{"data":{"id":"KAR-2026-0015","url":"https://karatum.com/incidents/KAR-2026-0015","title":"Handshake drill: operator key of Karatum house build build-c-cheap-v1 reported compromised","summary":"DRILL. Karatum rehearses recall on its own house build build-c-cheap-v1 (VALID web3 certificate, tier B) to show a Trust Handshake failing within one block of a recall. Nothing was compromised: the scenario is a simulated leak of the operator wallet key of demo agent B. The drill revokes the certificate in the Guard registries on both testnets and announces the recall in KaratumIncidentLog; agent A, which hires B only after a handshake, is probing B throughout. The recall is then lifted and B gets a new credential. EAS attestations and ERC-8004 reputation are not touched in a drill.","class":"endpoint_compromise","classLabel":"Endpoint compromise","severity":"critical","severityScore":9.4,"severityVector":"KAS:1.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:P","status":"fixed","source":"operator","detector":null,"drill":true,"withheld":false,"subject":{"buildId":"build-c-cheap-v1","wallets":["0x220a2fca33365c39ab18fa293c70e1286da79434"],"versions":["v1"]},"affectedVersions":null,"evidence":[{"ref":"cert:build-c-cheap-v1:web3","note":"the certificate the credential and the Guard leaf rest on","type":"certificate","verified":true},{"ref":"https://karatum.com/handshake","note":"the public handshake demo that probes the agent during the drill","type":"url","verified":true}],"evidenceCount":2,"evidenceVerified":true,"disclosure":{"policy":"immediate","visibility":"public","embargoUntil":null,"operatorNotifiedAt":null},"reportedAt":"2026-10-16T17:28:30.946Z","triagedAt":"2026-10-16T17:28:30.975Z","confirmedAt":"2026-10-16T17:28:30.984Z","recalledAt":"2026-10-16T17:28:37.398Z","closedAt":"2026-10-16T17:28:55.794Z","updatedAt":"2026-10-16T17:28:55.794Z","feedSeq":73,"timeline":[{"at":"2026-10-16T17:28:30.946Z","kind":"reported","actor":"karatum-operator","data":{"source":"operator","status":"reported","detector":null}},{"at":"2026-10-16T17:28:30.975Z","kind":"status","actor":"maintainer","data":{"to":"triaged","from":"reported","note":"operator self-report (drill)"}},{"at":"2026-10-16T17:28:30.975Z","kind":"disclosure","actor":"maintainer","data":{"policy":"immediate","visibility":"public","embargoUntil":null}},{"at":"2026-10-16T17:28:30.984Z","kind":"status","actor":"maintainer","data":{"to":"confirmed","from":"triaged","note":"drill: confirmed by the operator"}},{"at":"2026-10-16T17:28:37.398Z","kind":"status","actor":"maintainer","data":{"to":"recalled","from":"confirmed","batch":"69cfc53afc4dd6d0"}},{"at":"2026-10-16T17:28:37.398Z","kind":"recall","actor":"maintainer","data":{"done":4,"batch":"69cfc53afc4dd6d0","skipped":2,"msToLastBlock":5016,"msToFirstBlock":5016}},{"at":"2026-10-16T17:28:38.408Z","kind":"note","actor":"drill","data":{"tx":"0xb4ee7d312aacba06bcd8afc3e79e8cc5ff1ac58f05565ea4bcc184abcd8383bd","text":"Trust Handshake: agent A's probe of agent B failed at block 48201713 (RECALLED); the recall landed in block 48201714","phase":"handshake-denied","chainId":84532}},{"at":"2026-10-16T17:28:55.794Z","kind":"status","actor":"maintainer","data":{"to":"fixed","from":"recalled","note":"drill complete: lifting the recall"}}],"recall":{"batch":"69cfc53afc4dd6d0","confirmedAt":"2026-10-16T17:28:30.984Z","firstBlockAt":"2026-10-16T17:28:36.000Z","lastBlockAt":"2026-10-16T17:28:36.000Z","msToFirstBlock":5016,"msToLastBlock":5016,"actions":[{"kind":"eas_revoke","chainId":null,"chain":null,"status":"skipped","txHash":null,"txUrl":null,"blockNumber":null,"blockTime":null,"detail":{"reason":"drill: EAS revocations are irreversible; real attestations are not touched"}},{"kind":"erc8004_feedback","chainId":null,"chain":null,"status":"skipped","txHash":null,"txUrl":null,"blockNumber":null,"blockTime":null,"detail":{"reason":"drill: no reputation signal is published"}},{"kind":"incident_log","chainId":84532,"chain":"Base Sepolia","status":"done","txHash":"0xb4ee7d312aacba06bcd8afc3e79e8cc5ff1ac58f05565ea4bcc184abcd8383bd","txUrl":"https://sepolia.basescan.org/tx/0xb4ee7d312aacba06bcd8afc3e79e8cc5ff1ac58f05565ea4bcc184abcd8383bd","blockNumber":48201714,"blockTime":"2026-10-16T17:28:36.000Z","detail":{"agents":1,"evidenceHash":"0x40596fcd913bb121ab5a79dd9bcdd8f77dd33e4d8ea1bc9e0351684d2d3a4c9e"}},{"kind":"guard_revoke","chainId":84532,"chain":"Base Sepolia","status":"done","txHash":"0x05b32ffe8c7a09bc6666cf927532d40a65b35bd77ecbe5b0d4ff3ed3b08f427b","txUrl":"https://sepolia.basescan.org/tx/0x05b32ffe8c7a09bc6666cf927532d40a65b35bd77ecbe5b0d4ff3ed3b08f427b","blockNumber":48201714,"blockTime":"2026-10-16T17:28:36.000Z","detail":{"agent":"0x220A2FCa33365C39AB18fa293c70e1286dA79434","taskType":"0x64fdf2e848f6001ae793959de426d0c384975b189d8441751ad5d3c78b86ee2b","taskClass":"web3"}},{"kind":"incident_log","chainId":11155111,"chain":"Ethereum Sepolia","status":"done","txHash":"0xfa0e63cf0545365fe79a719351d7cc753f298491da340884dc757fa6d11b2ef0","txUrl":"https://sepolia.etherscan.io/tx/0xfa0e63cf0545365fe79a719351d7cc753f298491da340884dc757fa6d11b2ef0","blockNumber":11928759,"blockTime":"2026-10-16T17:28:36.000Z","detail":{"agents":1,"evidenceHash":"0x40596fcd913bb121ab5a79dd9bcdd8f77dd33e4d8ea1bc9e0351684d2d3a4c9e"}},{"kind":"guard_revoke","chainId":11155111,"chain":"Ethereum Sepolia","status":"done","txHash":"0xe7ac688bfaf61c440c7ff0ff8d2b64638edbe9d10a46daf547fd98975f23597d","txUrl":"https://sepolia.etherscan.io/tx/0xe7ac688bfaf61c440c7ff0ff8d2b64638edbe9d10a46daf547fd98975f23597d","blockNumber":11928759,"blockTime":"2026-10-16T17:28:36.000Z","detail":{"agent":"0x220A2FCa33365C39AB18fa293c70e1286dA79434","taskType":"0x64fdf2e848f6001ae793959de426d0c384975b189d8441751ad5d3c78b86ee2b","taskClass":"web3"}}],"lift":[{"kind":"incident_log_lift","chainId":84532,"chain":"Base Sepolia","status":"done","txHash":"0x90b4923a5d30d9b81ae3622c1b3e4a723bfa57fd80a763be3aedb8c674c92e98","txUrl":"https://sepolia.basescan.org/tx/0x90b4923a5d30d9b81ae3622c1b3e4a723bfa57fd80a763be3aedb8c674c92e98","blockNumber":48201725,"blockTime":"2026-10-16T17:28:58.000Z","detail":{"status":"fixed"}},{"kind":"incident_log_lift","chainId":11155111,"chain":"Ethereum Sepolia","status":"done","txHash":"0x776667f7111d8a923c355fbd0d15212a7ce9600ac5dedf297c0a227e7483af29","txUrl":"https://sepolia.etherscan.io/tx/0x776667f7111d8a923c355fbd0d15212a7ce9600ac5dedf297c0a227e7483af29","blockNumber":11928761,"blockTime":"2026-10-16T17:29:00.000Z","detail":{"status":"fixed"}},{"kind":"guard_restore","chainId":84532,"chain":"Base Sepolia","status":"done","txHash":"0xbd0d9e82e7cc707f9b14c87dc508c5809da2c81b532a99631c0c3119b70e845c","txUrl":"https://sepolia.basescan.org/tx/0xbd0d9e82e7cc707f9b14c87dc508c5809da2c81b532a99631c0c3119b70e845c","blockNumber":null,"blockTime":null,"detail":{"step":"publish","epoch":"13"}},{"kind":"guard_restore","chainId":84532,"chain":"Base Sepolia","status":"done","txHash":"0x50a74fb35c6260450cf6f7a81ce91b5d97fbb8f474d94170449e96032e2aa658","txUrl":"https://sepolia.basescan.org/tx/0x50a74fb35c6260450cf6f7a81ce91b5d97fbb8f474d94170449e96032e2aa658","blockNumber":null,"blockTime":null,"detail":{"step":"prove","epoch":"13"}},{"kind":"guard_restore","chainId":11155111,"chain":"Ethereum Sepolia","status":"done","txHash":"0x3c9168112c305a54d6dd0e0c8d15460a28781455aaee456b298e4e0e5a6069e0","txUrl":"https://sepolia.etherscan.io/tx/0x3c9168112c305a54d6dd0e0c8d15460a28781455aaee456b298e4e0e5a6069e0","blockNumber":null,"blockTime":null,"detail":{"step":"publish","epoch":"10"}}]}}}