Sybil Attacker Report

[zlgitol]

Related Addresses

10 addresses

0x3b35690f4bdb3e99feb9eebbd6df5486550e176f
0x7f512729955368a4fb8689a1bb3738bc54ca9319

0x052fe7da70ae776555dcd9527cf7d74328c2b7b2
0x0d31fc7970a22f0768e2fe50e1d39251d650ec57
0x15ae449f32244548a98f3b1d538befd0cb336aa8
0x49e26b5b45eb007d4c98abad99a62d264db82580
0x71a85bb454884bedff2b82ecfd92d00c8d559c69
0x7b2ba594ca7bfad5297e8b97093ab090ca8a920e
0x86bca3cf993ba0321b663dab4ea78fc372535f5c
0xa6378e60b8807d501762abe2753359d4522ca990

Reasoning

The first two addresses are the funding addresses. There are multiple transactions between these two funding addresses as follows: tx's details https://etherscan.io/tx/0xbc16ba29c12765fff049b748ba034a7fae0c6c25bbb69b2ae87123f01c8c07a2 https://etherscan.io/tx/0x689edd0e4da7cbba91475615db5caac19f08e957a5cfe8305f102f8b6e88479e https://etherscan.io/tx/0xe62b1d043e97bfd32bfe499535a1ec6f82c0d6b35f22c27b3703ad747294cdf1 https://etherscan.io/tx/0xc387f43f9b9fb0219893e87719ae9f65186e3f0ab2badb499ae67e41006f5c41

The hop behaviors of all the addresses including the funding addresses are very similar. Similar behaviors on similar chains: only Polygon <-> Gnosis. https://explorer.hop.exchange/?account=0x3b35690f4bdb3e99feb9eebbd6df5486550e176f https://explorer.hop.exchange/?account=0x7f512729955368a4fb8689a1bb3738bc54ca9319 https://explorer.hop.exchange/?account=0x052fe7da70ae776555dcd9527cf7d74328c2b7b2 https://explorer.hop.exchange/?account=0x0d31fc7970a22f0768e2fe50e1d39251d650ec57 https://explorer.hop.exchange/?account=0x15ae449f32244548a98f3b1d538befd0cb336aa8 https://explorer.hop.exchange/?account=0x49e26b5b45eb007d4c98abad99a62d264db82580 https://explorer.hop.exchange/?account=0x71a85bb454884bedff2b82ecfd92d00c8d559c69 https://explorer.hop.exchange/?account=0x7b2ba594ca7bfad5297e8b97093ab090ca8a920e https://explorer.hop.exchange/?account=0x86bca3cf993ba0321b663dab4ea78fc372535f5c https://explorer.hop.exchange/?account=0xa6378e60b8807d501762abe2753359d4522ca990

Methodology

Pls refer to following figure. Note that the figure is symmetric.

Rewards Address

0x61bC799fD0EB6C791E1cF22E1e9908635444d5A6

[shanefontaine]

Thank you for your report @zlgitol. We have verified that the addresses in this report are Sybil attackers.

The report included 10 eligible addresses as Sybil attackers which means you are eligible for 2957.80082979638079384 HOP! When Hop DAO is live, we will make a proposal for this reward — subject to a 1 year lockup, as mentioned in the original Mirror post.

The qualified addresses are as follows:

0x3b35690f4bdb3e99feb9eebbd6df5486550e176f
0x7f512729955368a4fb8689a1bb3738bc54ca9319
0x052fe7da70ae776555dcd9527cf7d74328c2b7b2
0x0d31fc7970a22f0768e2fe50e1d39251d650ec57
0x15ae449f32244548a98f3b1d538befd0cb336aa8
0x49e26b5b45eb007d4c98abad99a62d264db82580
0x71a85bb454884bedff2b82ecfd92d00c8d559c69
0x7b2ba594ca7bfad5297e8b97093ab090ca8a920e
0x86bca3cf993ba0321b663dab4ea78fc372535f5c
0xa6378e60b8807d501762abe2753359d4522ca990

[shanefontaine]

The Hop transactions 8 months ago (at the time of writing) are all nearly identical! Additionally, here is the behavior of each address on Hop protocol:

address	ensName	total	mainnet	arbitrum	optimism	polygon	xdai	totalVolume
0xa6378e60b8807d501762abe2753359d4522ca990		6	0	0	0	5	1	$6,618.92
0x0d31fc7970a22f0768e2fe50e1d39251d650ec57		8	0	0	0	4	4	$4,028.23
0x052fe7da70ae776555dcd9527cf7d74328c2b7b2		6	0	0	0	3	3	$3,927.50
0x3b35690f4bdb3e99feb9eebbd6df5486550e176f	ninayiyi.eth	4	0	0	0	2	2	$2,798.47
0x7f512729955368a4fb8689a1bb3738bc54ca9319		4	0	0	0	2	2	$2,715.00
0x86bca3cf993ba0321b663dab4ea78fc372535f5c		6	0	0	0	3	3	$2,650.60
0x7b2ba594ca7bfad5297e8b97093ab090ca8a920e		5	0	0	0	2	3	$2,266.05
0x15ae449f32244548a98f3b1d538befd0cb336aa8		4	0	0	0	2	2	$2,140.21
0x71a85bb454884bedff2b82ecfd92d00c8d559c69		2	0	0	0	1	1	$1,358.90
0x49e26b5b45eb007d4c98abad99a62d264db82580		3	0	0	0	1	2	$1,236.64

[zlgitol]

@shanefontaine Thank you very much for your hard work. Would you mind tagging this report as valid? Many thanks.