Preview surface — demo data. Where real data exists today (e.g. RealT, BlackRock BUIDL, Lift Dollar) we render it; everywhere else we render synthetic enrichment generated deterministically from public signal and clearly marked Demo or Inferred. The Phase 3 roadmap replaces every synthetic source with live ingestion — see Methodology → Exposure Graph & Similarity Engine.
← back to incident ledger

phishing drainerDemo

Oct 18, 2023 · $4.1M · human op

Narrative

On 2023-10-18, Celestia suffered a phishing drainer incident resulting in approximately $4,089,274 in losses. The exploit targeted the human_op layer. Attribution: unattributed_criminal. This is a demonstration entry — not a real incident.

Victims

Classification

Root cause
phishing_drainer
Secondary causes
ice_phishing_approval
Attack layer
human_op
Strategy
human_exploit
Actor role
target
Attribution
unattributed_criminal
Attacker address
0xb2ec5e707e61e68a53a7a1044fde795896548a7d
Flash loan
no
Audited at time
no
Bounty at time
no

AADAPT mappings

DEMO:AADAPT.TA0001DEMO:AADAPT.TA0040DEMO:AADAPT.T1566.003

Evidence

Disclosure date
Oct 19, 2023
Funds recovered
Audit firms at time
Post-mortem URLs (synthetic)
  • https://medium.com/celestia/post-mortem-celestia-2023-10-18
  • https://rekt.news/celestia-rekt
  • https://blog.celestia.xyz/incident-report
tx hashes (3)
  • 0xc561e6bfb2cb8d11cccf9482ae0f6be60233127d7216ae6f2a4ce1db9a5c2855
  • 0x35d63810b2b3cdb9352b84a2f14d4e831d90471ee240b0010cf0d0629da7a4c1
  • 0xb44f65fa8fd08eeba780698b3b48af604bb50d2d34709e3079552c34551d8a68