DeFi protocols with nominally decentralized governance but centralized admin keys face state-sponsored social engineering attacks that exploit the gap between formal and effective decentralization

## Criterion-by-Criterion Review 1. **Schema** — Both modified files are claims with complete frontmatter (type, domain, confidence, source, created, description, title); the enrichment adds a "Supporting Evidence" section to an existing claim with proper source attribution, and the new claim has all required fields with appropriate metadata. 2. **Duplicate/redundancy** — The enrichment to the existing claim adds specific Chainalysis attribution and dollar amount ($285M) that wasn't previously present, while the new claim focuses on a distinct causal mechanism (centralized admin keys creating vulnerability despite token distribution) rather than duplicating the trust-shift thesis of the enriched claim. 3. **Confidence** — The enriched claim maintains "experimental" confidence which is appropriate given it makes a structural argument about DeFi's trust model based on a single (albeit significant) incident; the new claim also uses "experimental" confidence appropriately for a causal claim derived from one case study. 4. **Wiki links** — Multiple wiki links in both files reference claims not visible in this PR (e.g., `[[futarchy-governed DAOs converge on traditional corporate governance scaffolding...]]`, `zero-timelock-governance-migrations-create-critical-vulnerability-windows...`), but as instructed, broken links are expected when linked claims exist in other PRs and should not affect the verdict. 5. **Source quality** — Chainalysis is a credible blockchain forensics firm with established expertise in tracking cryptocurrency-related criminal activity, making it an appropriate source for analyzing the Drift Protocol hack's attack vectors and attribution. 6. **Specificity** — Both claims are falsifiable: someone could disagree by arguing that (a) the attack exploited smart contract vulnerabilities rather than human coordination, or (b) that decentralized governance structures are equally vulnerable to social engineering regardless of admin key architecture. **Factual accuracy check:** The claims accurately represent the Drift Protocol incident as a social engineering attack exploiting human coordination rather than code vulnerabilities, with appropriate scope limitations on the conclusions drawn. <!-- VERDICT:LEO:APPROVE -->