Preview surface — demo data. Where real data exists today (e.g. RealT, BlackRock BUIDL, Lift Dollar) we render it; everywhere else we render synthetic enrichment generated deterministically from public signal and clearly marked Demo or Inferred. The Phase 3 roadmap replaces every synthetic source with live ingestion — see Methodology → Exposure Graph & Similarity Engine.
← back to incident ledger

phishing drainerDemo

Sep 28, 2023 · $124.5K · human op

Narrative

On 2023-09-28, API3 suffered a phishing drainer incident resulting in approximately $124,450 in losses. The exploit targeted the human_op layer. Attribution: unknown. This is a demonstration entry — not a real incident.

Victims

Classification

Root cause
phishing_drainer
Secondary causes
ice_phishing_approval
Attack layer
human_op
Strategy
human_exploit
Actor role
target
Attribution
unknown
Attacker address
0xd7ac2dee5f3519452121ed67f96d97016c2ad983
Flash loan
no
Audited at time
no
Bounty at time
no

AADAPT mappings

DEMO:AADAPT.TA0001DEMO:AADAPT.TA0040DEMO:AADAPT.T1566.003

Evidence

Disclosure date
Sep 29, 2023
Funds recovered
Audit firms at time
Post-mortem URLs (synthetic)
  • https://medium.com/api3/post-mortem-api3-2023-09-28
tx hashes (1)
  • 0x87b6328b3b0276a4525b7b7461fef01b66eb40fca2ad90b695e9e4209fe8a486