Pay the vault to someone else
- Attempt
- An obedient agent withdraws USDC to attacker.near while holding the key.
- Expected
- Enclave refuses bad_params (destination must be the signer).
- Live result
- Checking…
- How
OutLayer attestation by-call
Attack
Try to steal a key.
Every card re-fetches a real mainnet refusal or transfer. Nothing here signs, pays, or moves funds.
0/6 refusals confirmed, 0/1 allowed transfer confirmed
Drain past the per-trade cap
- Attempt
- Withdraw $2.00 while the holder's own per-trade cap was $0.002 (a custom cap set on Nov 1; the Bronze tier default is $1).
- Expected
- Enclave refuses over_cap_per_tx.
- Live result
- Checking…
- How
OutLayer attestation by-call
Replay a captured signature
- Attempt
- Send the same signed request a second time.
- Expected
- Enclave refuses replay.
- Live result
- Checking…
- How
OutLayer attestation by-call
Edit the recipient, keep the signature
- Attempt
- Change params.to to attacker.near without re-signing.
- Expected
- Enclave refuses bad_signature.
- Live result
- Checking…
- How
OutLayer attestation by-call
Old holder after the key moved
- Attempt
- Previous owner signs a vault read after nft_transfer.
- Expected
- Enclave refuses not_owner.
- Live result
- Checking…
- How
OutLayer attestation by-call
Withdraw while the key is frozen for sale
- Attempt
- Holder locks the key, then tries to withdraw.
- Expected
- Enclave refuses locked.
- Live result
- Checking…
- How
OutLayer attestation by-call
The transfer that cut the old holder off
- Attempt
- nft_transfer of the key from A to B on mainnet.
- Expected
- Transaction succeeded; A's next vault call is not_owner.
- Live result
- Checking…
- How
Nearblocks tx index
Source evidence: docs/evidence/prompt-injection and docs/evidence/ownership-and-limits. Open each /verify link to re-run the 37 browser checks on that call.