Preview surface — demo data. Where real data exists today (e.g. RealT, BlackRock BUIDL, Lift Dollar) we render it; everywhere else we render synthetic enrichment generated deterministically from public signal and clearly marked Demo or Inferred. The Phase 3 roadmap replaces every synthetic source with live ingestion — see Methodology → Exposure Graph & Similarity Engine.

Immutable

Identity, NFTs, Gaming & Consumer Appsmedium·risk 0.4495·TVL $30.4M·blast $30.4M·active
Static profile (Identity / Contract / Dependency / Governance / Reputation)

Identity

Sector
Identity, NFTs, Gaming & Consumer Apps
Subsector tags
consumer_app, general_defiDemo
Chain deployments
Ethereum
Website
https://www.immutable.xyzDemo
Launch date
Jun 1, 2024
Immutable
noDemo
Permissionless
yesDemo

Contract

Primary address
0xf57e7e7c23978c3caec3c3548e3d615c346e79ff
Proxy pattern
none
Upgrade authority
UNKNOWN
Multisig threshold
Compiler
0.8.20
Uses assembly
noDemo
Bug bounty
immunefiDemo
Contract addresses
0xf57e7e7c23978c3caec3c3548e3d615c346e79ffDemo
Audits tier
0

Dependency

Oracle providers
Bridge dependencies
Stablecoin dependencies
LST / LRT deps
Demo
DEX liquidity venues
velodrome, camelotDemo
CEX listings
htx, binanceDemo
Custodian
Demo
KMS provider
internal_hsmDemo
RPC provider
self_hostedDemo
Frontend host
vercelDemo
npm lockfile sha
sha256:9b1df09e03968655c00c83887fb05683a8b70b4b3b562051711c18dcc6a53babDemo

Governance

Governance type
noneDemo
Governance token
Demo
Treasury size
$1.4MDemo
Team size
49Demo
Jurisdiction
PTDemo
Incorporated entity
Immutable Labs Ltd.Demo
Anonymous team
yesDemo
Security disclosure
noDemo
IR SLA (hours)
Demo

Reputation

GitHub
https://github.com/immutable/immutableDemo
Commit velocity (30d)
3Demo
Contributors
40Demo
Twitter
@immutableDemo
Discord
https://discord.gg/1v46dgpDemo
Last incident
May 15, 2024Demo
KYT screening
sanctioned_exposureDemo

Threat History

1 recorded incident
ice phishing approvalhuman opunattributed_criminalDemo
$61.2K

On 2024-05-15, Immutable suffered a ice phishing approval incident resulting in approximately $61,186 in losses. The exploit targeted the human_op layer. Attribution: unattributed_criminal. This is a demonstration entry — not a real incident.

DEMO:AADAPT.TA0001DEMO:AADAPT.TA0040

Peer Incidents · Method B

11 root-cause predicate matches

Vulnerable to: reentrancy

Matches the reentrancy predicate

28 historical peer events
  • SommelierDemo
    $30.7M
  • Kyber NetworkDemo
    $2.1M
  • DeribitDemo
    $936K
  • Zora NetworkDemo
    $4.7M
  • Stader LabsDemo
    $16.1M
  • + 23 more

Vulnerable to: rug pull hard

Matches the rug pull hard predicate

22 historical peer events
  • SushiSwapDemo
    $25.6M
  • AlliumDemo
    $110.6K
  • HTX (Huobi)Demo
    $23M
  • Aptos FoundationDemo
    $1.2M
  • EtherscanDemo
    $633.1K
  • + 17 more

Vulnerable to: phishing drainer

Matches the phishing drainer predicate

18 historical peer events
  • GoldfinchDemo
    $1M
  • BitgetDemo
    $739.9K
  • OrcaDemo
    $180.8K
  • Ether.fiDemo
    $443.4K
  • Alchemy PayDemo
    $334.2K
  • + 13 more

Vulnerable to: ice phishing approval

Matches the ice phishing approval predicate

15 historical peer events
  • deBridgeDemo
    $7.5M
  • EulerDemo
    $87.9K
  • Bend DAODemo
    $968.9K
  • Maple FinanceDemo
    $1.4M
  • BlurDemo
    $6.5M
  • + 10 more

Vulnerable to: rug pull soft

Matches the rug pull soft predicate

14 historical peer events
  • Euler FinanceDemo
    $3.2M
  • KlimaDAODemo
    $100.8K
  • Governed protocol (monetary policy–driven)Demo
    $174K
  • R3 (Ethereum interop only)Demo
    $79.1K
  • ViaBTCDemo
    $805.5K
  • + 9 more

Vulnerable to: frontend dns hijack

Matches the frontend dns hijack predicate

12 historical peer events
  • Bridge.xyz / StripeDemo
    $10.4M
  • UK FCA Digital SandboxDemo
    $3.6M
  • Three SigmaDemo
    $2.7M
  • CryptoQuantDemo
    $517.3K
  • Celsius (defunct)Demo
    $22M
  • + 7 more

Vulnerable to: rounding precision

Matches the rounding precision predicate

10 historical peer events
  • Frax EtherDemo
    $51.2K
  • BNY Mellon DigitalDemo
    $750K
  • RedStoneDemo
    $63.2K
  • Bend DAODemo
    $57.9K
  • Starknet BridgeDemo
    $784.1K
  • + 5 more

Vulnerable to: supply chain npm

Matches the supply chain npm predicate

10 historical peer events
  • Beefy FinanceDemo
    $176.2K
  • PowerledgerDemo
    $7.4M
  • UnichainDemo
    $8.8M
  • MEXCDemo
    $1M
  • Mango MarketsDemo
    $915.6K
  • + 5 more

Vulnerable to: dvn collapse

Matches the dvn collapse predicate

8 historical peer events
  • Blast, Blockdaemon Wallet +2Demo
    $93.6M
  • Fordefi, XSGDDemo
    $17M
  • Element Finance, QuantozDemo
    $1.1M
  • Mercado Bitcoin, SwellDemo
    $15.3M
  • Internet Computer (DFINITY), Mantle +1Demo
    $10.3M
  • + 3 more

Vulnerable to: signature malleability

Matches the signature malleability predicate

8 historical peer events
  • Ether.fiDemo
    $17.2M
  • Swell NetworkDemo
    $1.2M
  • Immutable protocolDemo
    $4M
  • The SandboxDemo
    $3.9M
  • PancakeSwapDemo
    $656.7K
  • + 3 more

Vulnerable to: prompt injection agent

Matches the prompt injection agent predicate

4 historical peer events
  • LodestarDemo
    $3.2M
  • Ether.fi CashDemo
    $4.6M
  • HTX (Huobi)Demo
    $3.7M
  • SwellDemo
    $403K

Dependency Twins · Method A + B + C ensemble

Top 10 of 25 precomputed
#1

Kelp DAO

Liquid Staking & Restaking · high
Ensemble
0.550
A · Jaccard0.12
B · Overlap4
C · Cosine0.65
Matches on
  • kms_provider = internal_hsm
  • frontend_host = vercel
  • subsector_tags = general_defi
  • chain_deployments = Ethereum
#2

Governed protocol (monetary policy–driven)

Stablecoin Issuers & Synthetic Dollars · medium
Ensemble
0.451
A · Jaccard0.15
B · Overlap2
C · Cosine0.82
Matches on
  • frontend_host = vercel
  • subsector_tags = consumer_app, general_defi
  • chain_deployments = Ethereum
  • method_b_root_causes = reentrancy, rug_pull_soft
#3

Aptos Foundation

L1 & L2 Network Operators · medium
Ensemble
0.433
A · Jaccard0.03
B · Overlap3
C · Cosine0.62
Matches on
  • subsector_tags = consumer_app, general_defi
  • method_b_root_causes = rug_pull_hard, rug_pull_soft
#4

Lift Dollar (USDL)

Stablecoin Issuers & Synthetic Dollars · high
Ensemble
0.424
A · Jaccard0.12
B · Overlap2
C · Cosine0.76
Matches on
  • subsector_tags = general_defi, consumer_app
  • chain_deployments = Ethereum
  • method_b_root_causes = reentrancy, rounding_precision
#5

Swell

Liquid Staking & Restaking · medium
Ensemble
0.419
A · Jaccard0.12
B · Overlap2
C · Cosine0.74
Matches on
  • subsector_tags = consumer_app, general_defi
  • chain_deployments = Ethereum
  • method_b_root_causes = dvn_collapse, prompt_injection_agent
#6

HTX (Huobi)

Centralized Exchanges & Brokerages · critical
Ensemble
0.418
A · Jaccard0.03
B · Overlap3
C · Cosine0.56
Matches on
  • subsector_tags = consumer_app, general_defi
  • chain_deployments = Ethereum
  • method_b_root_causes = frontend_dns_hijack, rug_pull_hard, prompt_injection_agent
#7

Radiant Capital

Lending, Money Markets & CDPs · medium
Ensemble
0.415
A · Jaccard0.09
B · Overlap2
C · Cosine0.76
Matches on
  • frontend_host = vercel
  • subsector_tags = consumer_app, general_defi
  • chain_deployments = Ethereum
  • method_b_root_causes = reentrancy, ice_phishing_approval
#8

Usual Money (USD0)

Stablecoin Issuers & Synthetic Dollars · high
Ensemble
0.414
A · Jaccard0.13
B · Overlap2
C · Cosine0.71
Matches on
  • frontend_host = vercel
  • subsector_tags = general_defi
  • chain_deployments = Ethereum
  • method_b_root_causes = reentrancy, rug_pull_hard
#9

Ether.fi

Liquid Staking & Restaking · high
Ensemble
0.413
A · Jaccard0.09
B · Overlap2
C · Cosine0.75
Matches on
  • frontend_host = vercel
  • subsector_tags = consumer_app, general_defi
  • chain_deployments = Ethereum
  • method_b_root_causes = signature_malleability, phishing_drainer
#10

Ether.fi Cash

Lending, Money Markets & CDPs · high
Ensemble
0.410
A · Jaccard0.09
B · Overlap2
C · Cosine0.74
Matches on
  • frontend_host = vercel
  • subsector_tags = consumer_app, general_defi
  • chain_deployments = Ethereum
  • method_b_root_causes = supply_chain_npm, prompt_injection_agent