Attack in progressA leaked CI key of ‹ci-deploy-bot› is being used to break in: 6 accounts and machines created.Open the case
On-chain hot-wallet invariants V-039
Watches hot wallets for balance and nonce drift, unexpected outbound transfers and signer-set changes.
Checks
| Checks | Needs |
|---|---|
| Checks that the signers and threshold of a hot wallet have not changed. | chain wallet |
| Checks that a hot wallet sends only to the destinations registered for it. | chain wallet |
| Checks that a hot wallet signs no more than the install saw. | chain wallet |
| Checks that a hot wallet's balance has not fallen sharply. | chain wallet |
Coverage
Could not read anything this run
Run history
No run has recorded this rule yet.
Findings
No open findings.
What it fed
No case has used a finding of this rule in the last 30 days.
Techniques
None mapped.
How to fix
LookupEvents replay for the scope, warden show (receipt) → raise the budget, fix delegation or the spoke trust by PR; read-only