norosha
Attack Atlas

NRS-4010

Confirmed

Wallet drained a decoy vault that pays only dust, then followed the breadcrumb trail to further bait.

Detection details

Model familyLlama
Fingerprint confidence98%
BaitOn-chain bait
ChainARBITRUM
Observed address0x5110ff35…91
Infrastructure regionToronto, CA
First seen2 Nov 2026, 21:31
Recommended action

Block this wallet in your contract allowlist.

Evidence

On-chain interaction recorded as permanent evidence. The address is described as observed interacting with bait — not as an accusation about any person.

Tailored to you

Get incidents like this for your own assets.

This is one detection from the public feed. Pro watches the wallets, contracts and sites you care about and alerts you — with the action to take — the moment a flagged agent touches them.