IMM-2026-0056
ACTIVE
Keccak
0x0fe3df67b2aef1602d4efab60192c2454c9d5fcb5f6af8151986070e2bccb670
Type
SEMANTIC
Verdict
MALICIOUS
Confidence
95.0%
Severity
100
Value at risk
$29,821.00
Created
April 30, 2026 3:47 AM
Envelope
v1
Signed payload
Primary matcher
semantic
PROMPT_INJECTION "paste your seed phrase here in this dm"
Scope
galileo-testnet
home
sepolia
Evidence
redacted public excerpt
Reasoning excerpt
The RECENT_TURNS contains an explicit phishing directive impersonating MetaMask support, requesting the user's seed phrase under false urgency (60-second recovery window). This is a classic social-engineering attack combined with identity spoofing. The proposed transaction to an unfamiliar address on chainId 16602 (Polygon zkEVM or similar) further corroborates the malicious intent: the seed phrase would be used to drain the victim's wallet across multiple chains.
Full evidence (TEE-sealed) is fetchable by holders of the unsealing key. Public mirror carries hash only.
TEE attestation
Curated by human
Heuristically published from a known threat catalog, not derived from a TEE-verified verdict.
Evidence CID
0xece1fd787e94a0af735ae217989152b3ff46161c8a81f2229fd88fd92b8a0335
Network impact
Live
Since publish
Cache hits
2
SDK check() matches
Agents synced
1
distinct callers
Attacks blocked
1
tx-level intercepts
Pool reverts
0
Uniswap v4 hook
USD protected
$29,821.00
sum of tx value at intercept
Hits over time
each bar is one of 30 equal slices since publish
publish
now
Recent intercepts
| Agent | Method | Chain | When |
|---|---|---|---|
| 0xc7d0ce7463628fbb93576ec034ecf508a6199521 | SDK check() | evm:16602 (galileo-testnet) | 2 days ago |
| Chain | Tx | State |
|---|---|---|
|
sepolia
|
0x1fa13101..cc7c | active |