Products Lemma APIProof issuance & verification platformTrust402Delegate to agents, and transactSealSign-in for the agent era — no keys handed over
Use cases Manufacturing & Critical InfraInspection Record AssuranceFinance & FinTechCounterparty Record VerificationPublic SectorCertificate-less ProceduresHealthcareQualified Worker AssuranceProcurement & Supply ChainSupplier Credential MonitoringMedia & ContentContent AuthenticityService & RetailCross-group IdentityAI Adoption (cross-industry)AI Run GovernanceDevelopers & Agent OpsAgent Authority Control ▸ Browse the use-case index
Pricing
Resources Critical BriefThe frontier of AI × trustBlogThinking and implementation notesDocumentationAPI & specsVerification CenterReal verification & issuance countsAbout usFRAME00, Inc.ContactSales & press inquiriesGlossaryDefinitionsFAQFrequently asked questions
Get Started ↗ JA
Home / Critical Brief / Category archive
Lemma Critical Brief · Category archive

Attribute Proof Bypass

Unverified acceptance of attribute claims; age, nationality, or jurisdiction forgery.

50 Briefs
No. 150 · 2026-09-24

North Korean IT workers: they won contracts in Japan by posing as local enablers, using ID images the enablers supplied (joint advisory by seven agencies in Japan, the US, Australia and Germany; Japan's first laptop farm dismantled)

the ID was genuine, but nothing tied its holder to the person doing the work before the work was handed over

Pillar 04 Regulatory Attribute Proof Attribute Proof Bypass Identity & Auth Brief →
No. 149 · 2026-09-21

Revolut: It kept handing over customer data for months, answering disclosure requests that arrived through Italy's state-certified email network (PEC; Italian prosecutors investigating)

the state certifies delivery, but nothing verifies the requester's authority before the data goes out

Pillar 04 Regulatory Attribute Proof KYC / AML Disclosure Attribute Proof BypassIdentity & Auth Brief →
No. 141 · 2026-09-04

IDScan.net: More than 153 million scanned driver's licenses handed over at counters were being sold on the dark web

the check ends in a moment, the image does not

Pillar 04 Regulatory Attribute Proof Attribute Proof Bypass KYC / AML DisclosureData Provenance Brief →
No. 140 · 2026-09-01

AnonyMousKIT: AI voice agents posing as 'Apple Support' extracted unlock passcodes from stolen-iPhone owners

being able to state the passcode is treated as proof of ownership

Pillar 04 Regulatory Attribute Proof Attribute Proof Bypass Identity & Auth Brief →
No. 135 · 2026-08-21

Expired Visa EMV contactless cards were shown to pass at checkout

the expiry the terminal reads is never collated against the issuer's signed record

Pillar 04 Regulatory Attribute Proof Attribute Proof Bypass Identity & AuthData Provenance Brief →
No. 126 · 2026-08-07

FCA fines Starling Bank £29m: since 2017, the automated sanctions screening had been matching customers against only a fraction of the list

the screening ran

Pillar 04 Regulatory Attribute Proof KYC / AML Disclosure Attribute Proof BypassIdentity & Auth Brief →
No. 127 · 2026-08-07

Japan's Ministry of Justice puts voice inside publicity rights

but what it sets out is liability after the fact, not a step that checks consent before anything is generated

Pillar 01 Verifiable Origin Data Provenance Attribute Proof BypassIdentity & Auth Brief →
No. 124 · 2026-08-04

Medicare's WISeR AI prior authorization: denials were issued, but nothing records which patient file each determination was checked against

Since January 2026, US Medicare has piloted WISeR, an AI-assisted prior-authorization model, across six states. On June 23, 2026, KFF Health…

Pillar 02 Verifiable AI AI Decision Integrity AI Bias / HarmAttribute Proof Bypass Brief →
No. 117 · 2026-08-03

Speechify verified voice-cloning consent with a single checkbox

CFA asks the FTC and state AGs to investigate

Pillar 04 Regulatory Attribute Proof Attribute Proof Bypass Identity & AuthData Provenance Brief →
No. 119 · 2026-08-03

Japanese police identified 123 sexual-deepfake cases in six months, passing all of last year

no layer verifies the provenance of images made from real people

Pillar 01 Verifiable Origin Data Provenance Attribute Proof BypassIdentity & Auth Brief →
No. 120 · 2026-08-03

TikTok's 3 billion AI labels coexisted with a 550-video AI-presenter disinformation operation

the absence of a label is not proof of authenticity (C2PA / CNA)

Pillar 01 Verifiable Origin Data Provenance Identity & AuthAttribute Proof Bypass Brief →
No. 105 · 2026-07-21

Over 40,000 unauthorized likeness and voice posts across major platforms

and a 100% takedown rate did not stop the same person's models from reappearing (JAPRO FY2025 survey)

Pillar 01 Verifiable Origin Data Provenance Training Data ProvenanceAttribute Proof Bypass Brief →
No. 106 · 2026-07-21

Figma

AI content training defaulted on for individuals and small teams, and off for enterprise

Pillar 01 Verifiable Origin Training Data Provenance Data ProvenanceAttribute Proof Bypass Brief →
No. 101 · 2026-07-10

Paysafe fake SDKs: 17 packages posing as legitimate payment SDKs exfiltrated developers' secrets, payment API keys and all

The supply-chain security firm Socket detected 17 malicious packages (13 on npm, 4 on PyPI) that pose as SDKs for the payment services Paysa…

Pillar 01 Verifiable Origin Code Provenance KYC / AML DisclosureAttribute Proof Bypass Brief →
No. 093 · 2026-07-03

A7A5: a ruble-backed stablecoin moved $110B under sanctions

fully traceable on-chain, yet nothing proves or blocks a sender's sanctions status at transaction time (CertiK / Elliptic)

Pillar 04 Regulatory Attribute Proof KYC / AML Disclosure Attribute Proof BypassData Provenance Brief →
No. 091 · 2026-06-30

Photo ZIP: 'Authentication Laundering' Cleared SPF/DKIM/DMARC So a Fake 'via Calendly' Email Looked Legitimate

a Node.js Backdoor (TonRAT) at Hotel Front Desks

Pillar 01 Verifiable Origin Identity & Auth Code ProvenanceAttribute Proof Bypass Brief →
No. 083 · 2026-06-26

Change Healthcare: a breach of a single Citrix account without MFA halted a third of US medical-claims processing for weeks

with no layer separating "knows the password" from "is the legitimate authorized party," stolen credentials were indistinguishable from legitimate access (UnitedHealth Group congressional testimony)

Pillar 04 Regulatory Attribute Proof Identity & Auth Attribute Proof Bypass Brief →
No. 084 · 2026-06-26

Hong Kong deepfake meeting fraud (Arup): trusting a pre-recorded video call that faked the UK CFO and colleagues, a finance employee sent about HK$200 million in 15 transfers (Hong Kong government LegCo reply, Arup confirmation)

Nothing confirms a payment instruction through a channel other than the one it came in on

Pillar 04 Regulatory Attribute Proof Attribute Proof Bypass Identity & AuthData Provenance Brief →
No. 075 · 2026-06-23

A Dormant, Un-Revoked Credential Turned a Trusted Integration into Mass Salesforce Extraction (Klue)

un-revoked test credentials and long-lived OAuth tokens that go unverified at the moment of action (Huntress / ReliaQuest)

Pillar 03 Agent Authority Proof Identity & Auth Agent InfrastructureAttribute Proof Bypass Brief →
No. 077 · 2026-06-23

IDMerit: about a billion records apparently used for identity checks were reported found in a password-less database, IDMerit denied it, and whose data it was remains unsettled (Cybernews report, IDMerit denial)

No layer can show, from records, whose custody the data was in

Pillar 04 Regulatory Attribute Proof KYC / AML Disclosure Data ProvenanceAttribute Proof Bypass Brief →
No. 078 · 2026-06-23

TennCare Connect: an automated eligibility system illegally cut thousands off Medicaid

eligibility decisions not independently verified before the adverse action of termination (federal court)

Pillar 02 Verifiable AI AI Decision Integrity AI Bias / HarmAttribute Proof Bypass Brief →
No. 066 · 2026-06-19

LiteLLM AI Gateway: from low-privilege user to admin and RCE

authorization not independently verified before action (Obsidian Security)

Pillar 03 Agent Authority Proof Identity & Auth Agent InfrastructureAttribute Proof Bypass Brief →
No. 068 · 2026-06-19

Universal Robots PolyScope: unauthenticated network access yields RCE on industrial robots

the robot doesn't verify the commander's authority before physical action (CVE-2026-8153)

Pillar 03 Agent Authority Proof Identity & Auth Agent InfrastructureAttribute Proof Bypass Brief →
No. 070 · 2026-06-19

Unitree (UniPwn): one shared key across the fleet

per-device identity absent, so one compromise broke the whole fleet (Alias Robotics)

Pillar 03 Agent Authority Proof Identity & Auth Agent InfrastructureAttribute Proof Bypass Brief →
No. 071 · 2026-06-19

DJI ROMO: one authenticated client reached 7,000 robot vacuums' cameras

the cloud didn't separate per-device authorization (No Broker ACL)

Pillar 03 Agent Authority Proof Identity & Auth Agent InfrastructureAttribute Proof Bypass Brief →
No. 065 · 2026-06-17

NHO Hokkaido hospitals: some hard drives from retired electronic medical record systems, sent out for destruction, were never shredded and were won at online auction (NHO Hokkaido Medical Center, Hokkaido Cancer Center)

No layer lets the client confirm, drive by drive, that what it sent was destroyed

Pillar 04 Regulatory Attribute Proof Attribute Proof Bypass Data Provenance Brief →
No. 059 · 2026-06-16

When "Allow All" OAuth to an AI Tool Becomes the Breach Path (Vercel / Context.ai)

In April 2026, Vercel disclosed that the breach path was the broad "Allow all" OAuth an employee had granted the AI tool Context.ai, turned …

Pillar 03 Agent Authority Proof Agent Infrastructure Identity & AuthAttribute Proof Bypass Brief →
No. 064 · 2026-06-16

Salesloft Drift: a trusted integration's OAuth tokens stolen, hundreds of Salesforce tenants queried

broad, persistent OAuth not scope/revocation-verified per action (UNC6395)

Pillar 03 Agent Authority Proof Agent Infrastructure Identity & AuthAttribute Proof Bypass Brief →
No. 056 · 2026-06-15

No Check on Who Was Authorized

64 Million Records Within Reach in McDonald's McHire (Paradox.ai)

Pillar 03 Agent Authority Proof Identity & Auth Attribute Proof BypassData ProvenanceAI Bias / Harm Brief →
No. 057 · 2026-06-15

Reachable Meant Readable

DeepSeek's Unauthenticated ClickHouse Backend Exposure

Pillar 03 Agent Authority Proof Identity & Auth Attribute Proof BypassData Provenance Brief →
No. 054 · 2026-06-13

Generated Until the Rightsholder Said No

The Consent-and-Provenance Gap Behind OpenAI Sora 2

Pillar 01 Verifiable Origin Data Provenance Training Data ProvenanceAttribute Proof Bypass Brief →
No. 046 · 2026-06-12

ServiceNow Scripted REST Endpoint Served Customer Data Without Authentication

ServiceNow disclosed that a Scripted REST endpoint had shipped with requires_authentication=false, letting customer-instance tables be queri…

Pillar 03 Agent Authority Proof Identity & Auth Agent InfrastructureAttribute Proof Bypass Brief →
No. 049 · 2026-06-12

Tesla Robotaxi Crash Records

Control Attribution and Narrative Provenance Left Self-Reported

Pillar 02 Verifiable AI AI Decision Integrity Data ProvenanceAttribute Proof BypassAI Bias / Harm Brief →
No. 050 · 2026-06-12

Generated Without Consent or Age Verification

The Provenance Gap Behind the Grok Deepfake Controversy

Pillar 04 Regulatory Attribute Proof Attribute Proof Bypass Data ProvenanceAI Decision IntegrityAI Bias / Harm Brief →
No. 053 · 2026-06-12

200 Million Views of Fake Celebrities

The Likeness Provenance Gap Behind YouTube's Deepfake Detection

Pillar 01 Verifiable Origin Data Provenance AI Decision IntegrityAttribute Proof Bypass Brief →
No. 052 · 2026-06-12

70,000 Government IDs Leaked to Prove Age

Discord's Third-Party Verification Vendor Breach

Pillar 04 Regulatory Attribute Proof Attribute Proof Bypass Data ProvenanceIdentity & Auth Brief →
No. 040 · 2026-06-09

Phantom Carbon Credits

When an Environmental Attribute Is Issued Without Independent Verification of Its Underlying Data (Operation Greenwashing)

Pillar 04 Regulatory Attribute Proof Attribute Proof Bypass Data Provenance Brief →
No. 041 · 2026-06-09

AOG Technics: over 60,000 aircraft engine parts circulated with forged airworthiness certificates

the provenance of the certificates asserting airworthiness is not independently verified before receipt (SFO)

Pillar 04 Regulatory Attribute Proof Attribute Proof Bypass Data Provenance Brief →
No. 043 · 2026-06-09

Self-Reported Autonomous-Driving Safety, Unverified

Tesla FSD Crash Data and Safety-Stat Methodology

Pillar 02 Verifiable AI AI Decision Integrity Attribute Proof BypassAI Bias / Harm Brief →
No. 032 · 2026-06-08

Polaris Holdings / Booking.com: the bank account that receives a hotel's sales was switched to a third party's inside the legitimate admin screen, and one hotel lost about ¥9 million (company disclosure)

nothing has someone else confirm a payout-account change before money moves

Pillar 04 Regulatory Attribute Proof Attribute Proof Bypass Data ProvenanceIdentity & Auth Brief →
No. 034 · 2026-06-08

Tools to defeat eKYC face checks were on sale on Telegram: a virtual camera slips recorded or synthetic video into bank and exchange liveness checks (MIT Technology Review investigation)

No layer checks that the video came from a real camera, live

Pillar 04 Regulatory Attribute Proof Attribute Proof Bypass AI Decision IntegrityIdentity & Auth Brief →
No. 033 · 2026-06-08

One Edge Appliance Compromise Cascaded to Full Domain Takeover

An Implicitly Trusted F5 BIG-IP Became the Pivot, Along With the Credentials It Stored

Pillar 03 Agent Authority Proof Identity & Auth Agent InfrastructureAttribute Proof Bypass Brief →
No. 035 · 2026-06-08

The Inspections Were Recorded as 'Complete'

But Never Performed. On the Boeing 787, the Existence of a Record Was Mistaken for Proof of the Act

Pillar 04 Regulatory Attribute Proof Attribute Proof Bypass Data ProvenanceIdentity & Auth Brief →
No. 036 · 2026-06-08

12.8 Billion Training Images Contained Passports, Résumés, and Faces

The Provenance and Consent of Training Data Were Never Verified at Collection

Pillar 01 Verifiable Origin Training Data Provenance Data ProvenanceAttribute Proof Bypass Brief →
No. 022 · 2026-06-04

OnlyFake

AI-Generated IDs Bypass Exchange KYC

Pillar 04 Regulatory Attribute Proof Attribute Proof Bypass Identity & AuthData Provenance Brief →
No. 020 · 2026-06-03

Tampered Certification Test Data Behind Type Designation

Product Regulatory-Conformance Attributes Asserted Without Independent Verification on the Path to Shipment

Pillar 04 Regulatory Attribute Proof Attribute Proof Bypass Identity & Auth Brief →
No. 019 · 2026-06-03

Unqualified Engineers Placed Under National-License Claims

Regulatory Attributes Asserted Without Independent Verification at the Point of Assignment

Pillar 04 Regulatory Attribute Proof Attribute Proof Bypass Identity & Auth Brief →
No. 021 · 2026-06-03

Wirecard: forged bank balance confirmations asserted €1.9B that didn't exist

a financial attribute disclosed without independent verification

Pillar 04 Regulatory Attribute Proof Attribute Proof Bypass KYC / AML Disclosure Brief →
No. 006 · 2026-05-30

Google API Keys Remain Usable for 23 Minutes After Deletion

Independent Verification Gap in Credential Revocation Attributes

Pillar 04 Regulatory Attribute Proof Attribute Proof Bypass Identity & Auth Brief →
No. 008 · 2026-05-30

Discord 2.05 Billion Message Scraping via Public API

How Public Channel Data Gets Redistributed as AI Training Datasets

Pillar 01 Verifiable Origin Training Data Provenance Data ProvenanceAttribute Proof Bypass Brief →