28 SEP 2026 · 14:00 UTC
Synthetic dataset

Fictional entities, events and values. No live monitoring or production changes.

THREAT OPERATIONS

Investigation overview

Session changes only
Critical exposures02Unresolved in this dataset
Open investigations04/ 051 resolved
Mapped entities56Across five synthetic cases
Modelled value observed$18.7MIllustrative activity · not loss
Controls verified5/ 15Evidence coverage · not accuracy
WB-7F3A/Cross-chain integrityCritical

Bridge settlement mismatch

A destination release exceeds the matched source lock by 150,000 fixture units.

Ethereum + ArbitrumEvidence confidence: Moderate08:07:42 UTC
Entity relationships12 entities · 2 chains
ETHEREUMARBITRUMEV-03Source walletWALLETLock contractCONTRACTMessage 042BRIDGERelayer 03WALLETRelease vaultCONTRACTRecipient 09WALLETSource ledgerCONTRACTSettlement poolCONTRACTFunder 02WALLETReserve walletWALLETRoute BBRIDGETreasuryWALLET
Observed event Context link Review signal
100%

EVIDENCE TIMELINE

28 September 2026 · all times UTC

Select an event to inspect its source and relationship.

WORKING HYPOTHESIS

A release may have crossed the bridge’s accounting boundary without a matching source commitment.

Alternative explanation

An incomplete source index or an unsupported aggregation rule could make a valid release appear unmatched.

RECOMMENDED RESPONSE

Reconcile message payloads, token decimals and finality. Prepare a settlement hold for operator review if the difference remains unexplained.

The mismatch is a review signal. It does not establish an unauthorised release or realised loss.

ADVERSARIAL HARDENING / RESEARCH WORKSPACE

Change the control.
Preserve the invariant.

A practical starting point for synthetically hardened infrastructure: compare a candidate against explicit safety properties before approval.

IsolateSynthetic state01
ChallengeBounded test inputs02
VerifySeven model checks03
ReviewHuman release gate04

C-03 / SELECTED CANDIDATE

Constrained hardening

INVARIANT REGISTERNot evaluated
Unauthorised upgradeAUTH-01 · Role threshold model
Ready
Review windowTIME-01 · Timelock boundary model
Ready
Cross-domain replaySIGN-01 · Domain equality check
Ready
Allowance constraintSPEND-01 · Spend boundary model
Ready
Oracle deviation guardPRICE-01 · Price deviation model
Ready
Storage compatibilitySTATE-01 · Ordered schema comparison
Ready
Value conservationVALUE-01 · Balance transition model
Ready

PROPOSED CHANGES

  • Quorum and review delay enforced
  • Replay domain, allowance and price bounds applied
  • Original storage prefix preserved
MODEL RECEIPT

Run a candidate to generate an inspectable evaluation receipt.

Research boundary

This lab evaluates a small JavaScript policy model. It does not compile contracts, prove equivalence, generate zero-knowledge proofs or provide quantum key splitting. Production work requires isolated execution, threat modelling, independent review and protocol-specific release controls.