Preview surface — demo data. Where real data exists today (e.g. RealT, BlackRock BUIDL, Lift Dollar) we render it; everywhere else we render synthetic enrichment generated deterministically from public signal and clearly marked Demo or Inferred. The Phase 3 roadmap replaces every synthetic source with live ingestion — see Methodology → Exposure Graph & Similarity Engine.

Ondo Finance

Tokenized Real-World Assetsmedium·risk 0.3743·TVL $2.7B·blast $2.7B·active
Static profile (Identity / Contract / Dependency / Governance / Reputation)

Identity

Sector
Tokenized Real-World Assets
Subsector tags
real_estate, treasuryDemo
Chain deployments
Aptos, Arbitrum, Ethereum, Mantle, Noble, Plume Mainnet, Polygon, Ripple, Sei, Solana, Stellar, Sui
Website
https://www.ondo-finance.xyzDemo
Launch date
Immutable
noDemo
Permissionless
yesDemo

Contract

Primary address
0xfaba6f8e4a5e8ab82f62fe7c39859fa577269be3
Proxy pattern
none
Upgrade authority
UNKNOWN
Multisig threshold
Compiler
0.7.6
Uses assembly
noDemo
Bug bounty
immunefiDemo
Contract addresses
0xfaba6f8e4a5e8ab82f62fe7c39859fa577269be3Demo
Audits tier
2

Dependency

Oracle providers
Chainlink
Bridge dependencies
LayerZero
Stablecoin dependencies
USDC, USDY
LST / LRT deps
Demo
DEX liquidity venues
velodrome, balancer, pancakeswapDemo
CEX listings
gateio, kraken, coinbase, bitgetDemo
Custodian
Demo
KMS provider
unknownDemo
RPC provider
quicknodeDemo
Frontend host
vercelDemo
npm lockfile sha
sha256:e401c76e7c6eba444cc8609d01c0285000043e93a4c55a552585bb9e9640f951Demo

Governance

Governance type
token_votingDemo
Governance token
0x155522488bf6fe67a2f7a93b7f2f561a0ed90711Demo
Treasury size
$48MDemo
Team size
279Demo
Jurisdiction
GBDemo
Incorporated entity
Ondo Finance Holdings AGDemo
Anonymous team
yesDemo
Security disclosure
yesDemo
IR SLA (hours)
12Demo

Reputation

GitHub
https://github.com/ondo-finance/ondo-financeDemo
Commit velocity (30d)
0Demo
Contributors
52Demo
Twitter
@ondo-financeDemo
Discord
https://discord.gg/yj5tk1Demo
Last incident
Nov 12, 2024Demo
KYT screening
sanctioned_exposureDemo

Threat History

4 recorded incidents
cross chain replayprotocolunknownDemo
$1.2M

On 2024-11-12, Ondo Finance suffered a cross chain replay incident resulting in approximately $1,175,887 in losses. The exploit targeted the protocol layer. Attribution: unknown. This is a demonstration entry — not a real incident.

DEMO:AADAPT.TA0008DEMO:AADAPT.TA0011
private key leakinfrastructureunknownDemo
$9.8M

On 2024-05-06, Ondo Finance suffered a private key leak incident resulting in approximately $9,828,383 in losses. The exploit targeted the infrastructure layer. Attribution: unknown. This is a demonstration entry — not a real incident.

DEMO:AADAPT.TA0006DEMO:AADAPT.TA0009
private key leakinfrastructureunknownDemo
$15M

On 2024-01-22, Ondo Finance suffered a private key leak incident resulting in approximately $15,036,421 in losses. The exploit targeted the infrastructure layer. Attribution: unknown. This is a demonstration entry — not a real incident.

DEMO:AADAPT.TA0006DEMO:AADAPT.TA0009
proxy admin compromiseprotocolunknownDemo
$75.9M

On 2022-04-19, Ondo Finance suffered a proxy admin compromise incident resulting in approximately $75,929,823 in losses. The exploit targeted the protocol layer. Attribution: unknown. This is a demonstration entry — not a real incident.

DEMO:AADAPT.TA0006DEMO:AADAPT.TA0008

Peer Incidents · Method B

14 root-cause predicate matches

Vulnerable to: reentrancy

Matches the reentrancy predicate

28 historical peer events
  • SommelierDemo
    $30.7M
  • Kyber NetworkDemo
    $2.1M
  • DeribitDemo
    $936K
  • Zora NetworkDemo
    $4.7M
  • Stader LabsDemo
    $16.1M
  • + 23 more

Vulnerable to: rug pull hard

Matches the rug pull hard predicate

22 historical peer events
  • SushiSwapDemo
    $25.6M
  • AlliumDemo
    $110.6K
  • HTX (Huobi)Demo
    $23M
  • Aptos FoundationDemo
    $1.2M
  • EtherscanDemo
    $633.1K
  • + 17 more

Vulnerable to: private key leak

Matches the private key leak predicate

20 historical peer events
  • PropyDemo
    $1.3M
  • Polymesh Association (Ethereum-connected deployments only)Demo
    $216.8M
  • Backed FinanceDemo
    $4M
  • Plume NetworkDemo
    $3.1M
  • Backed FinanceDemo
    $32.4M
  • + 15 more

Vulnerable to: phishing drainer

Matches the phishing drainer predicate

18 historical peer events
  • GoldfinchDemo
    $1M
  • BitgetDemo
    $739.9K
  • OrcaDemo
    $180.8K
  • Ether.fiDemo
    $443.4K
  • Alchemy PayDemo
    $334.2K
  • + 13 more

Vulnerable to: flash loan governance

Matches the flash loan governance predicate

18 historical peer events
  • ThirdwebDemo
    $33.2M
  • LayerZero Labs (physical verification context only)Demo
    $40.2M
  • First Digital USDDemo
    $12.1M
  • Protocol-Native Treasury Agents (DAO-embedded)Demo
    $13.8M
  • F2PoolDemo
    $3.5M
  • + 13 more

Vulnerable to: rug pull soft

Matches the rug pull soft predicate

14 historical peer events
  • Euler FinanceDemo
    $3.2M
  • KlimaDAODemo
    $100.8K
  • Governed protocol (monetary policy–driven)Demo
    $174K
  • R3 (Ethereum interop only)Demo
    $79.1K
  • ViaBTCDemo
    $805.5K
  • + 9 more

Vulnerable to: frontend dns hijack

Matches the frontend dns hijack predicate

12 historical peer events
  • Bridge.xyz / StripeDemo
    $10.4M
  • UK FCA Digital SandboxDemo
    $3.6M
  • Three SigmaDemo
    $2.7M
  • CryptoQuantDemo
    $517.3K
  • Celsius (defunct)Demo
    $22M
  • + 7 more

Vulnerable to: supply chain npm

Matches the supply chain npm predicate

10 historical peer events
  • Beefy FinanceDemo
    $176.2K
  • PowerledgerDemo
    $7.4M
  • UnichainDemo
    $8.8M
  • MEXCDemo
    $1M
  • Mango MarketsDemo
    $915.6K
  • + 5 more

Vulnerable to: dvn collapse

Matches the dvn collapse predicate

8 historical peer events
  • Blast, Blockdaemon Wallet +2Demo
    $93.6M
  • Fordefi, XSGDDemo
    $17M
  • Element Finance, QuantozDemo
    $1.1M
  • Mercado Bitcoin, SwellDemo
    $15.3M
  • Internet Computer (DFINITY), Mantle +1Demo
    $10.3M
  • + 3 more

Vulnerable to: signature malleability

Matches the signature malleability predicate

8 historical peer events
  • Ether.fiDemo
    $17.2M
  • Swell NetworkDemo
    $1.2M
  • Immutable protocolDemo
    $4M
  • The SandboxDemo
    $3.9M
  • PancakeSwapDemo
    $656.7K
  • + 3 more

Vulnerable to: counterparty default

Matches the counterparty default predicate

8 historical peer events
  • BlackRock BUIDLDemo
    $808.2M
  • CoinDCXDemo
    $20.7M
  • AxelarDemo
    $30.5M
  • Liquity USDDemo
    $19.3M
  • BinanceDemo
    $167M
  • + 3 more

Vulnerable to: cross chain replay

Matches the cross chain replay predicate

5 historical peer events
  • Ether.fiDemo
    $25.2M
  • Ondo U.S. Dollar YieldDemo
    $11.4M
  • Ether.fi CashDemo
    $21.6M
  • RenzoDemo
    $50.9M
  • Ether.fi CashDemo
    $771.2K

Vulnerable to: governance proposal malicious

Matches the governance proposal malicious predicate

5 historical peer events
  • Stripe CryptoDemo
    $1.5M
  • Notional V3Demo
    $507.1K
  • Hong Kong Monetary Authority — Ethereum pilotsDemo
    $18.9M
  • FalconXDemo
    $4.8M
  • AvailDemo
    $30.8M

Vulnerable to: mpc ceremony compromise

Matches the mpc ceremony compromise predicate

4 historical peer events
  • Protocol-Native Treasury Agents (DAO-embedded)Demo
    $58.8M
  • Coinbase CustodyDemo
    $109M
  • Chronicle LabsDemo
    $50.5M
  • HegicDemo
    $221.6M

Dependency Twins · Method A + B + C ensemble

Top 10 of 25 precomputed
#1

Ondo U.S. Dollar Yield

Stablecoin Issuers & Synthetic Dollars · medium
Ensemble
0.620
A · Jaccard0.60
B · Overlap2
C · Cosine0.93
Matches on
  • frontend_host = vercel
  • oracle_providers = Chainlink
  • chain_deployments = Aptos, Arbitrum, Ethereum, Mantle, Noble, Plume Mainnet, Polygon, Ripple, Sei, Solana, Stellar, Sui
  • bridge_dependencies = LayerZero
#2

Ether.fi Cash

Lending, Money Markets & CDPs · high
Ensemble
0.564
A · Jaccard0.36
B · Overlap3
C · Cosine0.72
Matches on
  • frontend_host = vercel
  • oracle_providers = Chainlink
  • chain_deployments = Arbitrum, Ethereum
  • bridge_dependencies = LayerZero
#3

Ether.fi

Liquid Staking & Restaking · high
Ensemble
0.547
A · Jaccard0.33
B · Overlap3
C · Cosine0.69
Matches on
  • frontend_host = vercel
  • oracle_providers = Chainlink
  • chain_deployments = Arbitrum, Ethereum
  • bridge_dependencies = LayerZero
#4

Kelp DAO

Liquid Staking & Restaking · high
Ensemble
0.513
A · Jaccard0.25
B · Overlap3
C · Cosine0.66
Matches on
  • frontend_host = vercel
  • oracle_providers = Chainlink
  • chain_deployments = Arbitrum, Ethereum
  • method_b_root_causes = reentrancy, rug_pull_hard
#5

BlackRock BUIDL

Tokenized Real-World Assets · high
Ensemble
0.476
A · Jaccard0.33
B · Overlap2
C · Cosine0.72
Matches on
  • frontend_host = vercel
  • subsector_tags = real_estate
  • oracle_providers = Chainlink
  • chain_deployments = Aptos, Arbitrum, Ethereum, Polygon, Solana
#6

Sanctum

Liquid Staking & Restaking · critical
Ensemble
0.473
A · Jaccard0.31
B · Overlap2
C · Cosine0.74
Matches on
  • kms_provider = unknown
  • frontend_host = vercel
  • oracle_providers = Chainlink
  • chain_deployments = Solana
#7

Binance

Centralized Exchanges & Brokerages · critical
Ensemble
0.454
A · Jaccard0.06
B · Overlap3
C · Cosine0.66
Matches on
  • frontend_host = vercel
  • chain_deployments = Aptos, Arbitrum, Ethereum, Polygon, Ripple, Solana, Stellar, Sui
  • method_b_root_causes = reentrancy, flash_loan_governance, counterparty_default
#8

Governed protocol (monetary policy–driven)

Stablecoin Issuers & Synthetic Dollars · medium
Ensemble
0.441
A · Jaccard0.25
B · Overlap2
C · Cosine0.69
Matches on
  • frontend_host = vercel
  • oracle_providers = Chainlink
  • chain_deployments = Ethereum
  • method_b_root_causes = reentrancy, rug_pull_soft
#9

Immutable protocol

Stablecoin Issuers & Synthetic Dollars · medium
Ensemble
0.435
A · Jaccard0.27
B · Overlap2
C · Cosine0.65
Matches on
  • kms_provider = unknown
  • oracle_providers = Chainlink
  • chain_deployments = Ethereum
  • method_b_root_causes = signature_malleability
#10

Aptos Foundation

L1 & L2 Network Operators · medium
Ensemble
0.427
A · Jaccard0.06
B · Overlap3
C · Cosine0.56
Matches on
  • kms_provider = unknown
  • method_b_root_causes = rug_pull_hard, rug_pull_soft