Fact-check findings

The reviewer could not reconcile the claim with the evidence it cited. This is a lead, not a ruling that the claim is false.

1. #19[disputed][awaiting moderator]in the timeline

   “ZachXBT traces the $680,000 Favrr exploit to DPRK operatives who had posed as legitimate developers; CTO 'Alex Hong' identified as North Korean. DPRK developer infiltration of Solana projects escalates.”

   reviewerZachXBT traces the $680,000 Favrr exploit to DPRK operatives, identifying CTO 'Alex Hong' as North KoreanThe underlying theft happened in June 2025, but the event describes ZachXBT's act of tracing/identifying the operatives, which was reported in August 2025; the stored date of 2025-06 for this event is therefore incorrect.
   Proposed correction (not yet applied)

   2025-08
   citedcryptopotato.com/zachxbt-uncovers-3-5m-o…de-crypto-firms/
2. #22[disputed][awaiting moderator]in the timeline

   “Drift Protocol on Solana exploited for $285 million in a confirmed DPRK-attributed six-month social engineering operation, the largest Solana hack to date.”

   reviewerDrift Protocol exploited for $285 million in a confirmed DPRK-attributed six-month operation, the largest Solana hack to dateIndependent, credible sources (TRM Labs) identify the 2022 Wormhole bridge hack ($326M) as larger than the Drift Protocol exploit, contradicting the page's claim that Drift is 'the largest Solana hack to date.' The attribution is also reported at 'medium confidence' rather than 'confirmed.'
   Proposed correction (not yet applied)

   Drift Protocol on Solana exploited for $285 million in a DPRK-attributed (medium confidence) six-month social engineering operation, the second-largest Solana hack to date behind the 2022 Wormhole bridge exploit.
   citedthehackernews.com/2026/04/285-million-dr…aced-to-six.html

No source the reviewer could reach confirms or contradicts the claim.

1. #3[unverifiable][awaiting moderator]in the summary

   “The organization has been flagged for investigation by ZachXBT, though no published, verifiable ZachXBT post or report specifically naming Superteam as a fraudulent entity was located during this investigation; the exact nature and basis of that flag remains unconfirmed.”

   reviewerThe organization has been flagged for investigation by ZachXBTIndependent search corroborates the page's own admission that no such ZachXBT post or report could be located; the underlying assertion that Superteam 'has been flagged' therefore rests on no identifiable evidence. The page already discloses this uncertainty rather than presenting the flag as established fact.

The claim was accurate when written but events since have overtaken it.

1. #13[stale][awaiting moderator]in section: Key Personnel

   “He describes his role as 'Sherpa at Superteam' on his personal website and has publicly advised multiple Solana ecosystem projects including Jupiter, Streamflow, Ironforge, and Atlantis, as well as the Solana Foundation itself.”

   reviewerKash Dhanda describes his role as 'Sherpa at Superteam' on his personal website (presented as his current role)The page presents 'Sherpa at Superteam' as Kash Dhanda's present role, but he publicly announced stepping down from that role at the end of 2024 and joined Jupiter full-time in January 2025; the claim is stale as of this review.
   Proposed correction (not yet applied)

   He served as 'Sherpa at Superteam' from the organization's 2021 founding until stepping down at the end of 2024 to join Jupiter full-time in January 2025, and has publicly advised multiple Solana ecosystem projects including Jupiter, Streamflow, Ironforge, and Atlantis, as well as the Solana Foundation itself.
   citedkashdhanda.com/

A cited source no longer resolves or no longer says what the page attributes to it.

1. #20[link rot][awaiting moderator]in the timeline

   “https://cryptopotato.com/zachxbt-uncovers-3-5m-operation-by-north-korean-fake-devs-inside-crypto-firms/”

   reviewerFavrr exploit source citationThe cited URL is live but describes an unrelated ZachXBT investigation; it does not support the specific Favrr/Alex Hong claim made in this timeline entry, which is a source-content mismatch rather than a dead link.
   Proposed correction (not yet applied)

   https://cryptonews.com.au/news/north-korean-operatives-exposed-in-680k-crypto-heist-on-favrr-130652/
   citedcryptopotato.com/zachxbt-uncovers-3-5m-o…de-crypto-firms/

The cited evidence supports part of the claim but not all of it.

1. #10[partially supported][awaiting moderator]in section: Solana Ecosystem Risk Exposure

   “The collapse of FTX in November 2022 significantly impacted Solana, causing SOL to drop from approximately $36 to as low as $12 and reducing DeFi total value locked from over $10 billion to approximately $200 million.”

   reviewerThe FTX collapse in November 2022 caused SOL to drop from approximately $36 to as low as $12 and DeFi TVL to fall from over $10 billion to approximately $200 millionThe general magnitude of both figures is corroborated by independent reporting, but the cited Protos source does not contain the specific dollar figures used, and the $10B TVL peak actually occurred roughly a year before the FTX collapse rather than immediately prior to it.
   citedprotos.com/solanas-close-ties-to-ftx-cau…ructural-damage/
2. #16[partially supported][awaiting moderator]in the timeline

   “ZachXBT publicly alleges that a single entity in Asia (possibly North Korea) employs 21 developers working on 25+ crypto projects, earning $500K/month. DPRK targeting of Solana-adjacent platforms documented.”

   reviewerZachXBT alleges a single entity in Asia employs 21 developers on 25+ crypto projects earning $500K/monthThe cited source describes a range of $300K-$500K/month with a traced figure of $375K, so stating a flat '$500K/month' overstates the low end of the reported range.
   citedwww.tradingview.com/news/cointelegraph:0…ng-500k-a-month/
3. #17[partially supported][awaiting moderator]in the timeline

   “Social media posts allege fraud and non-payment by projects listed on Superteam Earn, with one post claiming 'the crime that goes on on superteam earn is out of this world.' Superteam-affiliated account defends the platform's role as a neutral marketplace.”

   reviewerSocial media posts allege fraud/non-payment on Superteam Earn, with a Superteam-affiliated account defending the platformThe substance and quoted text are confirmed via a cached copy (direct fetch of x.com is access-restricted), but it could not be independently established that @__BigJo is a 'Superteam-affiliated account' rather than an independent defender of the platform.
   citedx.com/__BigJo/status/1897186206028599307
4. #23[partially supported][awaiting moderator]in the timeline

   “ZachXBT alleges ElementalDeFi, a Solana DeFi project, hired a DPRK IT worker for years using a false identity. Stabble, a Solana DEX, urgently warns liquidity providers after a former employee is identified as a North Korean operative who also worked for Elemental.”

   reviewerZachXBT alleges ElementalDeFi hired a DPRK IT worker for years; Stabble warns liquidity providers after identifying a former employee as a North Korean operative who also worked for ElementalBoth halves of the compound claim are independently corroborated and accurate, but the single cited source_url for this entry only supports the ElementalDeFi half; the Stabble/Protos source that supports the second half is listed in sources_used but not attached to this specific timeline entry.
   citedwww.banklesstimes.com/articles/2026/04/0…orker-for-years/

The cited evidence supports the claim as written.

1. #1[confirmed][no action needed]in the summary

   “Superteam is a community-run talent network and grant accelerator operating as the contributor layer of the Solana ecosystem, founded by Tanmay Bhat and Akshay BD and active across 23+ global chapters.”

   reviewerSuperteam was founded by Tanmay Bhat and Akshay BDMultiple independent sources confirm Tanmay Bhat and Akshay BD as co-founders, though a third co-founder (Devaiah Bopanna) is also commonly credited and omitted here; this omission does not make the stated claim false.
   citedsolanacompass.com/projects/superteam
2. #2[confirmed][no action needed]in section: Organization Overview

   “Founded in 2021 by a group of Solana builders including Kash Dhanda, the organization operates as a 'collective of sovereigns'”

   reviewerSuperteam was founded in 2021 by a group of Solana builders including Kash DhandaConsistent with independent reporting that Kash Dhanda was among the founding group that launched SuperteamDAO in September 2021.
   citedkashdhanda.com/work-description/superteam
3. #4[confirmed][no action needed]in section: Superteam Earn Platform

   “Superteam Earn is the flagship product of the organization — an open-source platform (licensed under GNU AGPL v3.0 and hosted publicly on GitHub under SuperteamDAO/earn) that aggregates bounties, grants, and jobs within the Solana ecosystem.”

   reviewerSuperteam Earn is licensed under GNU AGPL v3.0 and hosted on GitHub under SuperteamDAO/earnVerified directly against the GitHub repository.
   citedgithub.com/SuperteamDAO/earn
4. #5[confirmed][no action needed]in section: Superteam Earn Platform

   “Bounties are typically valued around $1,500 USDC, with grants covering early-stage project funding. The platform charges zero commission on transactions.”

   reviewerBounties are typically valued around $1,500 USDC and the platform charges zero commissionFigures corroborated by independent third-party guide to the platform.
   citeddocs.superteam.fun/the-superteam-handboo…perteam-earn-faq
5. #6[confirmed][no action needed]in section: Superteam Earn Platform

   “Community GDP — the aggregate earnings of members across bounties, grants, hackathon wins, and jobs — has been reported to exceed $1.7 million as of 2025 data.”

   reviewerCommunity GDP has been reported to exceed $1.7 million as of 2025 dataConfirmed as a global (not chapter-specific) figure; distinct from Superteam Nigeria's separately reported $1M chapter milestone.
6. #7[confirmed][no action needed]in section: Superteam Earn Platform

   “The FAQ notes that payouts to winning teams go to a single wallet, recommending multi-sig or upfront agreement to prevent internal team disputes — an acknowledged risk at the platform level.”

   reviewerThe FAQ recommends multi-sig or upfront agreement for team payouts to a single walletA direct automated fetch of the FAQ page did not surface this specific passage, but independent search results quoting the handbook confirm the guidance exists as described.
   citeddocs.superteam.fun/the-superteam-handboo…perteam-earn-faq
7. #8[confirmed][no action needed]in section: Regional Chapter Operations

   “Led by Harrison Obiefule, it operates as a registered company with approximately 40 full-time employees as of 2024, including five regional captains and 30 state ambassadors. It ranked sixth globally among Superteam chapters by Community GDP.”

   reviewerSuperteam Nigeria has ~40 full-time employees, 5 regional captains, 30 state ambassadors, and ranks sixth globally by Community GDPVerified directly against the cited source.
   citedwww.mariblock.com/superteam-nigeria-insi…tegy-in-nigeria/
8. #9[confirmed][no action needed]in section: Regional Chapter Operations

   “A survey of 412 Nigerian members (predominantly aged 18–24) found 80% felt their expectations were met; however, only 19% reported earning money through grants and 20% received meaningful technical support, with networking cited as the primary benefit by 67% of respondents.”

   reviewerNigeria survey of 412 members found 80% expectations met, 19% earned via grants, 20% received technical support, 67% cited networking as primary benefitVerified directly against the cited source; figures match exactly.
   citedwww.mariblock.com/superteam-nigeria-insi…tegy-in-nigeria/
9. #11[confirmed][no action needed]in section: Solana Ecosystem Risk Exposure

   “The SEC has classified SOL among digital commodities (not securities) in guidance issued in 2026, reducing one regulatory risk vector.”

   reviewerThe SEC has classified SOL among digital commodities (not securities) in guidance issued in 2026Confirmed, though technically a joint SEC/CFTC release rather than an SEC-only action; this nuance does not materially change the substance of the claim.
   citedwww.fintechweekly.com/news/sec-bitcoin-e…ities-march-2026
10. #12[confirmed][no action needed]in section: Solana Ecosystem Risk Exposure

    “Superteam UAE partnered with legal firm NeosLegal for the Solana Foundation Frontier Hackathon 2026, signaling growing attention to regulatory structure in newer markets.”

    reviewerSuperteam UAE partnered with NeosLegal for the Solana Foundation Frontier Hackathon 2026Verified directly against the cited source.
    citedneoslegal.co/neoslegal-solana-hackathon-partnership/
11. #14[confirmed][no action needed]in section: Key Personnel

    “Harrison Obiefule leads Superteam Nigeria, previously having held marketing roles at Bitget and Cassava Network.”

    reviewerHarrison Obiefule previously held marketing roles at Bitget and Cassava NetworkVerified directly against the cited source.
    citedwww.mariblock.com/superteam-nigeria-insi…tegy-in-nigeria/
12. #15[confirmed][no action needed]in section: Funding and Solana Foundation Dependency

    “In January 2024, Superteam participated in a joint ₹25 Crore ($3M+) grant program for Indian web3 developers in partnership with CoinDCX and the Solana Foundation, demonstrating the depth of its institutional ties.”

    reviewerIn January 2024, Superteam participated in a joint ₹25 Crore ($3M+) grant program with CoinDCX and the Solana FoundationVerified directly against the cited source.
    citedthecsruniverse.com/articles/solana-found…-web3-developers
13. #18[confirmed][no action needed]in the timeline

    “Google Cloud Threat Intelligence Group warns that North Korean IT workers are specifically targeting European Solana projects and Solana job boards, expanding from previous US-focused operations.”

    reviewerGoogle Cloud Threat Intelligence Group (April 2025) warns DPRK IT workers are targeting European Solana projects and job boards, expanding from US-focused operationsConfirmed against the underlying Google Cloud report; the report does not use the exact phrase 'Solana job boards' but does describe a blockchain job marketplace built on Solana among affected projects.
    citedwww.coindesk.com/markets/2025/04/02/goog…uropean-projects
14. #21[confirmed][no action needed]in the timeline

    “ZachXBT publishes investigation into insider trading at Axiom, a Solana trading platform — another Solana-adjacent platform fraud case.”

    reviewerZachXBT publishes investigation into insider trading at Axiom, a Solana trading platform (2026-02-26)Confirmed against the cited source and independent reporting; date matches exactly.
    citedwww.theblock.co/post/391423/zachxbt-inve…-insider-trading
15. #24[confirmed][no action needed]in section: Controversies and Adverse Findings

    “No confirmed scams, fraud allegations, regulatory enforcement actions, or security exploits directly involving Superteam or Superteam Earn have been identified through available sources as of May 2026.”

    reviewerNo confirmed scams, fraud allegations, regulatory enforcement actions, or security exploits directly involving Superteam or Superteam Earn have been identified as of May 2026Independent search corroborates the absence of confirmed enforcement actions or fraud findings against Superteam itself, consistent with this claim.