Preview surface — demo data. Where real data exists today (e.g. RealT, BlackRock BUIDL, Lift Dollar) we render it; everywhere else we render synthetic enrichment generated deterministically from public signal and clearly marked Demo or Inferred. The Phase 3 roadmap replaces every synthetic source with live ingestion — see Methodology → Exposure Graph & Similarity Engine.

Orca

Smart-Contract DEXs, AMMs & Aggregatorscritical·risk 0.6502·TVL $254.4M·blast $254.4M·active
Static profile (Identity / Contract / Dependency / Governance / Reputation)

Identity

Sector
Smart-Contract DEXs, AMMs & Aggregators
Subsector tags
consumer_app, general_defi, infra_toolingDemo
Chain deployments
Eclipse, Solana
Website
https://www.orca.xyzDemo
Launch date
Immutable
noDemo
Permissionless
yesDemo

Contract

Primary address
orcaEKTdK7LKz57vaAYr9QeNsVEPfiu6QeMU1kektZE
Proxy pattern
n/a (EOA address)
Upgrade authority
UNKNOWN
Multisig threshold
Compiler
0.8.19
Uses assembly
noDemo
Bug bounty
immunefiDemo
Contract addresses
0xbba66f660fc1d58a3048b3c96f9965cb42452f41, 0x1a9613a302df87b2d6ce946ca72c9d8c0d540a7fDemo
Audits tier
0

Dependency

Oracle providers
Pyth
Bridge dependencies
Stablecoin dependencies
USDC, USDT
LST / LRT deps
Demo
DEX liquidity venues
aerodrome, balancerDemo
CEX listings
gateio, binanceDemo
Custodian
Demo
KMS provider
fireblocks_mpcDemo
RPC provider
quicknodeDemo
Frontend host
vercelDemo
npm lockfile sha
sha256:490e53d57b8bcdefbffac5f7a52cd526d86df709ee400d075c14d140ec80c45fDemo

Governance

Governance type
multisig_councilDemo
Governance token
Demo
Treasury size
$10.5MDemo
Team size
59Demo
Jurisdiction
CHDemo
Incorporated entity
Orca DAO LLCDemo
Anonymous team
noDemo
Security disclosure
noDemo
IR SLA (hours)
Demo

Reputation

GitHub
https://github.com/orca/orcaDemo
Commit velocity (30d)
2Demo
Contributors
20Demo
Twitter
@orcaDemo
Discord
https://discord.gg/186msdtDemo
Last incident
Jan 19, 2026Demo
KYT screening
cleanDemo

Threat History

3 recorded incidents
proxy admin compromiseprotocolunattributed_criminalDemo
$216.8M

On 2026-01-19, Orca suffered a proxy admin compromise incident resulting in approximately $216,788,144 in losses. The exploit targeted the protocol layer. Attribution: unattributed_criminal. This is a demonstration entry — not a real incident.

DEMO:AADAPT.TA0006DEMO:AADAPT.TA0008
price impact ammprotocolunknownDemo
$528.8K

On 2025-05-06, Orca suffered a price impact amm incident resulting in approximately $528,825 in losses. The exploit targeted the protocol layer. Attribution: unknown. This is a demonstration entry — not a real incident.

DEMO:AADAPT.TA0040
phishing drainerhuman opmev_searcherDemo
$180.8K

On 2025-04-12, Orca suffered a phishing drainer incident resulting in approximately $180,830 in losses. The exploit targeted the human_op layer. A flash loan was used to amplify the attack. Attribution: mev_searcher. This is a demonstration entry — not a real incident.

DEMO:AADAPT.TA0001DEMO:AADAPT.TA0040
View incident →Bounty liveFlash loan

Peer Incidents · Method B

11 root-cause predicate matches

Vulnerable to: reentrancy

Matches the reentrancy predicate

28 historical peer events
  • SommelierDemo
    $30.7M
  • Kyber NetworkDemo
    $2.1M
  • DeribitDemo
    $936K
  • Zora NetworkDemo
    $4.7M
  • Stader LabsDemo
    $16.1M
  • + 23 more

Vulnerable to: phishing drainer

Matches the phishing drainer predicate

17 historical peer events
  • GoldfinchDemo
    $1M
  • BitgetDemo
    $739.9K
  • Ether.fiDemo
    $443.4K
  • Alchemy PayDemo
    $334.2K
  • Curve FinanceDemo
    $755.7K
  • + 12 more

Vulnerable to: price impact amm

Matches the price impact amm predicate

17 historical peer events
  • MatchaDemo
    $15.6M
  • Trader JoeDemo
    $3.6M
  • BalancerDemo
    $24.3M
  • MeteoraDemo
    $1.5M
  • Curve FinanceDemo
    $660.7K
  • + 12 more

Vulnerable to: ice phishing approval

Matches the ice phishing approval predicate

16 historical peer events
  • deBridgeDemo
    $7.5M
  • EulerDemo
    $87.9K
  • Bend DAODemo
    $968.9K
  • Maple FinanceDemo
    $1.4M
  • BlurDemo
    $6.5M
  • + 11 more

Vulnerable to: frontend dns hijack

Matches the frontend dns hijack predicate

12 historical peer events
  • Bridge.xyz / StripeDemo
    $10.4M
  • UK FCA Digital SandboxDemo
    $3.6M
  • Three SigmaDemo
    $2.7M
  • CryptoQuantDemo
    $517.3K
  • Celsius (defunct)Demo
    $22M
  • + 7 more

Vulnerable to: rounding precision

Matches the rounding precision predicate

10 historical peer events
  • Frax EtherDemo
    $51.2K
  • BNY Mellon DigitalDemo
    $750K
  • RedStoneDemo
    $63.2K
  • Bend DAODemo
    $57.9K
  • Starknet BridgeDemo
    $784.1K
  • + 5 more

Vulnerable to: supply chain npm

Matches the supply chain npm predicate

10 historical peer events
  • Beefy FinanceDemo
    $176.2K
  • PowerledgerDemo
    $7.4M
  • UnichainDemo
    $8.8M
  • MEXCDemo
    $1M
  • Mango MarketsDemo
    $915.6K
  • + 5 more

Vulnerable to: dvn collapse

Matches the dvn collapse predicate

8 historical peer events
  • Blast, Blockdaemon Wallet +2Demo
    $93.6M
  • Fordefi, XSGDDemo
    $17M
  • Element Finance, QuantozDemo
    $1.1M
  • Mercado Bitcoin, SwellDemo
    $15.3M
  • Internet Computer (DFINITY), Mantle +1Demo
    $10.3M
  • + 3 more

Vulnerable to: counterparty default

Matches the counterparty default predicate

8 historical peer events
  • BlackRock BUIDLDemo
    $808.2M
  • CoinDCXDemo
    $20.7M
  • AxelarDemo
    $30.5M
  • Liquity USDDemo
    $19.3M
  • BinanceDemo
    $167M
  • + 3 more

Vulnerable to: prompt injection agent

Matches the prompt injection agent predicate

4 historical peer events
  • LodestarDemo
    $3.2M
  • Ether.fi CashDemo
    $4.6M
  • HTX (Huobi)Demo
    $3.7M
  • SwellDemo
    $403K

Vulnerable to: mpc ceremony compromise

Matches the mpc ceremony compromise predicate

4 historical peer events
  • Protocol-Native Treasury Agents (DAO-embedded)Demo
    $58.8M
  • Coinbase CustodyDemo
    $109M
  • Chronicle LabsDemo
    $50.5M
  • HegicDemo
    $221.6M

Dependency Twins · Method A + B + C ensemble

Top 10 of 25 precomputed
#1

Jupiter

Smart-Contract DEXs, AMMs & Aggregators · critical
Ensemble
0.459
A · Jaccard0.39
B · Overlap1
C · Cosine0.88
Matches on
  • frontend_host = vercel
  • subsector_tags = infra_tooling, general_defi, consumer_app
  • oracle_providers = Pyth
  • chain_deployments = Solana
#2

Sanctum

Liquid Staking & Restaking · critical
Ensemble
0.431
A · Jaccard0.11
B · Overlap2
C · Cosine0.80
Matches on
  • frontend_host = vercel
  • subsector_tags = general_defi, consumer_app
  • chain_deployments = Solana
  • method_b_root_causes = reentrancy
#3

Curve Finance

Smart-Contract DEXs, AMMs & Aggregators · medium
Ensemble
0.421
A · Jaccard0.12
B · Overlap2
C · Cosine0.75
Matches on
  • frontend_host = vercel
  • subsector_tags = infra_tooling, consumer_app, general_defi
  • method_b_root_causes = price_impact_amm, phishing_drainer
  • stablecoin_dependencies = USDC, USDT
#4

Lift Dollar (USDL)

Stablecoin Issuers & Synthetic Dollars · high
Ensemble
0.420
A · Jaccard0.03
B · Overlap3
C · Cosine0.57
Matches on
  • subsector_tags = general_defi, consumer_app
  • method_b_root_causes = reentrancy, counterparty_default, rounding_precision
#5

Aevo

Smart-Contract DEXs, AMMs & Aggregators · medium
Ensemble
0.418
A · Jaccard0.08
B · Overlap2
C · Cosine0.78
Matches on
  • frontend_host = vercel
  • subsector_tags = consumer_app, infra_tooling, general_defi
  • method_b_root_causes = price_impact_amm
#6

Deribit

Centralized Exchanges & Brokerages · critical
Ensemble
0.406
A · Jaccard0.05
B · Overlap2
C · Cosine0.77
Matches on
  • subsector_tags = general_defi, consumer_app, infra_tooling
  • chain_deployments = Solana
  • method_b_root_causes = reentrancy, rounding_precision
#7

HTX (Huobi)

Centralized Exchanges & Brokerages · critical
Ensemble
0.404
A · Jaccard0.04
B · Overlap2
C · Cosine0.77
Matches on
  • subsector_tags = infra_tooling, consumer_app, general_defi
  • chain_deployments = Solana
  • method_b_root_causes = frontend_dns_hijack, prompt_injection_agent
#8

Raydium

Smart-Contract DEXs, AMMs & Aggregators · critical
Ensemble
0.402
A · Jaccard0.28
B · Overlap1
C · Cosine0.79
Matches on
  • subsector_tags = consumer_app, general_defi, infra_tooling
  • oracle_providers = Pyth
  • chain_deployments = Solana
  • method_b_root_causes = price_impact_amm
#9

MEXC

Centralized Exchanges & Brokerages · critical
Ensemble
0.394
A · Jaccard0.04
B · Overlap2
C · Cosine0.73
Matches on
  • subsector_tags = general_defi, consumer_app, infra_tooling
  • chain_deployments = Solana
  • method_b_root_causes = supply_chain_npm, ice_phishing_approval
#10

Ether.fi Cash

Lending, Money Markets & CDPs · high
Ensemble
0.393
A · Jaccard0.15
B · Overlap2
C · Cosine0.63
Matches on
  • frontend_host = vercel
  • subsector_tags = consumer_app, general_defi, infra_tooling
  • method_b_root_causes = supply_chain_npm, prompt_injection_agent
  • stablecoin_dependencies = USDC, USDT