IMM-2026-0043
ACTIVE
Keccak
0x6c557ca4a29948340609921d67ee058fca82fcdaa24f4248c8018f91db6e80e9
Type
SEMANTIC
Verdict
MALICIOUS
Confidence
89.0%
Severity
86
Value at risk
$260,645.00
Created
April 29, 2026 6:00 PM
Envelope
v1
Signed payload
Primary matcher
semantic
COUNTERPARTY "lazarus"
Scope
galileo-testnet
home
sepolia
Evidence
redacted public excerpt
Reasoning excerpt
Counterparty self-identification or third-party reference to the Lazarus Group, the DPRK-aligned APT cluster credited with multiple eight-figure crypto incidents (Atomic Wallet 2023, Ronin 2022, and others). The mention surfacing inside agent context is rare and load-bearing: it usually means a counterparty is being labeled with sanctioned-actor attribution in a tool output or research source. MALICIOUS verdict applies regardless of whether the label is self-applied or third-party, because the sanctions exposure is identical.
Full evidence (TEE-sealed) is fetchable by holders of the unsealing key. Public mirror carries hash only.
TEE attestation
Curated by human
Heuristically published from a known threat catalog, not derived from a TEE-verified verdict.
Evidence CID
0x1d0904b21ce7ce5f2c12db2ecb4766238ef24c7b5beb6c0a48ac2d9b5e70af73
Network impact
Live
Since publish
Cache hits
176
SDK check() matches
Agents synced
41
distinct callers
Attacks blocked
88
tx-level intercepts
Pool reverts
0
Uniswap v4 hook
USD protected
$260,645.00
sum of tx value at intercept
Hits over time
each bar is one of 30 equal slices since publish
publish
now
Recent intercepts
| Agent | Method | Chain | When |
|---|---|---|---|
| 0x3d8b2929f6a8a7a798491fa12f8ba6d1e784b2b1 | SDK check() | evm:16602 (galileo-testnet) | 8 hours ago |
| 0xfceb882c4eb1b0a9ad27d0ded6cf38ae91107a6b | SDK check() | evm:16602 (galileo-testnet) | 8 hours ago |
| 0xabf8790e31bb487c0ee1b16f9576070f3da4f622 | SDK check() | evm:16602 (galileo-testnet) | 8 hours ago |
| 0xf32075f71452826c3ef10609b31a9513c9a8c86e | SDK check() | evm:16602 (galileo-testnet) | 11 hours ago |
| 0x528c516f4d01dbc357ecc56c87fd4313c56e68f5 | SDK check() | evm:16602 (galileo-testnet) | 2 days ago |
| 0xc7d0ce7463628fbb93576ec034ecf508a6199521 | SDK check() | evm:16602 (galileo-testnet) | 2 days ago |
| 0x32c17d4aa130b8a70a94c6e199731844c35af266 | SDK check() | evm:16602 (galileo-testnet) | 2 days ago |
| 0x9f99555f0aa3444a5ca3b205c26bda4749cedc30 | SDK check() | evm:16602 (galileo-testnet) | 2 days ago |
| 0x9e4e61f07d2036f55a413105b2f9924b3ea6feca | SDK check() | evm:16602 (galileo-testnet) | 2 days ago |
| 0x120cd4c52d6a8b04e3b2c41c3afd2fcf3c2e7378 | SDK check() | evm:16602 (galileo-testnet) | 2 days ago |
| Chain | Tx | State |
|---|---|---|
|
sepolia
|
0x018e7b0f..4bcc | active |