About this research program
An ongoing program of independent on-chain research, same discipline throughout: primary-source anchors, on-chain reconstruction, corrections issued openly when something's found wrong. Findings and on-chain sources are always public and free to reuse with credit. Ongoing work: X. Want the same checks run on your own protocol or portfolio? DM @RealSpap.
Disclaimer
Independent, factual analysis of public on-chain data as of the date noted in each repo's Status/Method section. Role claims (admin, multisig, governance, infrastructure) come solely from on-chain records and cited public sources; they are not allegations of wrongdoing, fraud, or illegal conduct. Concentration of control is reported as a structural fact, not a moral or legal judgment; individual key holders are not named. Findings are a snapshot; on-chain state changes after publication and reports aren't auto-updated. Independent research, not commissioned or audited by any protocol or team discussed; not legal, financial, or investment advice. Believe something here is inaccurate? Contact via X with evidence and it's corrected promptly. Verify all cited addresses, transactions, and figures independently.
onchain-postmortems uses its own disclaimer, tailored to individual exploit reconstructions rather than portfolio-wide screening; see that repo's own Disclaimer section.
License note
Unless a repo states otherwise, findings, data and documentation are published under CC BY 4.0: reuse them freely, including commercially, with credit to Spap and a link to the source repo. Code in those repos and on this site is MIT. onchain-postmortems is MIT in full, including its reconstruction scripts and its dataset, since reproducibility on already-public historical incidents is the point. The private tooling that runs the multisig and admin-key checks is not published; those checks are offered as a service: ask on X.