Preview surface — demo data. Where real data exists today (e.g. RealT, BlackRock BUIDL, Lift Dollar) we render it; everywhere else we render synthetic enrichment generated deterministically from public signal and clearly marked Demo or Inferred. The Phase 3 roadmap replaces every synthetic source with live ingestion — see Methodology → Exposure Graph & Similarity Engine.

Union

Cross-Chain Bridges & Messagingmedium·risk 0.4300·TVL —·blast $0·active
Static profile (Identity / Contract / Dependency / Governance / Reputation)

Identity

Sector
Cross-Chain Bridges & Messaging
Subsector tags
consumer_app, infra_tooling, general_defiDemo
Chain deployments
—
Website
https://www.union.xyzDemo
Launch date
—
Immutable
noDemo
Permissionless
yesDemo

Contract

Primary address
—
Proxy pattern
UNKNOWN
Upgrade authority
UNKNOWN
Multisig threshold
—
Compiler
0.8.10
Uses assembly
noDemo
Bug bounty
noneDemo
Contract addresses
0xe3ecdebd30b905e545eb3bd9b3d3c2e700c57aca, 0x4734a2b03e3d5d676021498cf30492d5e650ca99, 0x005f7f683f2c0fbcbe69477726c3bf47a059b029Demo
Audits tier
2

Dependency

Oracle providers
—
Bridge dependencies
—
Stablecoin dependencies
—
LST / LRT deps
—Demo
DEX liquidity venues
camelot, aerodromeDemo
CEX listings
—Demo
Custodian
—Demo
KMS provider
gcp_kmsDemo
RPC provider
self_hostedDemo
Frontend host
github_pagesDemo
npm lockfile sha
sha256:9eaec975f6471a3839ae069ee84d159582abf36a2d1f32de40b0d53f15522307Demo

Governance

Governance type
token_votingDemo
Governance token
0x73a8fe22f920c01e86233b596b977095a3a80721Demo
Treasury size
$0Demo
Team size
79Demo
Jurisdiction
OTHERDemo
Incorporated entity
Union Labs Ltd.Demo
Anonymous team
noDemo
Security disclosure
yesDemo
IR SLA (hours)
48Demo

Reputation

GitHub
https://github.com/union/unionDemo
Commit velocity (30d)
1Demo
Contributors
24Demo
Twitter
@unionDemo
Discord
https://discord.gg/1nzh2r6Demo
Last incident
Jan 24, 2023Demo
KYT screening
cleanDemo

Threat History

1 recorded incident
kms misconfigurationinfrastructureunknownDemo
$6.9M

On 2023-01-24, Union suffered a kms misconfiguration incident resulting in approximately $6,853,145 in losses. The exploit targeted the infrastructure layer. Attribution: unknown. This is a demonstration entry — not a real incident.

DEMO:AADAPT.TA0006DEMO:AADAPT.TA0005
View incident →Audited at time

Peer Incidents · Method B

5 root-cause predicate matches

Vulnerable to: flash loan governance

Matches the flash loan governance predicate

18 historical peer events
  • ThirdwebDemo
    $33.2M
  • LayerZero Labs (physical verification context only)Demo
    $40.2M
  • First Digital USDDemo
    $12.1M
  • Protocol-Native Treasury Agents (DAO-embedded)Demo
    $13.8M
  • F2PoolDemo
    $3.5M
  • + 13 more

Vulnerable to: supply chain npm

Matches the supply chain npm predicate

10 historical peer events
  • Beefy FinanceDemo
    $176.2K
  • PowerledgerDemo
    $7.4M
  • UnichainDemo
    $8.8M
  • MEXCDemo
    $1M
  • Mango MarketsDemo
    $915.6K
  • + 5 more

Vulnerable to: dvn collapse

Matches the dvn collapse predicate

8 historical peer events
  • Blast, Blockdaemon Wallet +2Demo
    $93.6M
  • Fordefi, XSGDDemo
    $17M
  • Element Finance, QuantozDemo
    $1.1M
  • Mercado Bitcoin, SwellDemo
    $15.3M
  • Internet Computer (DFINITY), Mantle +1Demo
    $10.3M
  • + 3 more

Vulnerable to: kms misconfiguration

Matches the kms misconfiguration predicate

8 historical peer events
  • Stably, Inc. (issuance via regulated partners depending on program)Demo
    $505K
  • MatrixdockDemo
    $4.3M
  • EulerDemo
    $3.6M
  • NosanaDemo
    $1.7M
  • Tron FoundationDemo
    $1.3M
  • + 3 more

Vulnerable to: governance proposal malicious

Matches the governance proposal malicious predicate

5 historical peer events
  • Stripe CryptoDemo
    $1.5M
  • Notional V3Demo
    $507.1K
  • Hong Kong Monetary Authority — Ethereum pilotsDemo
    $18.9M
  • FalconXDemo
    $4.8M
  • AvailDemo
    $30.8M

Dependency Twins · Method A + B + C ensemble

Top 10 of 25 precomputed
#1

Banque de France CBDC pilots

Payment Rails, On/Off-Ramps & CBDCs · medium
Ensemble
0.381
A · Jaccard0.10
B · Overlap1
C · Cosine0.90
Matches on
  • kms_provider = gcp_kms
  • subsector_tags = infra_tooling, consumer_app, general_defi
  • method_b_root_causes = supply_chain_npm
#2

Protocol-Native Treasury Agents (DAO-embedded)

AI Agents & Autonomous On-Chain Systems · medium
Ensemble
0.378
A · Jaccard0.03
B · Overlap2
C · Cosine0.70
Matches on
  • subsector_tags = general_defi, consumer_app
  • method_b_root_causes = flash_loan_governance
#3

Avail

Rollups, Data Availability & ZK Infra · medium
Ensemble
0.356
A · Jaccard0.09
B · Overlap1
C · Cosine0.83
Matches on
  • kms_provider = gcp_kms
  • subsector_tags = infra_tooling, consumer_app
  • method_b_root_causes = governance_proposal_malicious
#4

Shell Protocol

Smart-Contract DEXs, AMMs & Aggregators · high
Ensemble
0.355
A · Jaccard0.08
B · Overlap1
C · Cosine0.84
Matches on
  • frontend_host = github_pages
  • subsector_tags = general_defi, infra_tooling, consumer_app
  • method_b_root_causes = flash_loan_governance
#5

German Federal Government blockchain bond pilots

Payment Rails, On/Off-Ramps & CBDCs · medium
Ensemble
0.348
A · Jaccard0.09
B · Overlap1
C · Cosine0.81
Matches on
  • kms_provider = gcp_kms
  • subsector_tags = general_defi, infra_tooling
  • method_b_root_causes = dvn_collapse
#6

Nosana

DePIN & Physical Infrastructure Networks · medium
Ensemble
0.348
A · Jaccard0.09
B · Overlap1
C · Cosine0.81
Matches on
  • kms_provider = gcp_kms
  • subsector_tags = general_defi, infra_tooling
  • method_b_root_causes = kms_misconfiguration
#7

FD121 Limited (member of First Digital Group)

Stablecoin Issuers & Synthetic Dollars · medium
Ensemble
0.342
A · Jaccard0.14
B · Overlap0
C · Cosine1.00
Matches on
  • kms_provider = gcp_kms
  • frontend_host = github_pages
  • subsector_tags = infra_tooling, consumer_app, general_defi
#8

Tether

Stablecoin Issuers & Synthetic Dollars · medium
Ensemble
0.342
A · Jaccard0.14
B · Overlap0
C · Cosine1.00
Matches on
  • kms_provider = gcp_kms
  • frontend_host = github_pages
  • subsector_tags = consumer_app, general_defi, infra_tooling
#9

Stripe (Crypto On-Ramp APIs)

Payment Rails, On/Off-Ramps & CBDCs · medium
Ensemble
0.342
A · Jaccard0.09
B · Overlap1
C · Cosine0.79
Matches on
  • kms_provider = gcp_kms
  • subsector_tags = infra_tooling, general_defi
  • method_b_root_causes = dvn_collapse
#10

GCash

Payment Rails, On/Off-Ramps & CBDCs · medium
Ensemble
0.340
A · Jaccard0.04
B · Overlap1
C · Cosine0.83
Matches on
  • subsector_tags = infra_tooling, general_defi, consumer_app
  • method_b_root_causes = kms_misconfiguration