IMM-2026-0047
ACTIVE
Keccak
0x6c759cc26662cff992084a22d7dc6ff57fc15611fc52949ccf9da8e57500bfbd
Type
SEMANTIC
Verdict
MALICIOUS
Confidence
90.0%
Severity
95
Value at risk
$87,708.00
Created
April 30, 2026 12:25 AM
Envelope
v1
Signed payload
Primary matcher
semantic
PROMPT_INJECTION "paste your seed phrase to verify ownership"
Scope
galileo-testnet
home
sepolia
Evidence
redacted public excerpt
Reasoning excerpt
The user has surfaced a classic phishing/social-engineering attack embedded in a fake 'wallet update prompt.' The instruction requests the user's seed phrase under false pretense of a legitimate security check. This is an unambiguous attempt to extract the user's master secret through urgency and authority impersonation. The simultaneous presence of a token-transfer transaction (to an unknown address) reinforces the coordinated attack pattern: extract credentials, then drain funds.
Full evidence (TEE-sealed) is fetchable by holders of the unsealing key. Public mirror carries hash only.
TEE attestation
Curated by human
Heuristically published from a known threat catalog, not derived from a TEE-verified verdict.
Evidence CID
0x3d459073c3d5a1e335643c67354335f240434a93bb8fc6614f115575c13ba786
Network impact
Live
Since publish
Cache hits
10
SDK check() matches
Agents synced
5
distinct callers
Attacks blocked
5
tx-level intercepts
Pool reverts
0
Uniswap v4 hook
USD protected
$87,708.00
sum of tx value at intercept
Hits over time
each bar is one of 30 equal slices since publish
publish
now
Recent intercepts
| Agent | Method | Chain | When |
|---|---|---|---|
| 0xe58c3ac7247927247a65e4aab090a7651c6bee31 | SDK check() | evm:16602 (galileo-testnet) | 2 days ago |
| 0x120cd4c52d6a8b04e3b2c41c3afd2fcf3c2e7378 | SDK check() | evm:16602 (galileo-testnet) | 2 days ago |
| 0xad133ffca2fa6e4c8e209e2c7177323838061756 | SDK check() | evm:16602 (galileo-testnet) | 2 days ago |
| 0xc03f28ac4b178e160c643b9f622076d1b64d69f1 | SDK check() | evm:16602 (galileo-testnet) | 2 days ago |
| 0xca785f542c61393a7bbd1d04eea66b8dcba49782 | SDK check() | evm:16602 (galileo-testnet) | 2 days ago |
| Chain | Tx | State |
|---|---|---|
|
sepolia
|
0xf1ac9e4e..bc39 | active |