Preview surface — demo data. Where real data exists today (e.g. RealT, BlackRock BUIDL, Lift Dollar) we render it; everywhere else we render synthetic enrichment generated deterministically from public signal and clearly marked Demo or Inferred. The Phase 3 roadmap replaces every synthetic source with live ingestion — see Methodology → Exposure Graph & Similarity Engine.

Bend DAO

Lending, Money Markets & CDPscritical·risk 0.6842·TVL $669.1K·blast $669.1K·active
Static profile (Identity / Contract / Dependency / Governance / Reputation)

Identity

Sector
Lending, Money Markets & CDPs
Subsector tags
general_defi, infra_toolingDemo
Chain deployments
ApeChain, Ethereum
Website
https://www.bend-dao.xyzDemo
Launch date
Feb 20, 2023
Immutable
noDemo
Permissionless
yesDemo

Contract

Primary address
0x0d02755a5700414B26FF040e1dE35D337DF56218
Proxy pattern
transparent
Upgrade authority
contract
Multisig threshold
Compiler
0.8.19
Uses assembly
yesDemo
Bug bounty
noneDemo
Contract addresses
0x0d02755a5700414B26FF040e1dE35D337DF56218Demo
Audits tier
0

Dependency

Oracle providers
Bridge dependencies
Stablecoin dependencies
LST / LRT deps
Demo
DEX liquidity venues
uniswap_v4, velodrome, uniswap_v3Demo
CEX listings
Demo
Custodian
Demo
KMS provider
gcp_kmsDemo
RPC provider
self_hostedDemo
Frontend host
ipfsDemo
npm lockfile sha
sha256:c8dcf83f7e9c00a0107d1b162f6e821dceec814176fdcf2410812cee5dd668ffDemo

Governance

Governance type
multisig_councilDemo
Governance token
Demo
Treasury size
$9.9KDemo
Team size
56Demo
Jurisdiction
OTHERDemo
Incorporated entity
Bend DAO FoundationDemo
Anonymous team
noDemo
Security disclosure
noDemo
IR SLA (hours)
Demo

Reputation

GitHub
https://github.com/bend-dao/bend-daoDemo
Commit velocity (30d)
94Demo
Contributors
29Demo
Twitter
@bend-daoDemo
Discord
https://discord.gg/tsgx2mDemo
Last incident
Feb 18, 2025Demo
KYT screening
mixedDemo

Threat History

3 recorded incidents
ice phishing approvalhuman opunknownDemo
$968.9K

On 2025-02-18, Bend DAO suffered a ice phishing approval incident resulting in approximately $968,934 in losses. The exploit targeted the human_op layer. Attribution: unknown. This is a demonstration entry — not a real incident.

DEMO:AADAPT.TA0001DEMO:AADAPT.TA0040
oracle manipulationprotocolunattributed_criminalDemo
$35.3M

On 2025-01-30, Bend DAO suffered a oracle manipulation incident resulting in approximately $35,299,287 in losses. The exploit targeted the protocol layer. A flash loan was used to amplify the attack. Attribution: unattributed_criminal. This is a demonstration entry — not a real incident.

DEMO:AADAPT.TA0040DEMO:AADAPT.TA0007
View incident →Audited at timeFlash loan
rounding precisionprotocoldprk_lazarusDemo
$57.9K

On 2024-11-22, Bend DAO suffered a rounding precision incident resulting in approximately $57,913 in losses. The exploit targeted the protocol layer. Attribution: dprk_lazarus. This is a demonstration entry — not a real incident.

DEMO:AADAPT.TA0004

Peer Incidents · Method B

9 root-cause predicate matches

Vulnerable to: reentrancy

Matches the reentrancy predicate

28 historical peer events
  • SommelierDemo
    $30.7M
  • Kyber NetworkDemo
    $2.1M
  • DeribitDemo
    $936K
  • Zora NetworkDemo
    $4.7M
  • Stader LabsDemo
    $16.1M
  • + 23 more

Vulnerable to: phishing drainer

Matches the phishing drainer predicate

18 historical peer events
  • GoldfinchDemo
    $1M
  • BitgetDemo
    $739.9K
  • OrcaDemo
    $180.8K
  • Ether.fiDemo
    $443.4K
  • Alchemy PayDemo
    $334.2K
  • + 13 more

Vulnerable to: ice phishing approval

Matches the ice phishing approval predicate

15 historical peer events
  • deBridgeDemo
    $7.5M
  • EulerDemo
    $87.9K
  • Maple FinanceDemo
    $1.4M
  • BlurDemo
    $6.5M
  • MEXCDemo
    $211.8K
  • + 10 more

Vulnerable to: supply chain npm

Matches the supply chain npm predicate

10 historical peer events
  • Beefy FinanceDemo
    $176.2K
  • PowerledgerDemo
    $7.4M
  • UnichainDemo
    $8.8M
  • MEXCDemo
    $1M
  • Mango MarketsDemo
    $915.6K
  • + 5 more

Vulnerable to: rounding precision

Matches the rounding precision predicate

9 historical peer events
  • Frax EtherDemo
    $51.2K
  • BNY Mellon DigitalDemo
    $750K
  • RedStoneDemo
    $63.2K
  • Starknet BridgeDemo
    $784.1K
  • Lift Dollar (USDL)Demo
    $109.9K
  • + 4 more

Vulnerable to: kms misconfiguration

Matches the kms misconfiguration predicate

9 historical peer events
  • Stably, Inc. (issuance via regulated partners depending on program)Demo
    $505K
  • MatrixdockDemo
    $4.3M
  • EulerDemo
    $3.6M
  • NosanaDemo
    $1.7M
  • Tron FoundationDemo
    $1.3M
  • + 4 more

Vulnerable to: dvn collapse

Matches the dvn collapse predicate

8 historical peer events
  • Blast, Blockdaemon Wallet +2Demo
    $93.6M
  • Fordefi, XSGDDemo
    $17M
  • Element Finance, QuantozDemo
    $1.1M
  • Mercado Bitcoin, SwellDemo
    $15.3M
  • Internet Computer (DFINITY), Mantle +1Demo
    $10.3M
  • + 3 more

Vulnerable to: signature malleability

Matches the signature malleability predicate

8 historical peer events
  • Ether.fiDemo
    $17.2M
  • Swell NetworkDemo
    $1.2M
  • Immutable protocolDemo
    $4M
  • The SandboxDemo
    $3.9M
  • PancakeSwapDemo
    $656.7K
  • + 3 more

Vulnerable to: prompt injection agent

Matches the prompt injection agent predicate

4 historical peer events
  • LodestarDemo
    $3.2M
  • Ether.fi CashDemo
    $4.6M
  • HTX (Huobi)Demo
    $3.7M
  • SwellDemo
    $403K

Dependency Twins · Method A + B + C ensemble

Top 10 of 25 precomputed
#1

Euler

Lending, Money Markets & CDPs · low
Ensemble
0.503
A · Jaccard0.08
B · Overlap3
C · Cosine0.80
Matches on
  • subsector_tags = general_defi, infra_tooling
  • chain_deployments = Ethereum
  • method_b_root_causes = signature_malleability, kms_misconfiguration, ice_phishing_approval
#2

Notional Finance

Lending, Money Markets & CDPs · high
Ensemble
0.466
A · Jaccard0.12
B · Overlap2
C · Cosine0.90
Matches on
  • frontend_host = ipfs
  • subsector_tags = general_defi, infra_tooling
  • chain_deployments = Ethereum
  • method_b_root_causes = reentrancy, ice_phishing_approval
#3

Swell

Liquid Staking & Restaking · medium
Ensemble
0.414
A · Jaccard0.09
B · Overlap2
C · Cosine0.75
Matches on
  • frontend_host = ipfs
  • subsector_tags = general_defi
  • chain_deployments = Ethereum
  • method_b_root_causes = dvn_collapse, prompt_injection_agent
#4

Blur

Identity, NFTs, Gaming & Consumer Apps · high
Ensemble
0.408
A · Jaccard0.05
B · Overlap2
C · Cosine0.77
Matches on
  • subsector_tags = general_defi, infra_tooling
  • chain_deployments = Ethereum
  • method_b_root_causes = reentrancy, ice_phishing_approval
#5

Immutable protocol

Stablecoin Issuers & Synthetic Dollars · medium
Ensemble
0.401
A · Jaccard0.07
B · Overlap2
C · Cosine0.74
Matches on
  • subsector_tags = general_defi, infra_tooling
  • chain_deployments = Ethereum
  • method_b_root_causes = signature_malleability
#6

Stripe (Crypto On-Ramp APIs)

Payment Rails, On/Off-Ramps & CBDCs · medium
Ensemble
0.393
A · Jaccard0.14
B · Overlap1
C · Cosine0.90
Matches on
  • kms_provider = gcp_kms
  • frontend_host = ipfs
  • subsector_tags = infra_tooling, general_defi
  • method_b_root_causes = dvn_collapse
#7

Lift Dollar (USDL)

Stablecoin Issuers & Synthetic Dollars · high
Ensemble
0.388
A · Jaccard0.05
B · Overlap2
C · Cosine0.71
Matches on
  • subsector_tags = general_defi
  • chain_deployments = Ethereum
  • method_b_root_causes = reentrancy, rounding_precision
#8

Ether.fi

Liquid Staking & Restaking · high
Ensemble
0.388
A · Jaccard0.05
B · Overlap2
C · Cosine0.71
Matches on
  • subsector_tags = general_defi, infra_tooling
  • chain_deployments = Ethereum
  • method_b_root_causes = signature_malleability, phishing_drainer
#9

The Sandbox

Identity, NFTs, Gaming & Consumer Apps · low
Ensemble
0.382
A · Jaccard0.05
B · Overlap2
C · Cosine0.69
Matches on
  • subsector_tags = general_defi, infra_tooling
  • chain_deployments = Ethereum
  • method_b_root_causes = signature_malleability, ice_phishing_approval
#10

Ether.fi Cash

Lending, Money Markets & CDPs · high
Ensemble
0.382
A · Jaccard0.05
B · Overlap2
C · Cosine0.69
Matches on
  • subsector_tags = general_defi, infra_tooling
  • chain_deployments = Ethereum
  • method_b_root_causes = supply_chain_npm, prompt_injection_agent