Preview surface — demo data. Where real data exists today (e.g. RealT, BlackRock BUIDL, Lift Dollar) we render it; everywhere else we render synthetic enrichment generated deterministically from public signal and clearly marked Demo or Inferred. The Phase 3 roadmap replaces every synthetic source with live ingestion — see Methodology → Exposure Graph & Similarity Engine.
← back to incident ledger

kms misconfigurationDemo

Jan 24, 2023 · $6.9M · infrastructure

Narrative

On 2023-01-24, Union suffered a kms misconfiguration incident resulting in approximately $6,853,145 in losses. The exploit targeted the infrastructure layer. Attribution: unknown. This is a demonstration entry — not a real incident.

Victims

Classification

Root cause
kms_misconfiguration
Secondary causes
private_key_leak
Attack layer
infrastructure
Strategy
human_exploit
Actor role
target
Attribution
unknown
Attacker address
Flash loan
no
Audited at time
yes
Bounty at time
no

AADAPT mappings

DEMO:AADAPT.TA0006DEMO:AADAPT.TA0005DEMO:AADAPT.T1552.005

Evidence

Disclosure date
Jan 24, 2023
Funds recovered
Audit firms at time
Zellic, Spearbit
Post-mortem URLs (synthetic)
  • https://medium.com/union/post-mortem-union-2023-01-24
  • https://rekt.news/union-rekt
tx hashes (2)
  • 0x08e8b2c2449406fb4c5d5cd2e2148044cccff11ae09066541d315b9629f2f19d
  • 0xac69838d4bf836b6ab3621ebdb72ddc47058611c328aaaabb5fdf08e2388270e