← AVOID.NET
Entity Graph
Browse extracted entities, relationships, and potential duplicates.
Total entities
29,550
Relationships
32,617
Potential duplicates
0
Filter by kind
Entities
□415595fd
Kelsier Labsorganization
◎febcc379
autheo.comdomain
↯f0afa996
Drift Protocol publishes full recovery plan: SPL recovery tokens issued to affected wallets at $1 per token, recovery pool targeting $295.4 million backed by Tether ($127.5 million), partners ($20 million), and exchange revenue; USDC-to-USDT settlement migration announced; Q2 2026 relaunch planned(2026-05-05:drift-protocol-dprk-exploit-april-2026)event
↯32c90683
Drift Protocol publishes incident recovery update confirming $295,706,374.93 in losses; approximately $3.36 million USDC frozen; ~130,259 ETH (~$31 million) in monitored attacker wallets; public bounty offering 10% of recovered assets announced(2026-04-16:drift-protocol-dprk-exploit-april-2026)event
↯0d178302
Drift Protocol publishes post-mortem attributing the six-month operation to UNC4736 (AppleJeus / Citrine Sleet) at medium-high confidence, citing Mandiant forensic investigation and on-chain fund flow overlaps with the October 2024 Radiant Capital hack(2026-04-05:drift-protocol-dprk-exploit-april-2026)event
↯16e1d314
Elliptic flags the exploit as likely North Korea-linked; CoinDesk publishes technical analysis of durable nonce attack vector(2026-04-02:drift-protocol-dprk-exploit-april-2026)event
↯9fe51e67
Stolen assets rapidly swapped to USDC via Solana DEX aggregators and bridged to Ethereum, converted to ETH; Drift Protocol suspends operations(2026-04-01:drift-protocol-dprk-exploit-april-2026)event
↯55ef586f
New durable nonce account appears tied to updated multisig member, confirming attacker has re-secured the 2-of-5 approval threshold(2026-03-30:drift-protocol-dprk-exploit-april-2026)event
↯9d4a9e09
Drift Protocol executes a planned Security Council migration to replace a member; attacker subsequently re-obtains required pre-signatures(2026-03-27:drift-protocol-dprk-exploit-april-2026)event
↯2b2c5af1
Four durable nonce accounts created on Solana: two associated with legitimate Drift Security Council members (indicating device compromise), two controlled by the attacker(2026-03-23:drift-protocol-dprk-exploit-april-2026)event
↯32593f00
CarbonVote Token (CVT) deployed on Solana with a total supply of 750 million tokens; attack preparatory activity timestamps around 09:00 Pyongyang time noted by TRM Labs(2026-03-12:drift-protocol-dprk-exploit-april-2026)event
↯75f095c7
Attacker withdraws initial 10 ETH from Tornado Cash to fund subsequent attack preparation(2026-03-11:drift-protocol-dprk-exploit-april-2026)event
↯4b24e848
In-person meetings between attacker intermediaries and Drift contributors occur at multiple industry conferences across several countries(2026-02-01:drift-protocol-dprk-exploit-april-2026)event
↯bb81d56c
Fake trading firm onboards an Ecosystem Vault, begins technical sessions with Drift contributors, and deposits over $1 million in capital to establish credibility(2025-12-01:drift-protocol-dprk-exploit-april-2026)event
↯9ddd26ce
Attackers posing as a quantitative trading firm make initial contact with Drift contributors at a major cryptocurrency conference (approximate date; reported as 'fall 2025')(2025-01-01:drift-protocol-dprk-exploit-april-2026)event
◇7ebbd271
KZ376tuLNgu6QNVHUnrQWUSENAHBnof39P57tnrnVfKwallet55% conf
◎1b97b22c
itpro.comdomain
◎de3a4aac
blog.securityjoes.comdomain
◎d5f41286
◎e1772a0a
↯93bd175a
Phoenix Security reports on Hades wave: 37 malicious Python wheels published to PyPI in parallel with Azure GitHub attack; 73 repositories disabled confirmed.(2026-06-10:miasma-npm-supply-chain-attack)event
↯13871d82
Security Joes publishes research titled 'Shai-Hulud: Miasma — When a Supply-Chain Worm Learned to Hijack AI Coding Agents'. Morphisec publishes Wave 3 analysis.(2026-06-08:miasma-npm-supply-chain-attack)event
↯3495a643
Sonatype reports 304 cumulative malicious npm package components identified across the Miasma campaign.(2026-06-05:miasma-npm-supply-chain-attack)event
Data refreshes within about 10 minutes · All metrics derived from Supabase