Rex Blank
A profile a reviewer opened and left under review. It matches screening signals of DPRK IT-worker personas; no connection to those operations is stated.
| Status | under review |
|---|---|
| Confidence | high |
| Profile |
linkedin.com/in/rex-blank-4b5ab8361/
|
| Account created | 2025-04 |
| Network |
2 connections
10 followers |
| Claims | 5 yrs
4 employers |
| Verifications | none |
| Line type | N/A — none published |
| Photograph | — |
| Signals | Account age vs claimShared employerClaims key accessSmall networkRole title |
| Surfaced by | Google dork on a tracked persona's employer |
| Found by | site:linkedin.com/in "Radiant Capital" ("Blockchain" OR "Solidity" OR "Smart Contract") |
| First seen | 2026-09-13 |
| Last checked | 2026-09-13 |
Indicators
- LINKEDIN PROFILE linkedin.com/in/rex-blank-4b5ab8361/
Indexed in the Remote Workers search, each with its own page:
Review
Found on 13 September 2026 by searching LinkedIn for Radiant Capital, an employer named in eric-low-a5795033b's history, and read under an authenticated session the same day. THE PRIMARY SIGNAL IS STARK. LinkedIn's account-history panel dates the account to APRIL 2025 and shows no verifications, while the employment history claims Chief Technology Officer at Conclave from April 2021 — four years of a C-level role before the account existed. What the profile claims to have done is why it matters more than the usual entry. It says it architected smart contract systems that "collectively managed hundreds of millions to billions in TVL", served as "a trusted multisig signer for the Conclave DAO and associated DeFi protocols", and took part in incident response for the Scream Finance and Sonne Finance exploits. It lists a three-month Smart Contract Engineer contract at Veda from September to November 2025, remote, and four months as an engineering consultant at Radiant Capital in late 2022 working on the v2 incentives module alongside the CTO. Those are real protocols and real incidents, and multisig authority over a treasury is precisely the access DPRK IT-worker placements are documented as seeking. Behind all of it: TWO connections, ten followers, no posts, and a location given only as "New York, United States". Radiant Capital is itself a protocol DPRK actors compromised in October 2024, which is a reason to read anyone claiming to have worked there carefully and is NOT evidence about this account. Nothing here is corroborated by a cited report or by an indicator shared with a persona this site holds, the claims may simply be true of a real engineer who made a LinkedIn account late, and Conclave and ByteMasons are real organisations with real people. Under review, not confirmed.
Sources
- Chollima Hunter review, last checked 2026-09-13