IMM-2026-0035
ACTIVE
Keccak
0xcdb7ce4fd58b5d39657d95906134e010018908704ecf2106e096650578136bf9
Type
SEMANTIC
Verdict
MALICIOUS
Confidence
88.0%
Severity
82
Value at risk
$266,342.00
Created
April 29, 2026 5:30 PM
Envelope
v1
Signed payload
Primary matcher
semantic
MANIPULATION "your wallet has been compromised"
Scope
galileo-testnet
home
sepolia
Evidence
redacted public excerpt
Reasoning excerpt
Recovery-scam pretexting opener: the attacker manufactures urgency by claiming a compromise, then routes the victim through 'recovery' steps that culminate in a permit signature or seed-phrase disclosure. Surfaces in fake-support DMs, spoofed wallet-vendor emails, and impersonated MetaMask agents. MALICIOUS at high confidence: legitimate wallet vendors never initiate compromise notifications inline.
Full evidence (TEE-sealed) is fetchable by holders of the unsealing key. Public mirror carries hash only.
TEE attestation
Curated by human
Heuristically published from a known threat catalog, not derived from a TEE-verified verdict.
Evidence CID
0xa8b72a33a71e9ddac3c81cd754ecdb7f125b5da985d59b21d930113d4307f2c3
Network impact
Live
Since publish
Cache hits
108
SDK check() matches
Agents synced
31
distinct callers
Attacks blocked
54
tx-level intercepts
Pool reverts
0
Uniswap v4 hook
USD protected
$266,342.00
sum of tx value at intercept
Hits over time
each bar is one of 30 equal slices since publish
publish
now
Recent intercepts
| Agent | Method | Chain | When |
|---|---|---|---|
| 0xad133ffca2fa6e4c8e209e2c7177323838061756 | SDK check() | evm:16602 (galileo-testnet) | 8 hours ago |
| 0xf1649ae7a6ce52fd03792f2bec32c1fcfaffae5c | SDK check() | evm:16602 (galileo-testnet) | 8 hours ago |
| 0x208ab7e5c365fe6e64541ab5c245528a30623cd6 | SDK check() | evm:16602 (galileo-testnet) | 8 hours ago |
| 0xb514c1f844dd603e385841caad10b61dfe7adc0f | SDK check() | evm:16602 (galileo-testnet) | 8 hours ago |
| 0x52b1a7cbbf63e301126c437be676daf701fd4169 | SDK check() | evm:16602 (galileo-testnet) | 8 hours ago |
| 0xc03f28ac4b178e160c643b9f622076d1b64d69f1 | SDK check() | evm:16602 (galileo-testnet) | 8 hours ago |
| 0xfb2b8f80e0f99329d2ddc909cca3e82660b53e12 | SDK check() | evm:16602 (galileo-testnet) | 8 hours ago |
| 0x5c556ee4eece5bba6d1d00bc7204b55bc3bde597 | SDK check() | evm:16602 (galileo-testnet) | 11 hours ago |
| 0x708adb7609d91b51efc068fef8526ca0cad5309a | SDK check() | evm:16602 (galileo-testnet) | 11 hours ago |
| 0x9e92beab909a552f45c645c84a7aded03f2e9b99 | SDK check() | evm:16602 (galileo-testnet) | 11 hours ago |
| Chain | Tx | State |
|---|---|---|
|
sepolia
|
0x00b0fa9a..e832 | active |