lockfile sha
sha256:0e53854e0156f196bc75a035eefeb4aaccaf89432fbd360137ab8d906ea0544cDemo

Governance

Governance type
delegatedDemo
Governance token
0xf0ab710303c1bbb03230835ddfaf152f259b5d09Demo
Treasury size
$0Demo
Team size
25Demo
Jurisdiction
DEDemo
Incorporated entity
Hubpay FoundationDemo
Anonymous team
noDemo
Security disclosure
noDemo
IR SLA (hours)
Demo

Reputation

GitHub
https://github.com/hubpay/hubpayDemo
Commit velocity (30d)
0Demo
Contributors
47Demo
Twitter
@hubpayDemo
Discord
https://discord.gg/rif2eoDemo
Last incident
Sep 29, 2024Demo
KYT screening
cleanDemo

Threat History

1 recorded incident
phishing drainerhuman opunattributed_criminalDemo
$684.1K

On 2024-09-29, Hubpay suffered a phishing drainer incident resulting in approximately $684,128 in losses. The exploit targeted the human_op layer. Attribution: unattributed_criminal. This is a demonstration entry — not a real incident.

DEMO:AADAPT.TA0001DEMO:AADAPT.TA0040

Peer Incidents · Method B

5 root-cause predicate matches

Vulnerable to: phishing drainer

Matches the phishing drainer predicate

17 historical peer events
  • GoldfinchDemo
    $1M
  • BitgetDemo
    $739.9K
  • OrcaDemo
    $180.8K
  • Ether.fiDemo
    $443.4K
  • Alchemy PayDemo
    $334.2K
  • + 12 more

Vulnerable to: frontend dns hijack

Matches the frontend dns hijack predicate

12 historical peer events
  • Bridge.xyz / StripeDemo
    $10.4M
  • UK FCA Digital SandboxDemo
    $3.6M
  • Three SigmaDemo
    $2.7M
  • CryptoQuantDemo
    $517.3K
  • Celsius (defunct)Demo
    $22M
  • + 7 more

Vulnerable to: supply chain npm

Matches the supply chain npm predicate

10 historical peer events
  • Beefy FinanceDemo
    $176.2K
  • PowerledgerDemo
    $7.4M
  • UnichainDemo
    $8.8M
  • MEXCDemo
    $1M
  • Mango MarketsDemo
    $915.6K
  • + 5 more

Vulnerable to: dvn collapse

Matches the dvn collapse predicate

8 historical peer events
  • Blast, Blockdaemon Wallet +2Demo
    $93.6M
  • Fordefi, XSGDDemo
    $17M
  • Element Finance, QuantozDemo
    $1.1M
  • Mercado Bitcoin, SwellDemo
    $15.3M
  • Internet Computer (DFINITY), Mantle +1Demo
    $10.3M
  • + 3 more

Vulnerable to: governance proposal malicious

Matches the governance proposal malicious predicate

5 historical peer events
  • Stripe CryptoDemo
    $1.5M
  • Notional V3Demo
    $507.1K
  • Hong Kong Monetary Authority — Ethereum pilotsDemo
    $18.9M
  • FalconXDemo
    $4.8M
  • AvailDemo
    $30.8M

Dependency Twins · Method A + B + C ensemble

Top 10 of 25 precomputed
#1

Spruce ID

Identity, NFTs, Gaming & Consumer Apps · medium
Ensemble
0.422
A · Jaccard0.14
B · Overlap1
C · Cosine1.00
Matches on
  • kms_provider = unknown
  • frontend_host = vercel
  • subsector_tags = general_defi, infra_tooling
  • method_b_root_causes = phishing_drainer
#2

UK FCA Digital Sandbox

Payment Rails, On/Off-Ramps & CBDCs · medium
Ensemble
0.422
A · Jaccard0.14
B · Overlap1
C · Cosine1.00
Matches on
  • kms_provider = unknown
  • frontend_host = vercel
  • subsector_tags = general_defi, infra_tooling
  • method_b_root_causes = frontend_dns_hijack
#3

Mercado Bitcoin

Centralized Exchanges & Brokerages · medium
Ensemble
0.404
A · Jaccard0.13
B · Overlap1
C · Cosine0.95
Matches on
  • kms_provider = unknown
  • frontend_host = vercel
  • subsector_tags = infra_tooling, general_defi
  • method_b_root_causes = dvn_collapse
#4

Element Finance

Lending, Money Markets & CDPs · medium
Ensemble
0.404
A · Jaccard0.13
B · Overlap1
C · Cosine0.95
Matches on
  • kms_provider = unknown
  • frontend_host = vercel
  • subsector_tags = infra_tooling, general_defi
  • method_b_root_causes = dvn_collapse
#5

Internet Computer (DFINITY)

L1 & L2 Network Operators · medium
Ensemble
0.404
A · Jaccard0.13
B · Overlap1
C · Cosine0.95
Matches on
  • kms_provider = unknown
  • frontend_host = vercel
  • subsector_tags = infra_tooling, general_defi
  • method_b_root_causes = dvn_collapse
#6

Celsius (defunct)

Centralized Lenders & Market Makers · medium
Ensemble
0.383
A · Jaccard0.11
B · Overlap1
C · Cosine0.90
Matches on
  • kms_provider = unknown
  • frontend_host = vercel
  • subsector_tags = general_defi
  • method_b_root_causes = frontend_dns_hijack
#7

Chainbase

RPC, Node & Dev Infrastructure · medium
Ensemble
0.383
A · Jaccard0.10
B · Overlap1
C · Cosine0.91
Matches on
  • kms_provider = unknown
  • subsector_tags = general_defi, infra_tooling
  • method_b_root_causes = frontend_dns_hijack
#8

Hivemapper

DePIN & Physical Infrastructure Networks · medium
Ensemble
0.378
A · Jaccard0.10
B · Overlap1
C · Cosine0.89
Matches on
  • kms_provider = unknown
  • subsector_tags = general_defi, infra_tooling
  • method_b_root_causes = dvn_collapse
#9

Curve Finance

Smart-Contract DEXs, AMMs & Aggregators · medium
Ensemble
0.377
A · Jaccard0.13
B · Overlap1
C · Cosine0.86
Matches on
  • kms_provider = unknown
  • frontend_host = vercel
  • subsector_tags = infra_tooling, general_defi
  • method_b_root_causes = phishing_drainer
#10

Three Sigma

Security, Audit & Insurance Vendors · medium
Ensemble
0.376
A · Jaccard0.08
B · Overlap1
C · Cosine0.91
Matches on
  • frontend_host = vercel
  • subsector_tags = infra_tooling, general_defi
  • method_b_root_causes = frontend_dns_hijack