{"api":"v1","generated_at":"2026-10-01T07:49:53.487Z","licence":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/","attribution":"TOLL, with a link to the page cited"},"page":"https://tollindex.com/e/saylorinnovations-com-api-kb-drained-wallet-incident-70276a","pinned_page":"https://tollindex.com/e/saylorinnovations-com-api-kb-drained-wallet-incident-70276a/at/2026-10-01T05-50Z","pinned":false,"method":"https://tollindex.com/ledger/method","snapshot_at":"2026-10-01T05:50:06.230Z","snapshot_stamp":"2026-10-01T05-50Z","endpoint":{"slug":"saylorinnovations-com-api-kb-drained-wallet-incident-70276a","canonical_url":"https://saylorinnovations.com/api/kb/drained-wallet-incident","resource":"https://saylorinnovations.com/api/kb/drained-wallet-incident","http_method":"GET","type":"http","x402_version":2,"registries":["cdp"],"primary_registry":"cdp","curated_by_coinbase":false,"description":"Drained-Wallet Incident Guide. An incident-response procedure for a suspected Solana wallet compromise: stopping interaction and preserving evidence before it's lost, distinguishing key/seed compromise from a single malicious approval, creating a verifiably clean new wallet on a clean device, inventorying and safely moving remaining assets with minimum signing, rotating related accounts, and permanently retiring the compromised address rather than reusing it once \"quiet.\"","service_name":"Saylor Innovations Guide Library","declared_category":null,"declared_tags":["wallet-compromise","incident-response","seed-phrase","phishing","solana"],"route_template":null,"registry_updated":"2026-09-25T20:48:10.525Z"},"derived":{"note":"fields no registry supplies; TOLL derives them and marks them derived on the page","title":"kb drained wallet incident","category":"market-data","first_observed_by_toll":"2026-09-24T17:09:13.017Z","last_observed_by_toll":"2026-10-01T05:50:06.230Z","observation_began":"2026-09-10"},"presence":{"listed_now":true,"first_absent_at":null,"delisting_confirmed_at":null,"events":[{"registry":"cdp","at":"2026-09-24T17:09:13.017Z","event":"listed"}]},"accepts":[{"registry":"cdp","ordinal":0,"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","asset_name":null,"symbol":"USDC","decimals":6,"amount_display":"0.02 USDC","amount_units":0.02,"decimals_known":true,"pay_to":"7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7","scheme":"exact"},{"registry":"cdp","ordinal":1,"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","asset":"Es9vMFrzaCERmJfrF4H2FYD4KCoNkY11McCe8BenwNYB","asset_name":null,"symbol":"USDT","decimals":6,"amount_display":"0.02 USDT","amount_units":0.02,"decimals_known":true,"pay_to":"7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7","scheme":"exact"},{"registry":"cdp","ordinal":2,"network":"eip155:8453","asset":"0x833589fcd6edb6e08f4c7c32d4f71b54bda02913","asset_name":"USD Coin","symbol":"USDC","decimals":6,"amount_display":"0.02 USDC","amount_units":0.02,"decimals_known":true,"pay_to":"0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa","scheme":"exact"},{"registry":"cdp","ordinal":3,"network":"eip155:137","asset":"0x3c499c542cef5e3811e1192ce70d8cc03d5c3359","asset_name":"USD Coin","symbol":"USDC","decimals":6,"amount_display":"0.02 USDC","amount_units":0.02,"decimals_known":true,"pay_to":"0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa","scheme":"exact"},{"registry":"cdp","ordinal":4,"network":"eip155:42161","asset":"0xaf88d065e77c8cc2239327c5edb3a432268e5831","asset_name":"USD Coin","symbol":"USDC","decimals":6,"amount_display":"0.02 USDC","amount_units":0.02,"decimals_known":true,"pay_to":"0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa","scheme":"exact"},{"registry":"cdp","ordinal":5,"network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","asset":"So11111111111111111111111111111111111111112","asset_name":null,"symbol":null,"decimals":null,"amount_display":"158392 smallest units, decimals unknown","amount_units":null,"decimals_known":false,"pay_to":"7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7","scheme":"exact"}],"counters":{"observed_at":"2026-10-01T05:50:06.230Z","calls_30d":2,"unique_payers_30d":1,"last_called_at":"2026-09-25T20:48:10.333Z"},"validation":{"latest":{"observed_at":"2026-09-30T07:19:30.726Z","state":"pass","failed_checks":[],"endpoint_http_status":402,"run_id":"daily-2026-09-30"},"uptime":[{"days":7,"observed":5,"passed":5,"ratio":1},{"days":30,"observed":5,"passed":5,"ratio":1},{"days":90,"observed":5,"passed":5,"ratio":1}],"history_90d":[{"observed_at":"2026-09-30T07:19:30.726Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-30","state_changed":false},{"observed_at":"2026-09-29T19:35:38.256Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-29","state_changed":false},{"observed_at":"2026-09-28T06:22:29.202Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-28","state_changed":false},{"observed_at":"2026-09-25T21:06:35.119Z","state":"pass","failed_checks":[],"run_id":"daily-2026-09-25","state_changed":false},{"observed_at":"2026-09-25T19:21:05.001Z","state":"pass","failed_checks":[],"run_id":"new-after-daily-2026-09-24","state_changed":true}]},"seller":{"wallet":"7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7","page":"https://tollindex.com/seller/7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7","endpoints":397,"hosts":1},"reports":0,"registry_record":{"cdp":[{"tags":["wallet-compromise","incident-response","seed-phrase","phishing","solana"],"type":"http","accepts":[{"asset":"EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v","extra":{"memo":"saylor:drained-wallet-incident","session":"eyJhcnRpY2xlSWQiOiJkcmFpbmVkLXdhbGxldC1pbmNpZGVudCIsInJlZmVyZW5jZSI6IjgzTDk0THI1OENDdmtmckpuTUV5Z0ZOeVM3UlN1N3ViOWR5MVc4RnN0R1l1IiwicmVjaXBpZW50IjoiN0xTamZySmY4Zk5zQjhWQTl1N04zV0VuMjVzbVFMcG9iM1N2eVV2WGFjeTciLCJtaW50IjoiRVBqRldkZDVBdWZxU1NxZU0ycU4xeHp5YmFwQzhHNHdFR0drWnd5VER0MXYiLCJtaW5BbW91bnQiOjIwMDAwLCJleHAiOjE3OTAzNjk0MTA0Njl9.wa6gx_k3JUZWKJRB5k2_-HSsQT7V7VRekQuPolowXSM","feePayer":"D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM","reference":"83L94Lr58CCvkfrJnMEygFNyS7RSu7ub9dy1W8FstGYu"},"payTo":"7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7","amount":"20000","scheme":"exact","network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","maxTimeoutSeconds":120},{"asset":"Es9vMFrzaCERmJfrF4H2FYD4KCoNkY11McCe8BenwNYB","extra":{"memo":"saylor:drained-wallet-incident","session":"eyJhcnRpY2xlSWQiOiJkcmFpbmVkLXdhbGxldC1pbmNpZGVudCIsInJlZmVyZW5jZSI6IkE5cU1Uc1NRUUVIQ1h5SndFZ0dRdmFnQnZuOW1QcVJhZXVpa3Q5dEplRUdFIiwicmVjaXBpZW50IjoiN0xTamZySmY4Zk5zQjhWQTl1N04zV0VuMjVzbVFMcG9iM1N2eVV2WGFjeTciLCJtaW50IjoiRXM5dk1GcnphQ0VSbUpmckY0SDJGWUQ0S0NvTmtZMTFNY0NlOEJlbndOWUIiLCJtaW5BbW91bnQiOjIwMDAwLCJleHAiOjE3OTAzNjk0MTA0Njl9.DYvVPhBuTrfjHZ7vvarDj8dh3yiazxGkEGFwA7tKN98","feePayer":"D6ZhtNQ5nT9ZnTHUbqXZsTx5MH2rPFiBBggX4hY1WePM","reference":"A9qMTsSQQEHCXyJwEgGQvagBvn9mPqRaeuikt9tJeEGE"},"payTo":"7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7","amount":"20000","scheme":"exact","network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","maxTimeoutSeconds":120},{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"memo":"saylor:drained-wallet-incident","name":"USD Coin","note":"Base settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.","version":"2","facilitatorOnly":true,"assetTransferMethod":"eip3009"},"payTo":"0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa","amount":"20000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":120},{"asset":"0x3c499c542cEF5E3811e1192ce70d8cC03d5c3359","extra":{"memo":"saylor:drained-wallet-incident","name":"USD Coin","note":"Polygon settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.","version":"2","facilitatorOnly":true,"assetTransferMethod":"eip3009"},"payTo":"0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa","amount":"20000","scheme":"exact","network":"eip155:137","maxTimeoutSeconds":120},{"asset":"0xaf88d065e77c8cC2239327C5EDb3A432268e5831","extra":{"memo":"saylor:drained-wallet-incident","name":"USD Coin","note":"Arbitrum settles through an x402 facilitator. Send payload.signature and payload.authorization (EIP-3009); there is no self-submitted path on this network.","version":"2","facilitatorOnly":true,"assetTransferMethod":"eip3009"},"payTo":"0xA2A8dF0f7CaaBEa4e120a2568118f141569fc8aa","amount":"20000","scheme":"exact","network":"eip155:42161","maxTimeoutSeconds":120},{"asset":"So11111111111111111111111111111111111111112","extra":{"memo":"saylor:drained-wallet-incident","note":"Native SOL: send lamports with a system transfer, not an SPL transfer. Price is quoted live and this quote expires in 120s.","native":true,"session":"eyJhcnRpY2xlSWQiOiJkcmFpbmVkLXdhbGxldC1pbmNpZGVudCIsInJlZmVyZW5jZSI6IkJVU1dIcThhV1o0YVF2ZXJjZjhpeXFKSldCTTVWSDg0Njg4a3JOc1JXeVhOIiwicmVjaXBpZW50IjoiN0xTamZySmY4Zk5zQjhWQTl1N04zV0VuMjVzbVFMcG9iM1N2eVV2WGFjeTciLCJtaW50IjpudWxsLCJtaW5BbW91bnQiOjE1ODM5MiwiZXhwIjoxNzkwMzY5NDEwNDY5fQ.0eejMAueQKLmHL-J8kwiVsTisIH-BvTtEnkcX6vIs4Q","reference":"BUSWHq8aWZ4aQvercf8iyqJJWBM5VH84688krNsRWyXN","solUsdPrice":122.48,"quotedLamports":"163291"},"payTo":"7LSjfrJf8fNsB8VA9u7N3WEn25smQLpob3SvyUvXacy7","amount":"158392","scheme":"exact","network":"solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp","maxTimeoutSeconds":120}],"iconUrl":"https://res.cloudinary.com/bdb-prod/image/upload/c_fill,ar_1:1,w_256,h_256,f_auto,q_auto/v1790235422/bazaar-icons/bc5e2b3d111ebbef.jpg","quality":{"lastCalledAt":"2026-09-25T20:48:10.333Z","l30DaysTotalCalls":2,"l30DaysUniquePayers":1},"resource":"https://saylorinnovations.com/api/kb/drained-wallet-incident","extensions":{"bazaar":{"info":{"input":{"type":"http","method":"GET"},"output":{"type":"json","example":{"c":"Security & OpSec","t":"Drained-Wallet Incident Guide","id":"drained-wallet-incident","body":"An incident-response procedure for a suspected Solana wallet compromise: stopping interaction and preserving evidence before it's lost, distinguishing key/seed compromise from a single malicious approval, creating a verifiably clean new wallet on a clean device, inventorying and safely moving remaining assets with minimum signing, rotating related accounts, and permanently retiring the compromised address rather than reusing it once \"quiet.\""}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET","POST","PUT","PATCH","DELETE","HEAD"],"type":"string"}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string","const":"json"},"example":{"type":"object","required":["id","t","c","body"],"properties":{"c":{"type":"string"},"t":{"type":"string"},"id":{"type":"string"},"body":{"type":"string"},"price":{"type":["number","null"]},"license":{"type":"string"}}}}}}}}},"description":"Drained-Wallet Incident Guide. An incident-response procedure for a suspected Solana wallet compromise: stopping interaction and preserving evidence before it's lost, distinguishing key/seed compromise from a single malicious approval, creating a verifiably clean new wallet on a clean device, inventorying and safely moving remaining assets with minimum signing, rotating related accounts, and permanently retiring the compromised address rather than reusing it once \"quiet.\"","lastUpdated":"2026-09-25T20:48:10.525Z","serviceName":"Saylor Innovations Guide Library","x402Version":2}]}}