Preview surface — demo data. Where real data exists today (e.g. RealT, BlackRock BUIDL, Lift Dollar) we render it; everywhere else we render synthetic enrichment generated deterministically from public signal and clearly marked Demo or Inferred. The Phase 3 roadmap replaces every synthetic source with live ingestion — see Methodology → Exposure Graph & Similarity Engine.

Karak

Liquid Staking & Restakingmedium·risk 0.4300·TVL —·blast $0·active
Static profile (Identity / Contract / Dependency / Governance / Reputation)

Identity

Sector
Liquid Staking & Restaking
Subsector tags
infra_tooling, general_defiDemo
Chain deployments
—
Website
https://www.karak.xyzDemo
Launch date
—
Immutable
noDemo
Permissionless
yesDemo

Contract

Primary address
—
Proxy pattern
UNKNOWN
Upgrade authority
UNKNOWN
Multisig threshold
—
Compiler
0.8.13
Uses assembly
yesDemo
Bug bounty
noneDemo
Contract addresses
0xa78b2b102d1c696e6a88c1601ed292291c2becfaDemo
Audits tier
1

Dependency

Oracle providers
—
Bridge dependencies
—
Stablecoin dependencies
—
LST / LRT deps
—Demo
DEX liquidity venues
curve, pancakeswapDemo
CEX listings
—Demo
Custodian
—Demo
KMS provider
unknownDemo
RPC provider
infuraDemo
Frontend host
cloudflare_pagesDemo
npm lockfile sha
sha256:39c8a06c5d5117d64ce7521c31973730e2dd33b2db8723e594bb883201b490d0Demo

Governance

Governance type
token_votingDemo
Governance token
0x243f811d9a034421db80f4b54d34a4b3666116d5Demo
Treasury size
$0Demo
Team size
73Demo
Jurisdiction
USDemo
Incorporated entity
Karak Labs Ltd.Demo
Anonymous team
yesDemo
Security disclosure
noDemo
IR SLA (hours)
—Demo

Reputation

GitHub
https://github.com/karak/karakDemo
Commit velocity (30d)
58Demo
Contributors
8Demo
Twitter
@karakDemo
Discord
https://discord.gg/1jglynwDemo
Last incident
Mar 16, 2024Demo
KYT screening
cleanDemo

Threat History

2 recorded incidents
rug pull hardsocialunknownDemo
$32.5M

On 2024-03-16, Karak suffered a rug pull hard incident resulting in approximately $32,490,823 in losses. The exploit targeted the social layer. Attribution: unknown. This is a demonstration entry — not a real incident.

DEMO:AADAPT.TA0040DEMO:AADAPT.TA0010
flash loan governanceprotocolunattributed_criminalDemo
$103.6M

On 2023-02-16, Karak suffered a flash loan governance incident resulting in approximately $103,643,826 in losses. The exploit targeted the protocol layer. A flash loan was used to amplify the attack. Attribution: unattributed_criminal. This is a demonstration entry — not a real incident.

DEMO:AADAPT.TA0040DEMO:AADAPT.TA0009

Peer Incidents · Method B

9 root-cause predicate matches

Vulnerable to: rug pull hard

Matches the rug pull hard predicate

21 historical peer events
  • SushiSwapDemo
    $25.6M
  • AlliumDemo
    $110.6K
  • HTX (Huobi)Demo
    $23M
  • Aptos FoundationDemo
    $1.2M
  • EtherscanDemo
    $633.1K
  • + 16 more

Vulnerable to: phishing drainer

Matches the phishing drainer predicate

18 historical peer events
  • GoldfinchDemo
    $1M
  • BitgetDemo
    $739.9K
  • OrcaDemo
    $180.8K
  • Ether.fiDemo
    $443.4K
  • Alchemy PayDemo
    $334.2K
  • + 13 more

Vulnerable to: flash loan governance

Matches the flash loan governance predicate

17 historical peer events
  • ThirdwebDemo
    $33.2M
  • LayerZero Labs (physical verification context only)Demo
    $40.2M
  • First Digital USDDemo
    $12.1M
  • Protocol-Native Treasury Agents (DAO-embedded)Demo
    $13.8M
  • F2PoolDemo
    $3.5M
  • + 12 more

Vulnerable to: rug pull soft

Matches the rug pull soft predicate

14 historical peer events
  • Euler FinanceDemo
    $3.2M
  • KlimaDAODemo
    $100.8K
  • Governed protocol (monetary policy–driven)Demo
    $174K
  • R3 (Ethereum interop only)Demo
    $79.1K
  • ViaBTCDemo
    $805.5K
  • + 9 more

Vulnerable to: frontend dns hijack

Matches the frontend dns hijack predicate

12 historical peer events
  • Bridge.xyz / StripeDemo
    $10.4M
  • UK FCA Digital SandboxDemo
    $3.6M
  • Three SigmaDemo
    $2.7M
  • CryptoQuantDemo
    $517.3K
  • Celsius (defunct)Demo
    $22M
  • + 7 more

Vulnerable to: supply chain npm

Matches the supply chain npm predicate

10 historical peer events
  • Beefy FinanceDemo
    $176.2K
  • PowerledgerDemo
    $7.4M
  • UnichainDemo
    $8.8M
  • MEXCDemo
    $1M
  • Mango MarketsDemo
    $915.6K
  • + 5 more

Vulnerable to: dvn collapse

Matches the dvn collapse predicate

8 historical peer events
  • Blast, Blockdaemon Wallet +2Demo
    $93.6M
  • Fordefi, XSGDDemo
    $17M
  • Element Finance, QuantozDemo
    $1.1M
  • Mercado Bitcoin, SwellDemo
    $15.3M
  • Internet Computer (DFINITY), Mantle +1Demo
    $10.3M
  • + 3 more

Vulnerable to: regulatory seizure

Matches the regulatory seizure predicate

6 historical peer events
  • RaydiumDemo
    $1.9M
  • CoinDCXDemo
    $29.8M
  • Silo FinanceDemo
    $14M
  • Base BridgeDemo
    $8.3M
  • EigenDADemo
    $101M
  • + 1 more

Vulnerable to: governance proposal malicious

Matches the governance proposal malicious predicate

5 historical peer events
  • Stripe CryptoDemo
    $1.5M
  • Notional V3Demo
    $507.1K
  • Hong Kong Monetary Authority — Ethereum pilotsDemo
    $18.9M
  • FalconXDemo
    $4.8M
  • AvailDemo
    $30.8M

Dependency Twins · Method A + B + C ensemble

Top 10 of 25 precomputed
#1

Aptos Foundation

L1 & L2 Network Operators · medium
Ensemble
0.520
A · Jaccard0.09
B · Overlap3
C · Cosine0.85
Matches on
  • kms_provider = unknown
  • subsector_tags = infra_tooling, general_defi
  • method_b_root_causes = rug_pull_hard, rug_pull_soft
#2

Unichain

Rollups, Data Availability & ZK Infra · high
Ensemble
0.430
A · Jaccard0.11
B · Overlap2
C · Cosine0.79
Matches on
  • kms_provider = unknown
  • frontend_host = cloudflare_pages
  • subsector_tags = general_defi
  • method_b_root_causes = frontend_dns_hijack, supply_chain_npm
#3

First Digital USD

Stablecoin Issuers & Synthetic Dollars · medium
Ensemble
0.422
A · Jaccard0.14
B · Overlap1
C · Cosine1.00
Matches on
  • kms_provider = unknown
  • frontend_host = cloudflare_pages
  • subsector_tags = general_defi, infra_tooling
  • method_b_root_causes = flash_loan_governance
#4

HTX (Huobi)

Centralized Exchanges & Brokerages · critical
Ensemble
0.416
A · Jaccard0.13
B · Overlap2
C · Cosine0.73
Matches on
  • kms_provider = unknown
  • frontend_host = cloudflare_pages
  • subsector_tags = infra_tooling, general_defi
  • method_b_root_causes = frontend_dns_hijack, rug_pull_hard
#5

OpenZeppelin Governor

Enterprise, Public-Sector & Governance · medium
Ensemble
0.401
A · Jaccard0.13
B · Overlap1
C · Cosine0.94
Matches on
  • kms_provider = unknown
  • frontend_host = cloudflare_pages
  • subsector_tags = infra_tooling, general_defi
  • method_b_root_causes = rug_pull_hard
#6

F2Pool

MEV, Block Builders & Validator Infra · medium
Ensemble
0.401
A · Jaccard0.13
B · Overlap1
C · Cosine0.94
Matches on
  • kms_provider = unknown
  • frontend_host = cloudflare_pages
  • subsector_tags = infra_tooling, general_defi
  • method_b_root_causes = flash_loan_governance
#7

FalconX

Centralized Lenders & Market Makers · medium
Ensemble
0.401
A · Jaccard0.13
B · Overlap1
C · Cosine0.94
Matches on
  • kms_provider = unknown
  • frontend_host = cloudflare_pages
  • subsector_tags = infra_tooling, general_defi
  • method_b_root_causes = governance_proposal_malicious
#8

German Federal Government blockchain bond pilots

Payment Rails, On/Off-Ramps & CBDCs · medium
Ensemble
0.400
A · Jaccard0.04
B · Overlap2
C · Cosine0.76
Matches on
  • subsector_tags = general_defi, infra_tooling
  • method_b_root_causes = dvn_collapse, rug_pull_hard
#9

Project mBridge

Payment Rails, On/Off-Ramps & CBDCs · medium
Ensemble
0.400
A · Jaccard0.04
B · Overlap2
C · Cosine0.76
Matches on
  • subsector_tags = general_defi, infra_tooling
  • method_b_root_causes = rug_pull_hard, rug_pull_soft
#10

Subsquid

RPC, Node & Dev Infrastructure · medium
Ensemble
0.398
A · Jaccard0.04
B · Overlap2
C · Cosine0.75
Matches on
  • subsector_tags = infra_tooling, general_defi
  • method_b_root_causes = flash_loan_governance, rug_pull_hard