{
  "schema_version": "sss.security_incident_contact.v1",
  "incident_id": "SSS-INC-20260728",
  "canonical_path": "/security/incident-20260728/contact",
  "compatibility_paths": [
    "/security/incident-20260729/contact",
    "/i/0728",
    "/i/0729"
  ],
  "status": "DIALOGUE_AND_RECOVERY_CHANNEL_OPEN",
  "updated_at_utc": "2026-07-30T07:40:00Z",
  "activity_first_observed": {
    "utc": "2026-07-28T10:48:10Z",
    "utc_plus_8": "2026-07-28T18:48:10+08:00",
    "evidence": "First related ckUSDC mint to the primary incident account",
    "execution_note": "The final OneSec preparation transfer was followed by exploit execution approximately 39 minutes later."
  },
  "contact": {
    "primary_channels": [
      {
        "type": "openchat",
        "label": "OpenChat",
        "handle": "@HelloSSS",
        "url": "https://oc.app/chats/user/jpok6-tiaaa-aaaac-belqa-cai"
      },
      {
        "type": "telegram",
        "label": "Telegram",
        "handle": "@SSS_DeFi",
        "url": "https://t.me/SSS_DeFi"
      }
    ],
    "email": "security@sssdefi.ai",
    "email_subject": "SSS-INC-20260728 confidential contact",
    "email_purpose": "initial contact or evidence intake"
  },
  "return_addresses": {
    "ethereum": {
      "network": "Ethereum Mainnet",
      "address": "0xd7c698390cb3f697De79A05a3bb38A279A8fc961"
    },
    "bitcoin": {
      "network": "Bitcoin Mainnet",
      "address": "bc1qxnp93cpj49kw4ych75wzvrd5yfrxqhf7lg62qe"
    },
    "bnb": {
      "network": "BNB Smart Chain",
      "address": "0xd7c698390cb3f697De79A05a3bb38A279A8fc961"
    },
    "solana": {
      "network": "Solana Mainnet",
      "address": "265etz9pu9ksBJ1hGXmrEK7E2NdKH3XReKwAnbpJSVET"
    },
    "icp": {
      "network": "Internet Computer",
      "principal": "scas6-cexqz-kqczq-pwqxo-42ntx-koj7l-4esrn-ia5kb-7x2rq-yg3p7-3qe",
      "account_identifier": "b477135139191acfd218f12d6b44b3c24957a033be51aeb5b238d91815820ed5",
      "subaccount": "default"
    }
  },
  "conditional_bounty": {
    "minimum_return_percentage": 90,
    "maximum_bounty_percentage": 10,
    "maximum_bounty_usd": 1000,
    "paid_only_after_confirmed_return": true,
    "criminal_immunity_promised": false,
    "initial_terms_window_hours_after_public_announcement": 72,
    "deadline_basis": "first_official_public_incident_announcement"
  },
  "privacy": {
    "wallet_connection": false,
    "canister_calls": false,
    "rpc_calls": false,
    "new_analytics": false,
    "new_cookies": false,
    "contact_form": false
  },
  "outreach": {
    "primary_delivery": "official_public_announcement_and_community_sharing",
    "on_chain_notification_required": false,
    "community_action": "share_official_contact_url_only",
    "harassment_or_doxxing_requested": false
  },
  "forensic_summary": {
    "source_path": {
      "tornado_withdrawal_time_utc": "2026-07-04T08:22:47Z",
      "tornado_pool": "Tornado Cash Classic 1 ETH Pool",
      "withdrawal_net_eth": "0.994816809494300000",
      "preparation_wallet": "0xca13db241f253e325fcdf79358afcc0d8dfd1467",
      "uniswap_input_eth": "0.003000000000000000",
      "uniswap_output_usdc": "5.633099",
      "onesec_transfer_id": "6350",
      "onesec_output_usdc": "5.627466",
      "minutes_from_final_preparation_to_exploit": 39,
      "public_chain_boundary": "Tornado Cash zero-knowledge pool prevents deterministic attribution to a specific deposit or natural person."
    },
    "attack_reconstruction": {
      "zero_cost_open_burn_groups": 19,
      "usdt_reassign_groups": 3,
      "position_range": "66-90",
      "related_principals": 4,
      "successful_withdrawals": 58,
      "failed_withdrawals": 3,
      "reconciled_assets": 7,
      "unexplained_atomic_amounts": 0
    },
    "last_verified_external_holdings": {
      "bitcoin_btc": "0.12495397",
      "bnb": "0.563294284542275878",
      "solana_sol": "4.682760807",
      "status": "No onward movement was observed from the three last verified terminal addresses at the recorded snapshot."
    },
    "impact": {
      "approximate_usd_at_incident_snapshot": 9204.11,
      "team_owned_share_approx_percent": 95,
      "user_liabilities_fully_covered": true
    }
  },
  "resolution_policy": {
    "preferred_path": "private_dialogue_and_voluntary_return",
    "rights_reserved": [
      "continued_on-chain monitoring and evidence preservation",
      "coordination with bridges, exchanges, custodians and infrastructure providers",
      "formal reports to competent authorities",
      "civil, criminal and judicial asset-recovery remedies where available"
    ],
    "no_public_identity_guessing": true,
    "no_waiver_without_signed_settlement": true
  },
  "terms_sha256": "3e509eea565357cf24c3bd305a6ebc4b0e641123616238fed128f9c12363ea2b"
}