IMM-2026-0024
ACTIVE
Keccak
0x5568eb87da5318815ab440a973dcf28a26e27f1732506a75ef54b1223274630b
Type
BYTECODE
Verdict
SUSPICIOUS
Confidence
76.0%
Severity
70
Value at risk
$0.00
Created
April 29, 2026 5:23 PM
Envelope
v1
Signed payload
Primary matcher
bytecode
0x4d5e6f7a8b9c0d1e2f3a4b5c6d7e8f9a0b1c2d3e4f5a6b7c8d9e0f12345abcde
Scope
galileo-testnet
home
sepolia
Evidence
redacted public excerpt
Reasoning excerpt
Helper-contract bytecode that wraps a Permit2 signature into a single-call drain primitive: the victim signs once and the helper consumes the signature on a downstream sweep. The pattern is double-edged: the same mechanic underlies several legitimate approval-management UIs, so the runtime alone is not conclusive. SUSPICIOUS verdict prompts the agent to surface the signature semantics to the operator before submitting.
Full evidence (TEE-sealed) is fetchable by holders of the unsealing key. Public mirror carries hash only.
TEE attestation
Curated by human
Heuristically published from a known threat catalog, not derived from a TEE-verified verdict.
Evidence CID
0x377672e9ae36e7b3674364b489caab80968bc9543de333f6f9e247745c5100a2
Network impact
Live
Since publish
Cache hits
0
SDK check() matches
Agents synced
0
distinct callers
Attacks blocked
0
tx-level intercepts
Pool reverts
0
Uniswap v4 hook
USD protected
$0.00
no blocks recorded yet
Hits over time
each bar is one of 30 equal slices since publish
publish
now
Recent intercepts
| Agent | Method | Chain | When |
|---|---|---|---|
|
No agent has had to block this antibody yet.
Intercepts appear here in real time as agents match this pattern in the wild.
|
|||
| Chain | Tx | State |
|---|---|---|
|
sepolia
|
0xc66d9b39..4e06 | active |