Preview surface — demo data. Where real data exists today (e.g. RealT, BlackRock BUIDL, Lift Dollar) we render it; everywhere else we render synthetic enrichment generated deterministically from public signal and clearly marked Demo or Inferred. The Phase 3 roadmap replaces every synthetic source with live ingestion — see Methodology → Exposure Graph & Similarity Engine.

Tensor

Identity, NFTs, Gaming & Consumer Appshigh·risk 0.6126·TVL $300.4K·blast $300.4K·active
Static profile (Identity / Contract / Dependency / Governance / Reputation)

Identity

Sector
Identity, NFTs, Gaming & Consumer Apps
Subsector tags
infra_tooling, consumer_app, general_defiDemo
Chain deployments
Solana
Website
https://www.tensor.xyzDemo
Launch date
May 8, 2026
Immutable
noDemo
Permissionless
yesDemo

Contract

Primary address
Proxy pattern
UNKNOWN
Upgrade authority
UNKNOWN
Multisig threshold
Compiler
0.8.13
Uses assembly
noDemo
Bug bounty
noneDemo
Contract addresses
0xc33639051908d0a244e9f4a6752d384789f7fd23, 0xbc222d30fbb003f89bfe61818de9a02d12a6b985Demo
Audits tier
0

Dependency

Oracle providers
Bridge dependencies
Stablecoin dependencies
LST / LRT deps
Demo
DEX liquidity venues
curve, balancer, pancakeswapDemo
CEX listings
Demo
Custodian
Demo
KMS provider
gcp_kmsDemo
RPC provider
infuraDemo
Frontend host
cloudflare_pagesDemo
npm lockfile sha
sha256:02aa3559c472c474d1c679a74c503fecd0fe82a70e0e15e399b089d2953f1d22Demo

Governance

Governance type
token_votingDemo
Governance token
0x2d032921ff903d32d51d5c9627dee4cf672770c2Demo
Treasury size
$16.3KDemo
Team size
66Demo
Jurisdiction
ILDemo
Incorporated entity
Tensor Holdings AGDemo
Anonymous team
noDemo
Security disclosure
noDemo
IR SLA (hours)
Demo

Reputation

GitHub
https://github.com/tensor/tensorDemo
Commit velocity (30d)
60Demo
Contributors
52Demo
Twitter
@tensorDemo
Discord
https://discord.gg/wmp7n4Demo
Last incident
Oct 6, 2022Demo
KYT screening
cleanDemo

Threat History

1 recorded incident
ice phishing approvalhuman opdprk_lazarusDemo
$183K

On 2022-10-06, Tensor suffered a ice phishing approval incident resulting in approximately $182,977 in losses. The exploit targeted the human_op layer. Attribution: dprk_lazarus. This is a demonstration entry — not a real incident.

DEMO:AADAPT.TA0001DEMO:AADAPT.TA0040

Peer Incidents · Method B

11 root-cause predicate matches

Vulnerable to: reentrancy

Matches the reentrancy predicate

28 historical peer events
  • SommelierDemo
    $30.7M
  • Kyber NetworkDemo
    $2.1M
  • DeribitDemo
    $936K
  • Zora NetworkDemo
    $4.7M
  • Stader LabsDemo
    $16.1M
  • + 23 more

Vulnerable to: phishing drainer

Matches the phishing drainer predicate

18 historical peer events
  • GoldfinchDemo
    $1M
  • BitgetDemo
    $739.9K
  • OrcaDemo
    $180.8K
  • Ether.fiDemo
    $443.4K
  • Alchemy PayDemo
    $334.2K
  • + 13 more

Vulnerable to: flash loan governance

Matches the flash loan governance predicate

18 historical peer events
  • ThirdwebDemo
    $33.2M
  • LayerZero Labs (physical verification context only)Demo
    $40.2M
  • First Digital USDDemo
    $12.1M
  • Protocol-Native Treasury Agents (DAO-embedded)Demo
    $13.8M
  • F2PoolDemo
    $3.5M
  • + 13 more

Vulnerable to: ice phishing approval

Matches the ice phishing approval predicate

15 historical peer events
  • deBridgeDemo
    $7.5M
  • EulerDemo
    $87.9K
  • Bend DAODemo
    $968.9K
  • Maple FinanceDemo
    $1.4M
  • BlurDemo
    $6.5M
  • + 10 more

Vulnerable to: frontend dns hijack

Matches the frontend dns hijack predicate

12 historical peer events
  • Bridge.xyz / StripeDemo
    $10.4M
  • UK FCA Digital SandboxDemo
    $3.6M
  • Three SigmaDemo
    $2.7M
  • CryptoQuantDemo
    $517.3K
  • Celsius (defunct)Demo
    $22M
  • + 7 more

Vulnerable to: rounding precision

Matches the rounding precision predicate

10 historical peer events
  • Frax EtherDemo
    $51.2K
  • BNY Mellon DigitalDemo
    $750K
  • RedStoneDemo
    $63.2K
  • Bend DAODemo
    $57.9K
  • Starknet BridgeDemo
    $784.1K
  • + 5 more

Vulnerable to: supply chain npm

Matches the supply chain npm predicate

10 historical peer events
  • Beefy FinanceDemo
    $176.2K
  • PowerledgerDemo
    $7.4M
  • UnichainDemo
    $8.8M
  • MEXCDemo
    $1M
  • Mango MarketsDemo
    $915.6K
  • + 5 more

Vulnerable to: kms misconfiguration

Matches the kms misconfiguration predicate

9 historical peer events
  • Stably, Inc. (issuance via regulated partners depending on program)Demo
    $505K
  • MatrixdockDemo
    $4.3M
  • EulerDemo
    $3.6M
  • NosanaDemo
    $1.7M
  • Tron FoundationDemo
    $1.3M
  • + 4 more

Vulnerable to: dvn collapse

Matches the dvn collapse predicate

8 historical peer events
  • Blast, Blockdaemon Wallet +2Demo
    $93.6M
  • Fordefi, XSGDDemo
    $17M
  • Element Finance, QuantozDemo
    $1.1M
  • Mercado Bitcoin, SwellDemo
    $15.3M
  • Internet Computer (DFINITY), Mantle +1Demo
    $10.3M
  • + 3 more

Vulnerable to: governance proposal malicious

Matches the governance proposal malicious predicate

5 historical peer events
  • Stripe CryptoDemo
    $1.5M
  • Notional V3Demo
    $507.1K
  • Hong Kong Monetary Authority — Ethereum pilotsDemo
    $18.9M
  • FalconXDemo
    $4.8M
  • AvailDemo
    $30.8M

Vulnerable to: prompt injection agent

Matches the prompt injection agent predicate

4 historical peer events
  • LodestarDemo
    $3.2M
  • Ether.fi CashDemo
    $4.6M
  • HTX (Huobi)Demo
    $3.7M
  • SwellDemo
    $403K

Dependency Twins · Method A + B + C ensemble

Top 10 of 25 precomputed
#1

Sanctum

Liquid Staking & Restaking · critical
Ensemble
0.406
A · Jaccard0.11
B · Overlap2
C · Cosine0.71
Matches on
  • subsector_tags = general_defi, consumer_app
  • chain_deployments = Solana
  • method_b_root_causes = reentrancy
#2

Unichain

Rollups, Data Availability & ZK Infra · high
Ensemble
0.405
A · Jaccard0.07
B · Overlap2
C · Cosine0.75
Matches on
  • frontend_host = cloudflare_pages
  • subsector_tags = general_defi, consumer_app
  • method_b_root_causes = frontend_dns_hijack, supply_chain_npm
#3

Pyth Network

Oracles & Off-Chain Data Networks · medium
Ensemble
0.400
A · Jaccard0.16
B · Overlap1
C · Cosine0.91
Matches on
  • frontend_host = cloudflare_pages
  • subsector_tags = infra_tooling, general_defi, consumer_app
  • chain_deployments = Solana
  • method_b_root_causes = ice_phishing_approval
#4

Deribit

Centralized Exchanges & Brokerages · critical
Ensemble
0.393
A · Jaccard0.05
B · Overlap2
C · Cosine0.72
Matches on
  • subsector_tags = general_defi, consumer_app, infra_tooling
  • chain_deployments = Solana
  • method_b_root_causes = reentrancy, rounding_precision
#5

HTX (Huobi)

Centralized Exchanges & Brokerages · critical
Ensemble
0.391
A · Jaccard0.08
B · Overlap2
C · Cosine0.69
Matches on
  • frontend_host = cloudflare_pages
  • subsector_tags = infra_tooling, consumer_app, general_defi
  • chain_deployments = Solana
  • method_b_root_causes = frontend_dns_hijack, prompt_injection_agent
#6

Bend DAO

Lending, Money Markets & CDPs · critical
Ensemble
0.389
A · Jaccard0.09
B · Overlap2
C · Cosine0.68
Matches on
  • kms_provider = gcp_kms
  • subsector_tags = general_defi, infra_tooling
  • method_b_root_causes = ice_phishing_approval, rounding_precision
#7

JustLend

Lending, Money Markets & CDPs · high
Ensemble
0.385
A · Jaccard0.04
B · Overlap2
C · Cosine0.71
Matches on
  • subsector_tags = consumer_app, general_defi, infra_tooling
  • method_b_root_causes = reentrancy
#8

Kotani Pay

Payment Rails, On/Off-Ramps & CBDCs · medium
Ensemble
0.384
A · Jaccard0.13
B · Overlap1
C · Cosine0.89
Matches on
  • kms_provider = gcp_kms
  • frontend_host = cloudflare_pages
  • subsector_tags = consumer_app, general_defi
  • method_b_root_causes = dvn_collapse
#9

Mango Markets

Smart-Contract DEXs, AMMs & Aggregators · low
Ensemble
0.380
A · Jaccard0.15
B · Overlap1
C · Cosine0.85
Matches on
  • frontend_host = cloudflare_pages
  • subsector_tags = consumer_app, infra_tooling
  • chain_deployments = Solana
  • method_b_root_causes = supply_chain_npm
#10

Blur

Identity, NFTs, Gaming & Consumer Apps · high
Ensemble
0.366
A · Jaccard0.04
B · Overlap2
C · Cosine0.65
Matches on
  • subsector_tags = infra_tooling, general_defi, consumer_app
  • method_b_root_causes = reentrancy, ice_phishing_approval