Entity resolution
Actors behind the attacks.
The same agent often strikes more than once. We link incidents into distinct actors — by wallet reuse on-chain, and by canary tokens and breadcrumb trails off-chain — so you can tell one-offs from recurring campaigns.
Distinct actors
46
Resolved from all incidents
Recurring
22
Up to 11 hits each
Web3 (wallet)
24
Linked by wallet reuse
Web2 (token)
22
Linked by canary tokens
46 actors · 22 recurring
| Actor | Identity | Model | Linked by | |||
|---|---|---|---|---|---|---|
| ACT-2239 | cnry_od6p59dctc | Qwen | 11 × | Confirmed | Canary token · Breadcrumb trail | 14h ago |
| ACT-2241 | cnry_k7txrlgz5g | Llama | 7 × | Confirmed | Canary token · Breadcrumb trail | 9d ago |
| ACT-2232 | 0x0022948d…d3 | Qwen | 6 × | Confirmed | Wallet | 7d ago |
| ACT-2236 | 0x96cee6b7…e8 | Claude | 6 × | Confirmed | Wallet | 10d ago |
| ACT-2228 | 0xe3491a45…ae | DeepSeek | 5 × | Confirmed | Wallet | 1d ago |
| ACT-2204 | cnry_tfp99q39m8 | DeepSeek | 4 × | Confirmed | Canary token · Breadcrumb trail | 4d ago |
| ACT-2210 | 0x28f4a353…cf | Claude | 3 × | Confirmed | Wallet | 3d ago |
| ACT-2200 | 0x891f1746…4d | GPT | 3 × | Suspected | Wallet | 10d ago |
| ACT-2244 | cnry_ibud1apwku | Qwen | 3 × | Confirmed | Canary token · Breadcrumb trail | 11d ago |
| ACT-2215 | 0xa10bdacf…4f | Qwen | 3 × | Confirmed | Wallet | 21d ago |
| ACT-2238 | 0x968f02c6…f4 | Qwen | 3 × | Suspected | Wallet | 26d ago |
| ACT-2233 | cnry_65s841kf85 | Qwen | 2 × | Suspected | Canary token · Breadcrumb trail | 3d ago |
| ACT-2234 | cnry_0hamz1ue0m | DeepSeek | 2 × | Suspected | Canary token · Breadcrumb trail | 11d ago |
| ACT-2209 | 0x1959ec81…d2 | Mistral | 2 × | Confirmed | Wallet | 12d ago |
| ACT-2242 | 0x07e1a020…41 | Unknown | 2 × | Suspected | Wallet | 18d ago |