Preview surface — demo data. Where real data exists today (e.g. RealT, BlackRock BUIDL, Lift Dollar) we render it; everywhere else we render synthetic enrichment generated deterministically from public signal and clearly marked Demo or Inferred. The Phase 3 roadmap replaces every synthetic source with live ingestion — see Methodology → Exposure Graph & Similarity Engine.

Ondo Finance

Tokenized Real-World Assetsmedium·risk 0.3743·TVL $2.7B·blast $2.7B·active
Static profile (Identity / Contract / Dependency / Governance / Reputation)

Identity

Sector
Tokenized Real-World Assets
Subsector tags
real_estate, treasuryDemo
Chain deployments
Aptos, Arbitrum, Ethereum, Mantle, Noble, Plume Mainnet, Polygon, Ripple, Sei, Solana, Stellar, Sui
Website
https://www.ondo-finance.xyzDemo
Launch date
—
Immutable
noDemo
Permissionless
yesDemo

Contract

Primary address
0xfaba6f8e4a5e8ab82f62fe7c39859fa577269be3
Proxy pattern
none
Upgrade authority
UNKNOWN
Multisig threshold
—
Compiler
0.7.6
Uses assembly
noDemo
Bug bounty
immunefiDemo
Contract addresses
0xfaba6f8e4a5e8ab82f62fe7c39859fa577269be3Demo
Audits tier
2

Dependency

Oracle providers
Chainlink
Bridge dependencies
LayerZero
Stablecoin dependencies
USDC, USDY
LST / LRT deps
—Demo
DEX liquidity venues
velodrome, balancer, pancakeswapDemo
CEX listings
gateio, kraken, coinbase, bitgetDemo
Custodian
—Demo
KMS provider
unknownDemo
RPC provider
quicknodeDemo
Frontend host
vercelDemo
npm lockfile sha
sha256:e401c76e7c6eba444cc8609d01c0285000043e93a4c55a552585bb9e9640f951Demo

Governance

Governance type
token_votingDemo
Governance token
0x155522488bf6fe67a2f7a93b7f2f561a0ed90711Demo
Treasury size
$48MDemo
Team size
279Demo
Jurisdiction
GBDemo
Incorporated entity
Ondo Finance Holdings AGDemo
Anonymous team
yesDemo
Security disclosure
yesDemo
IR SLA (hours)
12Demo

Reputation

GitHub
https://github.com/ondo-finance/ondo-financeDemo
Commit velocity (30d)
0Demo
Contributors
52Demo
Twitter
@ondo-financeDemo
Discord
https://discord.gg/yj5tk1Demo
Last incident
Nov 12, 2024Demo
KYT screening
sanctioned_exposureDemo

Threat History

4 recorded incidents
cross chain replayprotocolunknownDemo
$1.2M

On 2024-11-12, Ondo Finance suffered a cross chain replay incident resulting in approximately $1,175,887 in losses. The exploit targeted the protocol layer. Attribution: unknown. This is a demonstration entry — not a real incident.

DEMO:AADAPT.TA0008DEMO:AADAPT.TA0011
private key leakinfrastructureunknownDemo
$9.8M

On 2024-05-06, Ondo Finance suffered a private key leak incident resulting in approximately $9,828,383 in losses. The exploit targeted the infrastructure layer. Attribution: unknown. This is a demonstration entry — not a real incident.

DEMO:AADAPT.TA0006DEMO:AADAPT.TA0009
private key leakinfrastructureunknownDemo
$15M

On 2024-01-22, Ondo Finance suffered a private key leak incident resulting in approximately $15,036,421 in losses. The exploit targeted the infrastructure layer. Attribution: unknown. This is a demonstration entry — not a real incident.

DEMO:AADAPT.TA0006DEMO:AADAPT.TA0009
proxy admin compromiseprotocolunknownDemo
$75.9M

On 2022-04-19, Ondo Finance suffered a proxy admin compromise incident resulting in approximately $75,929,823 in losses. The exploit targeted the protocol layer. Attribution: unknown. This is a demonstration entry — not a real incident.

DEMO:AADAPT.TA0006DEMO:AADAPT.TA0008

Peer Incidents · Method B

14 root-cause predicate matches

Vulnerable to: reentrancy

Matches the reentrancy predicate

28 historical peer events
  • SommelierDemo
    $30.7M
  • Kyber NetworkDemo
    $2.1M
  • DeribitDemo
    $936K
  • Zora NetworkDemo
    $4.7M
  • Stader LabsDemo
    $16.1M
  • + 23 more

Vulnerable to: rug pull hard

Matches the rug pull hard predicate

22 historical peer events
  • SushiSwapDemo
    $25.6M
  • AlliumDemo
    $110.6K
  • HTX (Huobi)Demo
    $23M
  • Aptos FoundationDemo
    $1.2M
  • EtherscanDemo
    $633.1K
  • + 17 more

Vulnerable to: private key leak

Matches the private key leak predicate

20 historical peer events
  • PropyDemo
    $1.3M
  • Polymesh Association (Ethereum-connected deployments only)Demo
    $216.8M
  • Backed FinanceDemo
    $4M
  • Plume NetworkDemo
    $3.1M
  • Backed FinanceDemo
    $32.4M
  • + 15 more

Vulnerable to: phishing drainer

Matches the phishing drainer predicate

18 historical peer events
  • GoldfinchDemo
    $1M
  • BitgetDemo
    $739.9K
  • OrcaDemo
    $180.8K
  • Ether.fiDemo
    $443.4K
  • Alchemy PayDemo
    $334.2K
  • + 13 more

Vulnerable to: flash loan governance

Matches the flash loan governance predicate

18 historical peer events
  • ThirdwebDemo
    $33.2M
  • LayerZero Labs (physical verification context only)Demo
    $40.2M
  • First Digital USDDemo
    $12.1M
  • Protocol-Native Treasury Agents (DAO-embedded)Demo
    $13.8M
  • F2PoolDemo
    $3.5M
  • + 13 more

Vulnerable to: rug pull soft

Matches the rug pull soft predicate

14 historical peer events
  • Euler FinanceDemo
    $3.2M
  • KlimaDAODemo
    $100.8K
  • Governed protocol (monetary policy–driven)Demo
    $174K
  • R3 (Ethereum interop only)Demo
    $79.1K
  • ViaBTCDemo
    $805.5K
  • + 9 more

Vulnerable to: frontend dns hijack

Matches the frontend dns hijack predicate

12 historical peer events
  • Bridge.xyz / StripeDemo
    $10.4M
  • UK FCA Digital SandboxDemo
    $3.6M
  • Three SigmaDemo
    $2.7M
  • CryptoQuantDemo
    $517.3K
  • Celsius (defunct)Demo
    $22M
  • + 7 more

Vulnerable to: supply chain npm

Matches the supply chain npm predicate

10 historical peer events
  • Beefy FinanceDemo
    $176.2K
  • PowerledgerDemo
    $7.4M
  • UnichainDemo
    $8.8M
  • MEXCDemo
    $1M
  • Mango MarketsDemo
    $915.6K
  • + 5 more

Vulnerable to: dvn collapse

Matches the dvn collapse predicate

8 historical peer events
  • Blast, Blockdaemon Wallet +2Demo
    $93.6M
  • Fordefi, XSGDDemo
    $17M
  • Element Finance, QuantozDemo
    $1.1M
  • Mercado Bitcoin, SwellDemo
    $15.3M
  • Internet Computer (DFINITY), Mantle +1Demo
    $10.3M
  • + 3 more

Vulnerable to: signature malleability

Matches the signature malleability predicate

8 historical peer events
  • Ether.fiDemo
    $17.2M
  • Swell NetworkDemo
    $1.2M
  • Immutable protocolDemo
    $4M
  • The SandboxDemo
    $3.9M
  • PancakeSwapDemo
    $656.7K
  • + 3 more

Vulnerable to: counterparty default

Matches the counterparty default predicate

8 historical peer events
  • BlackRock BUIDLDemo
    $808.2M
  • CoinDCXDemo
    $20.7M
  • AxelarDemo
    $30.5M
  • Liquity USDDemo
    $19.3M
  • BinanceDemo
    $167M
  • + 3 more

Vulnerable to: cross chain replay

Matches the cross chain replay predicate

5 historical peer events
  • Ether.fiDemo
    $25.2M
  • Ondo U.S. Dollar YieldDemo
    $11.4M
  • Ether.fi CashDemo
    $21.6M
  • RenzoDemo
    $50.9M
  • Ether.fi CashDemo
    $771.2K

Vulnerable to: governance proposal malicious

Matches the governance proposal malicious predicate

5 historical peer events
  • Stripe CryptoDemo
    $1.5M
  • Notional V3Demo
    $507.1K
  • Hong Kong Monetary Authority — Ethereum pilotsDemo
    $18.9M
  • FalconXDemo
    $4.8M
  • AvailDemo
    $30.8M

Vulnerable to: mpc ceremony compromise

Matches the mpc ceremony compromise predicate

4 historical peer events
  • Protocol-Native Treasury Agents (DAO-embedded)Demo
    $58.8M
  • Coinbase CustodyDemo
    $109M
  • Chronicle LabsDemo
    $50.5M
  • HegicDemo
    $221.6M

Dependency Twins · Method A + B + C ensemble

Top 10 of 25 precomputed
#1

Ondo U.S. Dollar Yield

Stablecoin Issuers & Synthetic Dollars · medium
Ensemble
0.620
A · Jaccard0.60
B · Overlap2
C · Cosine0.93
Matches on
  • frontend_host = vercel
  • oracle_providers = Chainlink
  • chain_deployments = Aptos, Arbitrum, Ethereum, Mantle, Noble, Plume Mainnet, Polygon, Ripple, Sei, Solana, Stellar, Sui
  • bridge_dependencies = LayerZero
#2

Ether.fi Cash

Lending, Money Markets & CDPs · high
Ensemble
0.564
A · Jaccard0.36
B · Overlap3
C · Cosine0.72
Matches on
  • frontend_host = vercel
  • oracle_providers = Chainlink
  • chain_deployments = Arbitrum, Ethereum
  • bridge_dependencies = LayerZero
#3

Ether.fi

Liquid Staking & Restaking · high
Ensemble
0.547
A · Jaccard0.33
B · Overlap3
C · Cosine0.69
Matches on
  • frontend_host = vercel
  • oracle_providers = Chainlink
  • chain_deployments = Arbitrum, Ethereum
  • bridge_dependencies = LayerZero
#4

Kelp DAO

Liquid Staking & Restaking · high
Ensemble
0.513
A · Jaccard0.25
B · Overlap3
C · Cosine0.66
Matches on
  • frontend_host = vercel
  • oracle_providers = Chainlink
  • chain_deployments = Arbitrum, Ethereum
  • method_b_root_causes = reentrancy, rug_pull_hard
#5

BlackRock BUIDL

Tokenized Real-World Assets · high
Ensemble
0.476
A · Jaccard0.33
B · Overlap2
C · Cosine0.72
Matches on
  • frontend_host = vercel
  • subsector_tags = real_estate
  • oracle_providers = Chainlink
  • chain_deployments = Aptos, Arbitrum, Ethereum, Polygon, Solana
#6

Sanctum

Liquid Staking & Restaking · critical
Ensemble
0.473
A · Jaccard0.31
B · Overlap2
C · Cosine0.74
Matches on
  • kms_provider = unknown
  • frontend_host = vercel
  • oracle_providers = Chainlink
  • chain_deployments = Solana
#7

Binance

Centralized Exchanges & Brokerages · critical
Ensemble
0.454
A · Jaccard0.06
B · Overlap3
C · Cosine0.66
Matches on
  • frontend_host = vercel
  • chain_deployments = Aptos, Arbitrum, Ethereum, Polygon, Ripple, Solana, Stellar, Sui
  • method_b_root_causes = reentrancy, flash_loan_governance, counterparty_default
#8

Governed protocol (monetary policy–driven)

Stablecoin Issuers & Synthetic Dollars · medium
Ensemble
0.441
A · Jaccard0.25
B · Overlap2
C · Cosine0.69
Matches on
  • frontend_host = vercel
  • oracle_providers = Chainlink
  • chain_deployments = Ethereum
  • method_b_root_causes = reentrancy, rug_pull_soft
#9

Immutable protocol

Stablecoin Issuers & Synthetic Dollars · medium
Ensemble
0.435
A · Jaccard0.27
B · Overlap2
C · Cosine0.65
Matches on
  • kms_provider = unknown
  • oracle_providers = Chainlink
  • chain_deployments = Ethereum
  • method_b_root_causes = signature_malleability
#10

Aptos Foundation

L1 & L2 Network Operators · medium
Ensemble
0.427
A · Jaccard0.06
B · Overlap3
C · Cosine0.56
Matches on
  • kms_provider = unknown
  • method_b_root_causes = rug_pull_hard, rug_pull_soft