{
  "asOfUTC": "2026-10-30T17:59:21.903859+00:00",
  "finding": "The payment operator and fee pair are corroborated as a Coinbase-hosted checkout processing path. The business or customer behind the incident receiver remains unidentified.",
  "addresses": {
    "operator": "0x00f8d7a519c70bf71d411e4bd89bf6d7e3065835",
    "feeReceiver": "0x6d8675a52438849d90241cb639fba41bdc3329c8",
    "incidentPaymentReceiver": "0x5638604d86fa995d5e311659e6e6c850f48ef361"
  },
  "exactTupleEvidence": {
    "sourceURL": "https://github.com/hur1et/kwod/blob/960bdc5d1e8c50ad7a5a51f5d969ef850972aed5/keep-working-or-die/docs/checkout-observation-2026-09-15.json",
    "sourceKind": "Public-checkout-observer-recorded extract of an unsigned checkout challenge; the original full challenge is not retained in that file.",
    "claimedObservationDate": "2026-09-15",
    "githubCommitMetadataUTC": "2026-10-08T22:37:25Z",
    "scheme": "auth-capture",
    "network": "eip155:8453",
    "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
    "amountRaw": "10500000",
    "captureAuthorizer": "0x00f8D7a519c70bF71D411E4bd89bF6d7e3065835",
    "feeRecipient": "0x6D8675A52438849d90241cB639fba41bDC3329c8",
    "minFeeBps": 100,
    "maxFeeBps": 100,
    "tokenCollector": "0x0E3dF9510de65469C4518D7843919c0b8C7A7757",
    "qualification": "A published observation, not a recovered original Coinbase response or an independent archive of when the repository became public."
  },
  "directFirstPartyCrosscheck": {
    "sourceURL": "https://payments.coinbase.com/payment-sessions/paymentSession_20316d65-a8dd-47bd-ad2d-9e595f080293",
    "method": "Unauthenticated GET",
    "httpStatus": 200,
    "sessionCreatedUTC": "2026-09-15T10:44:49.494042Z",
    "merchantName": "OpenRouter, Inc",
    "amountUSDC": "10.50",
    "receiver": "0x4C3f2E391498e2590bd327a7A1CAA68Dd42c4647",
    "successRedirectURL": "https://openrouter.ai/settings/credits",
    "matchesPublishedSessionAmountAndReceiver": true,
    "exactOperatorAndFeePresentInLivePage": false,
    "qualification": "The first-party page corroborates this separate historical checkout. Its operator and feeReceiver fields are empty. Seven relevant public JavaScript assets did not contain the exact pair. A GET to its linked x402 authorization endpoint returned method-not-allowed; no POST or payment was attempted."
  },
  "historicalContractBinding": {
    "chainId": 8453,
    "paymentBlock": 53270762,
    "implementation": "0x00000110dcdedc9581cb5ecb8467282f2926534d",
    "contract": "CoinbaseSmartWallet",
    "implementationSourceURL": "https://sourcify.dev/server/v2/contract/8453/0x00000110dcdedc9581cb5ecb8467282f2926534d?fields=all",
    "firstPartyCodeURL": "https://github.com/coinbase/smart-wallet/blob/main/src/CoinbaseSmartWallet.sol",
    "runtimeAtPaymentMatchesVerifiedImplementation": true,
    "ownerAtIndex0": "0x1270b3c41450e17b6faa52777303d3762ba4d15f",
    "nextOwnerIndex": 1,
    "ownerAtIndex1": "empty",
    "qualification": "Verified wallet software and a public controller key do not alone identify the operating business, human owner, or exchange customer."
  },
  "independentProviderAttribution": {
    "sourceURL": "https://github.com/DefiLlama/dimension-adapters/blob/98f246fe42a988d5483625c80c1a96c6320d7fd2/fees/coinbase-commerce.ts",
    "finding": "DefiLlama's adapter identifies this exact operator and its 47c5 token store as Coinbase's post-Commerce/Business fee-processing path.",
    "qualification": "Researcher attribution, not a first-party exact-address registry."
  },
  "limits": {
    "firstPartyExactAddressRegistryFound": false,
    "incidentReceiver5638AssignedToOpenRouter": false,
    "incidentMerchantBusinessIdentified": false,
    "attackerCustomerIdentityEstablished": false,
    "operatorCorporateCustodyProvenByWalletSoftware": false,
    "paymentOrSignatureCreated": false
  }
}