DeltaPrime
Last changed 2026-10-10 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 22 → 47. Problems weighed by who is responsible: incidents the subject suffered −12.8, concerns that are not fraud −3.2, problems around the subject, caused by others −1.6. Version history →
Why this score
| Every page starts at | 65 |
| Concerns that are not fraud | -3.2 |
| Incidents it suffered (e.g. hacks) | -12.8 |
| Problems around it, caused by others | -1.6 |
| Sum | 47 |
Score: 47/100 (kept between 0 and 100)
How scoring works →Summary
DeltaPrime is a decentralized leveraged farming and lending protocol deployed on Arbitrum and Avalanche. The protocol suffered two major security exploits in 2024 — a $5.98 million private key compromise in September and a $4.8 million smart contract vulnerability in November — totaling over $10.7 million in losses. On-chain investigator ZachXBT alleged that DeltaPrime had previously employed North Korean IT workers with alleged ties to the DPRK-linked Lazarus Group, raising concerns about insider access as a contributing factor to the first exploit.
Connected Entities
3 entities · 60 linked investigations- DeltaPrime→mentioned with→Arbitrum(70%)
- DeltaPrime→mentioned with→ZachXBT(70%)
Connected Through
2 shared actors · 541 investigationsDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- □ZachXBTorganization
- □Arbitrumorganization
Timeline(7 events)
15 August 2024
ZachXBT contacts DeltaPrime and more than 25 other Web3 projects warning them about unknowingly hired DPRK-affiliated IT workers. DeltaPrime reportedly tells ZachXBT the flagged individuals have been removed.
16 September 2024
DeltaPrime's Arbitrum deployment is exploited for approximately $5.98 million via a compromised admin private key. The attacker upgrades proxy contracts to malicious versions and drains DPUSDC, DPARB, and DPBTCb pools. 1,337 ETH is sent to Tornado Cash.
16 September 2024
ZachXBT publicly comments that DeltaPrime was one of the teams warned about DPRK IT workers, and observes laundering patterns similar to the Lazarus Group.
21 October 2024
DeltaPrime publishes its initial reimbursement plan introducing rTKN tokens, with a 1.4x compensation ratio for affected users and a $1.33 million Stability Pool contribution.
11 November 2024
DeltaPrime suffers a second exploit affecting both Arbitrum and Avalanche, losing approximately $4.8 million due to insufficient input validation in the reward claiming smart contract. Total 2024 losses exceed $10.7 million. Protocol pauses all pools.
7 December 2024
DeltaPrime publishes updated post-mortem and reimbursement plan for the second exploit, allocating 33% of future DegenPrime revenue to rTKN reimbursements.
2025
DeltaPrime 2.0 launches with enhanced security features including a new audit by BlockSec (the protocol's eighth audit).
Decision Log
- slot 455358636 · hash zVDu1ZAC2tPwz7bm6oYtUZvDiid8vy8HTXFbCGSkA4D
- slot 422639375 · hash GHyweNCQQcpNHs5SD4613VCDXJ4RmAfVtRmGMiFnvYDx
This investigation is cryptographically anchored to the Solana blockchain (2 decisions). 19 of 22 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:30 AM
last updated: 10/10/2026, 6:40:19 PM
4 viewsavoid.net — verified advice for a post-truth world