Preview surface — demo data. Where real data exists today (e.g. RealT, BlackRock BUIDL, Lift Dollar) we render it; everywhere else we render synthetic enrichment generated deterministically from public signal and clearly marked Demo or Inferred. The Phase 3 roadmap replaces every synthetic source with live ingestion — see Methodology → Exposure Graph & Similarity Engine.

Immutable

Identity, NFTs, Gaming & Consumer Appsmedium·risk 0.4495·TVL $30.4M·blast $30.4M·active
Static profile (Identity / Contract / Dependency / Governance / Reputation)

Identity

Sector
Identity, NFTs, Gaming & Consumer Apps
Subsector tags
consumer_app, general_defiDemo
Chain deployments
Ethereum
Website
https://www.immutable.xyzDemo
Launch date
Jun 1, 2024
Immutable
noDemo
Permissionless
yesDemo

Contract

Primary address
0xf57e7e7c23978c3caec3c3548e3d615c346e79ff
Proxy pattern
none
Upgrade authority
UNKNOWN
Multisig threshold
—
Compiler
0.8.20
Uses assembly
noDemo
Bug bounty
immunefiDemo
Contract addresses
0xf57e7e7c23978c3caec3c3548e3d615c346e79ffDemo
Audits tier
0

Dependency

Oracle providers
—
Bridge dependencies
—
Stablecoin dependencies
—
LST / LRT deps
—Demo
DEX liquidity venues
velodrome, camelotDemo
CEX listings
htx, binanceDemo
Custodian
—Demo
KMS provider
internal_hsmDemo
RPC provider
self_hostedDemo
Frontend host
vercelDemo
npm lockfile sha
sha256:9b1df09e03968655c00c83887fb05683a8b70b4b3b562051711c18dcc6a53babDemo

Governance

Governance type
noneDemo
Governance token
—Demo
Treasury size
$1.4MDemo
Team size
49Demo
Jurisdiction
PTDemo
Incorporated entity
Immutable Labs Ltd.Demo
Anonymous team
yesDemo
Security disclosure
noDemo
IR SLA (hours)
—Demo

Reputation

GitHub
https://github.com/immutable/immutableDemo
Commit velocity (30d)
3Demo
Contributors
40Demo
Twitter
@immutableDemo
Discord
https://discord.gg/1v46dgpDemo
Last incident
May 15, 2024Demo
KYT screening
sanctioned_exposureDemo

Threat History

1 recorded incident
ice phishing approvalhuman opunattributed_criminalDemo
$61.2K

On 2024-05-15, Immutable suffered a ice phishing approval incident resulting in approximately $61,186 in losses. The exploit targeted the human_op layer. Attribution: unattributed_criminal. This is a demonstration entry — not a real incident.

DEMO:AADAPT.TA0001DEMO:AADAPT.TA0040

Peer Incidents · Method B

11 root-cause predicate matches

Vulnerable to: reentrancy

Matches the reentrancy predicate

28 historical peer events
  • SommelierDemo
    $30.7M
  • Kyber NetworkDemo
    $2.1M
  • DeribitDemo
    $936K
  • Zora NetworkDemo
    $4.7M
  • Stader LabsDemo
    $16.1M
  • + 23 more

Vulnerable to: rug pull hard

Matches the rug pull hard predicate

22 historical peer events
  • SushiSwapDemo
    $25.6M
  • AlliumDemo
    $110.6K
  • HTX (Huobi)Demo
    $23M
  • Aptos FoundationDemo
    $1.2M
  • EtherscanDemo
    $633.1K
  • + 17 more

Vulnerable to: phishing drainer

Matches the phishing drainer predicate

18 historical peer events
  • GoldfinchDemo
    $1M
  • BitgetDemo
    $739.9K
  • OrcaDemo
    $180.8K
  • Ether.fiDemo
    $443.4K
  • Alchemy PayDemo
    $334.2K
  • + 13 more

Vulnerable to: ice phishing approval

Matches the ice phishing approval predicate

15 historical peer events
  • deBridgeDemo
    $7.5M
  • EulerDemo
    $87.9K
  • Bend DAODemo
    $968.9K
  • Maple FinanceDemo
    $1.4M
  • BlurDemo
    $6.5M
  • + 10 more

Vulnerable to: rug pull soft

Matches the rug pull soft predicate

14 historical peer events
  • Euler FinanceDemo
    $3.2M
  • KlimaDAODemo
    $100.8K
  • Governed protocol (monetary policy–driven)Demo
    $174K
  • R3 (Ethereum interop only)Demo
    $79.1K
  • ViaBTCDemo
    $805.5K
  • + 9 more

Vulnerable to: frontend dns hijack

Matches the frontend dns hijack predicate

12 historical peer events
  • Bridge.xyz / StripeDemo
    $10.4M
  • UK FCA Digital SandboxDemo
    $3.6M
  • Three SigmaDemo
    $2.7M
  • CryptoQuantDemo
    $517.3K
  • Celsius (defunct)Demo
    $22M
  • + 7 more

Vulnerable to: rounding precision

Matches the rounding precision predicate

10 historical peer events
  • Frax EtherDemo
    $51.2K
  • BNY Mellon DigitalDemo
    $750K
  • RedStoneDemo
    $63.2K
  • Bend DAODemo
    $57.9K
  • Starknet BridgeDemo
    $784.1K
  • + 5 more

Vulnerable to: supply chain npm

Matches the supply chain npm predicate

10 historical peer events
  • Beefy FinanceDemo
    $176.2K
  • PowerledgerDemo
    $7.4M
  • UnichainDemo
    $8.8M
  • MEXCDemo
    $1M
  • Mango MarketsDemo
    $915.6K
  • + 5 more

Vulnerable to: dvn collapse

Matches the dvn collapse predicate

8 historical peer events
  • Blast, Blockdaemon Wallet +2Demo
    $93.6M
  • Fordefi, XSGDDemo
    $17M
  • Element Finance, QuantozDemo
    $1.1M
  • Mercado Bitcoin, SwellDemo
    $15.3M
  • Internet Computer (DFINITY), Mantle +1Demo
    $10.3M
  • + 3 more

Vulnerable to: signature malleability

Matches the signature malleability predicate

8 historical peer events
  • Ether.fiDemo
    $17.2M
  • Swell NetworkDemo
    $1.2M
  • Immutable protocolDemo
    $4M
  • The SandboxDemo
    $3.9M
  • PancakeSwapDemo
    $656.7K
  • + 3 more

Vulnerable to: prompt injection agent

Matches the prompt injection agent predicate

4 historical peer events
  • LodestarDemo
    $3.2M
  • Ether.fi CashDemo
    $4.6M
  • HTX (Huobi)Demo
    $3.7M
  • SwellDemo
    $403K

Dependency Twins · Method A + B + C ensemble

Top 10 of 25 precomputed
#1

Kelp DAO

Liquid Staking & Restaking · high
Ensemble
0.550
A · Jaccard0.12
B · Overlap4
C · Cosine0.65
Matches on
  • kms_provider = internal_hsm
  • frontend_host = vercel
  • subsector_tags = general_defi
  • chain_deployments = Ethereum
#2

Governed protocol (monetary policy–driven)

Stablecoin Issuers & Synthetic Dollars · medium
Ensemble
0.451
A · Jaccard0.15
B · Overlap2
C · Cosine0.82
Matches on
  • frontend_host = vercel
  • subsector_tags = consumer_app, general_defi
  • chain_deployments = Ethereum
  • method_b_root_causes = reentrancy, rug_pull_soft
#3

Aptos Foundation

L1 & L2 Network Operators · medium
Ensemble
0.433
A · Jaccard0.03
B · Overlap3
C · Cosine0.62
Matches on
  • subsector_tags = consumer_app, general_defi
  • method_b_root_causes = rug_pull_hard, rug_pull_soft
#4

Lift Dollar (USDL)

Stablecoin Issuers & Synthetic Dollars · high
Ensemble
0.424
A · Jaccard0.12
B · Overlap2
C · Cosine0.76
Matches on
  • subsector_tags = general_defi, consumer_app
  • chain_deployments = Ethereum
  • method_b_root_causes = reentrancy, rounding_precision
#5

Swell

Liquid Staking & Restaking · medium
Ensemble
0.419
A · Jaccard0.12
B · Overlap2
C · Cosine0.74
Matches on
  • subsector_tags = consumer_app, general_defi
  • chain_deployments = Ethereum
  • method_b_root_causes = dvn_collapse, prompt_injection_agent
#6

HTX (Huobi)

Centralized Exchanges & Brokerages · critical
Ensemble
0.418
A · Jaccard0.03
B · Overlap3
C · Cosine0.56
Matches on
  • subsector_tags = consumer_app, general_defi
  • chain_deployments = Ethereum
  • method_b_root_causes = frontend_dns_hijack, rug_pull_hard, prompt_injection_agent
#7

Radiant Capital

Lending, Money Markets & CDPs · medium
Ensemble
0.415
A · Jaccard0.09
B · Overlap2
C · Cosine0.76
Matches on
  • frontend_host = vercel
  • subsector_tags = consumer_app, general_defi
  • chain_deployments = Ethereum
  • method_b_root_causes = reentrancy, ice_phishing_approval
#8

Usual Money (USD0)

Stablecoin Issuers & Synthetic Dollars · high
Ensemble
0.414
A · Jaccard0.13
B · Overlap2
C · Cosine0.71
Matches on
  • frontend_host = vercel
  • subsector_tags = general_defi
  • chain_deployments = Ethereum
  • method_b_root_causes = reentrancy, rug_pull_hard
#9

Ether.fi

Liquid Staking & Restaking · high
Ensemble
0.413
A · Jaccard0.09
B · Overlap2
C · Cosine0.75
Matches on
  • frontend_host = vercel
  • subsector_tags = consumer_app, general_defi
  • chain_deployments = Ethereum
  • method_b_root_causes = signature_malleability, phishing_drainer
#10

Ether.fi Cash

Lending, Money Markets & CDPs · high
Ensemble
0.410
A · Jaccard0.09
B · Overlap2
C · Cosine0.74
Matches on
  • frontend_host = vercel
  • subsector_tags = consumer_app, general_defi
  • chain_deployments = Ethereum
  • method_b_root_causes = supply_chain_npm, prompt_injection_agent