Thermodynamic, negative-expected-value (-EV) cyberdefense. Real-time telemetry, biomimetic two-touch promotion, adversarial cognitive token sponge, and Web3 gas-trap monitoring.
Turning adversarial greed into defensive revenue. Attackers incur real computational and financial costs across five asymmetric lanes.
| Monetized Lane | Target Substrate | Adversary Impact Extracted | Status |
|---|---|---|---|
| Lane 1: Web3 Gas Sweepers | Base Mainnet (8453) | 0.0000 ETH swept to Cold Treasury | ● Active Daemon |
| Lane 2: Cognitive Token Sponge | LLM Twin Emulation | 61 tokens burned on crawlers | ● Streaming |
| Lane 3: Client PoW Tax | Stateless HMAC-SHA256 | 184,102 : 1 Asymmetry Ratio (3 µs verify) | ● Enforced |
| Lane 4: x402 Recon Revenue | Base / USDC Settlement | HTTP 402 micro-pass purchase requirement | ● Enabled |
| Lane 5: Tarpit Time Dilation | Kernel & Cowrie Sockets | Hostile connection slots held hostage | ● Intercepting |
Bait Wallet Address (Base Mainnet):
0xb7902d7F63E3B9D25Cd631cB1be27b8904c84EE0
[Basescan ↗]
Destination Cold Treasury:
0x213b6bB4fB073E86167c58DA6Cb6E9477557DaA8
[Basescan ↗]
Mechanic: The bait key is procedurally exposed in decoy configuration lures with 0 ETH. Automated bots that deposit native gas to drain the wallet are immediately front-run by our on-box sweeper daemon, transferring the gas directly into the cold treasury while the attacker's withdrawal reverts.
| HASSH Fingerprint | Client Software | Behavior Profile | Unique IPs |
|---|---|---|---|
acaa53e0a7d7ac7d1255103f37901306 |
SSH-2.0-OpenSSH_7.4 | ssh_proxy_pivot (Mail/Relay) | 301 IPs (291 Banned) |
390ffe68a68c2a2891210413e80689fa |
SSH-2.0-OpenSSH_8.4p1 Debian | ssh_proxy_pivot | 3 IPs (3 Banned) |
16443846184eafde36765c9bab2f4397 |
SSH-2.0-Go | shell_commands / recon | 3 IPs (3 Banned) |
19532158b559096b89b1a5f7d17175b2 |
SSH-2.0-libssh2_1.11.1 | credential_probe | 4 IPs |
Plants do not trigger on a single rain drop. Sources touching one path are ignored; sources touching two distinct decoy classes inside 6 hours are promoted directly into the kernel drop table.
When probed, the procedural digital twin emits realistic synthetic credentials and OpenAI-format completions, exhausting hostile LLM context windows and confusing automated reconnaissance.
Every bounty event is linked via SHA-384 and BLAKE2b-512 dual cryptographic hashing, providing tamper-evident, quantum-resilient audit chains of all counter-economic extractions.