Responsible-use policy

How our bait works

• All bait runs on our own systems and contracts. We never access an attacker's machine — no "hack-back".
• Fake credentials are inert. Bait contracts only ever pay out dust.
• We identify malicious intent by use of the bait, not by watching innocent traffic.

What we publish

The public Attack Atlas shows on-chain addresses and model families, described as observed interacting with bait. We do not publish personal data, and we do not accuse named individuals.

What we ask of customers

• Use Norosha to defend your own systems and users only.
• Place lures only where you are permitted to, and within each platform's rules.
• Treat our data as one input to your security decisions, not an automatic verdict about any person.

Reporting

Found a problem, or think an address was flagged in error? Tell us and we will review promptly.