Preview surface — demo data. Where real data exists today (e.g. RealT, BlackRock BUIDL, Lift Dollar) we render it; everywhere else we render synthetic enrichment generated deterministically from public signal and clearly marked Demo or Inferred. The Phase 3 roadmap replaces every synthetic source with live ingestion — see Methodology → Exposure Graph & Similarity Engine.

Karak

Liquid Staking & Restakingmedium·risk 0.4300·TVL ·blast $0·active
Static profile (Identity / Contract / Dependency / Governance / Reputation)

Identity

Sector
Liquid Staking & Restaking
Subsector tags
infra_tooling, general_defiDemo
Chain deployments
Website
https://www.karak.xyzDemo
Launch date
Immutable
noDemo
Permissionless
yesDemo

Contract

Primary address
Proxy pattern
UNKNOWN
Upgrade authority
UNKNOWN
Multisig threshold
Compiler
0.8.13
Uses assembly
yesDemo
Bug bounty
noneDemo
Contract addresses
0xa78b2b102d1c696e6a88c1601ed292291c2becfaDemo
Audits tier
1

Dependency

Oracle providers
Bridge dependencies
Stablecoin dependencies
LST / LRT deps
Demo
DEX liquidity venues
curve, pancakeswapDemo
CEX listings
Demo
Custodian
Demo
KMS provider
unknownDemo
RPC provider
infuraDemo
Frontend host
cloudflare_pagesDemo
npm lockfile sha
sha256:39c8a06c5d5117d64ce7521c31973730e2dd33b2db8723e594bb883201b490d0Demo

Governance

Governance type
token_votingDemo
Governance token
0x243f811d9a034421db80f4b54d34a4b3666116d5Demo
Treasury size
$0Demo
Team size
73Demo
Jurisdiction
USDemo
Incorporated entity
Karak Labs Ltd.Demo
Anonymous team
yesDemo
Security disclosure
noDemo
IR SLA (hours)
Demo

Reputation

GitHub
https://github.com/karak/karakDemo
Commit velocity (30d)
58Demo
Contributors
8Demo
Twitter
@karakDemo
Discord
https://discord.gg/1jglynwDemo
Last incident
Mar 16, 2024Demo
KYT screening
cleanDemo

Threat History

2 recorded incidents
rug pull hardsocialunknownDemo
$32.5M

On 2024-03-16, Karak suffered a rug pull hard incident resulting in approximately $32,490,823 in losses. The exploit targeted the social layer. Attribution: unknown. This is a demonstration entry — not a real incident.

DEMO:AADAPT.TA0040DEMO:AADAPT.TA0010
flash loan governanceprotocolunattributed_criminalDemo
$103.6M

On 2023-02-16, Karak suffered a flash loan governance incident resulting in approximately $103,643,826 in losses. The exploit targeted the protocol layer. A flash loan was used to amplify the attack. Attribution: unattributed_criminal. This is a demonstration entry — not a real incident.

DEMO:AADAPT.TA0040DEMO:AADAPT.TA0009

Peer Incidents · Method B

9 root-cause predicate matches

Vulnerable to: rug pull hard

Matches the rug pull hard predicate

21 historical peer events
  • SushiSwapDemo
    $25.6M
  • AlliumDemo
    $110.6K
  • HTX (Huobi)Demo
    $23M
  • Aptos FoundationDemo
    $1.2M
  • EtherscanDemo
    $633.1K
  • + 16 more

Vulnerable to: phishing drainer

Matches the phishing drainer predicate

18 historical peer events
  • GoldfinchDemo
    $1M
  • BitgetDemo
    $739.9K
  • OrcaDemo
    $180.8K
  • Ether.fiDemo
    $443.4K
  • Alchemy PayDemo
    $334.2K
  • + 13 more

Vulnerable to: flash loan governance

Matches the flash loan governance predicate

17 historical peer events
  • ThirdwebDemo
    $33.2M
  • LayerZero Labs (physical verification context only)Demo
    $40.2M
  • First Digital USDDemo
    $12.1M
  • Protocol-Native Treasury Agents (DAO-embedded)Demo
    $13.8M
  • F2PoolDemo
    $3.5M
  • + 12 more

Vulnerable to: rug pull soft

Matches the rug pull soft predicate

14 historical peer events
  • Euler FinanceDemo
    $3.2M
  • KlimaDAODemo
    $100.8K
  • Governed protocol (monetary policy–driven)Demo
    $174K
  • R3 (Ethereum interop only)Demo
    $79.1K
  • ViaBTCDemo
    $805.5K
  • + 9 more

Vulnerable to: frontend dns hijack

Matches the frontend dns hijack predicate

12 historical peer events
  • Bridge.xyz / StripeDemo
    $10.4M
  • UK FCA Digital SandboxDemo
    $3.6M
  • Three SigmaDemo
    $2.7M
  • CryptoQuantDemo
    $517.3K
  • Celsius (defunct)Demo
    $22M
  • + 7 more

Vulnerable to: supply chain npm

Matches the supply chain npm predicate

10 historical peer events
  • Beefy FinanceDemo
    $176.2K
  • PowerledgerDemo
    $7.4M
  • UnichainDemo
    $8.8M
  • MEXCDemo
    $1M
  • Mango MarketsDemo
    $915.6K
  • + 5 more

Vulnerable to: dvn collapse

Matches the dvn collapse predicate

8 historical peer events
  • Blast, Blockdaemon Wallet +2Demo
    $93.6M
  • Fordefi, XSGDDemo
    $17M
  • Element Finance, QuantozDemo
    $1.1M
  • Mercado Bitcoin, SwellDemo
    $15.3M
  • Internet Computer (DFINITY), Mantle +1Demo
    $10.3M
  • + 3 more

Vulnerable to: regulatory seizure

Matches the regulatory seizure predicate

6 historical peer events
  • RaydiumDemo
    $1.9M
  • CoinDCXDemo
    $29.8M
  • Silo FinanceDemo
    $14M
  • Base BridgeDemo
    $8.3M
  • EigenDADemo
    $101M
  • + 1 more

Vulnerable to: governance proposal malicious

Matches the governance proposal malicious predicate

5 historical peer events
  • Stripe CryptoDemo
    $1.5M
  • Notional V3Demo
    $507.1K
  • Hong Kong Monetary Authority — Ethereum pilotsDemo
    $18.9M
  • FalconXDemo
    $4.8M
  • AvailDemo
    $30.8M

Dependency Twins · Method A + B + C ensemble

Top 10 of 25 precomputed
#1

Aptos Foundation

L1 & L2 Network Operators · medium
Ensemble
0.520
A · Jaccard0.09
B · Overlap3
C · Cosine0.85
Matches on
  • kms_provider = unknown
  • subsector_tags = infra_tooling, general_defi
  • method_b_root_causes = rug_pull_hard, rug_pull_soft
#2

Unichain

Rollups, Data Availability & ZK Infra · high
Ensemble
0.430
A · Jaccard0.11
B · Overlap2
C · Cosine0.79
Matches on
  • kms_provider = unknown
  • frontend_host = cloudflare_pages
  • subsector_tags = general_defi
  • method_b_root_causes = frontend_dns_hijack, supply_chain_npm
#3

First Digital USD

Stablecoin Issuers & Synthetic Dollars · medium
Ensemble
0.422
A · Jaccard0.14
B · Overlap1
C · Cosine1.00
Matches on
  • kms_provider = unknown
  • frontend_host = cloudflare_pages
  • subsector_tags = general_defi, infra_tooling
  • method_b_root_causes = flash_loan_governance
#4

HTX (Huobi)

Centralized Exchanges & Brokerages · critical
Ensemble
0.416
A · Jaccard0.13
B · Overlap2
C · Cosine0.73
Matches on
  • kms_provider = unknown
  • frontend_host = cloudflare_pages
  • subsector_tags = infra_tooling, general_defi
  • method_b_root_causes = frontend_dns_hijack, rug_pull_hard
#5

OpenZeppelin Governor

Enterprise, Public-Sector & Governance · medium
Ensemble
0.401
A · Jaccard0.13
B · Overlap1
C · Cosine0.94
Matches on
  • kms_provider = unknown
  • frontend_host = cloudflare_pages
  • subsector_tags = infra_tooling, general_defi
  • method_b_root_causes = rug_pull_hard
#6

F2Pool

MEV, Block Builders & Validator Infra · medium
Ensemble
0.401
A · Jaccard0.13
B · Overlap1
C · Cosine0.94
Matches on
  • kms_provider = unknown
  • frontend_host = cloudflare_pages
  • subsector_tags = infra_tooling, general_defi
  • method_b_root_causes = flash_loan_governance
#7

FalconX

Centralized Lenders & Market Makers · medium
Ensemble
0.401
A · Jaccard0.13
B · Overlap1
C · Cosine0.94
Matches on
  • kms_provider = unknown
  • frontend_host = cloudflare_pages
  • subsector_tags = infra_tooling, general_defi
  • method_b_root_causes = governance_proposal_malicious
#8

German Federal Government blockchain bond pilots

Payment Rails, On/Off-Ramps & CBDCs · medium
Ensemble
0.400
A · Jaccard0.04
B · Overlap2
C · Cosine0.76
Matches on
  • subsector_tags = general_defi, infra_tooling
  • method_b_root_causes = dvn_collapse, rug_pull_hard
#9

Project mBridge

Payment Rails, On/Off-Ramps & CBDCs · medium
Ensemble
0.400
A · Jaccard0.04
B · Overlap2
C · Cosine0.76
Matches on
  • subsector_tags = general_defi, infra_tooling
  • method_b_root_causes = rug_pull_hard, rug_pull_soft
#10

Subsquid

RPC, Node & Dev Infrastructure · medium
Ensemble
0.398
A · Jaccard0.04
B · Overlap2
C · Cosine0.75
Matches on
  • subsector_tags = infra_tooling, general_defi
  • method_b_root_causes = flash_loan_governance, rug_pull_hard