search

hop-protocol / hop-airdrop

Hop Airdrop distribution 🐰
176 stars 218 forks source link

Sybil Attacker Report #587

Closed shdwy closed 2 years ago

shdwy commented 2 years ago

Related Addresses

0x0f36b9af90ba0e0801173926702934a230ad8df6
0x68d9d6f5fa1a436bd0726bf451145a0ad252e41c
0x48dc01530a54aaa03ad38a03ebf96cf18fc9b3af
0x1f91aa24c6f189acbd42b2cc513beb287c0fe8ee
0x4d8e294d4e4577d62b0279bfaf8d739543b86653
0x9df8cac6b13eb0989dc4ea0b3cf331b0f958a00d
0x6efda4ab10af4a0fafae997f987b96d7a3115799
0x7f1f9340d37c195eeb930602e75a419bfd9ab2f1
0x513f1b0d70a4d31b8dcc52b5e4ae11745f361759
0x7a7ee0e444d8f20b0735aff3fb33137ada693807
0x8cd74469ec134c854fa4a4a6eccfb8148618a2c9
0xa242c9b88b57a56ccb188116c307d272fa628754
0x952c7e4305ca361ebe37bccb5f406624c6386cf0
0x571ae79f8e2133a2dfc2be7c9652ecafd7952ba3
0x30d24a4b7c5a9dda9474be06e26901842094ca16
0xe4f05752bbfd392a6c47bae4f5296036381dcfd4
0x57332b436e2eaa13b3cf1280aad934b11fa52642
0x4eadf8a358f4febf1fed5ef777682709b304bf1d
0x59e8162108255a0195aaba14d030951b9d83a8c3
0x96fc440586b678c60e8135b0020087b5611215e8
0x8dbeb1a1e6ea63baee7eed1dbf740ba2e53e2095
0x53d9d5f659af25e5218dad06c3d7c6749e70c8e8
0x7fa2f92fc109e1f5cf47580325eeafa7c0e9d690
0x5c10ba522e8ba9c69d192c31206d23ef9e54418d
0x29882c37f2d2a0de669f7e88168c9e7885e2f952
0x45b8ffb907aa15a3f30948974ab5659cbcaf3a2d

-->

Reasoning

All addresses are funded by 0x942c49276b6c3f45a5571c4c1a19b1a7ef3bb3cc between Dec 11, 2021 & Dec 12, 2021 (the first address is funded 2 days earlier but begins transacting at the same time as the rest) with similar matic amounts (1 - 2). The first transaction of all addresses is a 0.2 Matic swap on Paraswap on Dec 15, 2021, all in the same hour. The rest of their Polygon activity is very similar.

Methodology

Same as Issue #503

Rewards Address

0xD47CB1835EB36e4A108C33E446449192426Fc160

shanefontaine commented 2 years ago

Thank you for your report @shdwy. We have verified that the addresses in this report are Sybil attackers.

The report included 26 eligible addresses as Sybil attackers which means you are eligible for 8106.560783992427090414 HOP! When Hop DAO is live, we will make a proposal for this reward — subject to a 1 year lockup, as mentioned in the original Mirror post.

The qualified addresses are as follows:

0x0f36b9af90ba0e0801173926702934a230ad8df6
0x68d9d6f5fa1a436bd0726bf451145a0ad252e41c
0x48dc01530a54aaa03ad38a03ebf96cf18fc9b3af
0x1f91aa24c6f189acbd42b2cc513beb287c0fe8ee
0x4d8e294d4e4577d62b0279bfaf8d739543b86653
0x9df8cac6b13eb0989dc4ea0b3cf331b0f958a00d
0x6efda4ab10af4a0fafae997f987b96d7a3115799
0x7f1f9340d37c195eeb930602e75a419bfd9ab2f1
0x513f1b0d70a4d31b8dcc52b5e4ae11745f361759
0x7a7ee0e444d8f20b0735aff3fb33137ada693807
0x8cd74469ec134c854fa4a4a6eccfb8148618a2c9
0xa242c9b88b57a56ccb188116c307d272fa628754
0x952c7e4305ca361ebe37bccb5f406624c6386cf0
0x571ae79f8e2133a2dfc2be7c9652ecafd7952ba3
0x30d24a4b7c5a9dda9474be06e26901842094ca16
0xe4f05752bbfd392a6c47bae4f5296036381dcfd4
0x57332b436e2eaa13b3cf1280aad934b11fa52642
0x4eadf8a358f4febf1fed5ef777682709b304bf1d
0x59e8162108255a0195aaba14d030951b9d83a8c3
0x96fc440586b678c60e8135b0020087b5611215e8
0x8dbeb1a1e6ea63baee7eed1dbf740ba2e53e2095
0x53d9d5f659af25e5218dad06c3d7c6749e70c8e8
0x7fa2f92fc109e1f5cf47580325eeafa7c0e9d690
0x5c10ba522e8ba9c69d192c31206d23ef9e54418d
0x29882c37f2d2a0de669f7e88168c9e7885e2f952
0x45b8ffb907aa15a3f30948974ab5659cbcaf3a2d
shanefontaine commented 2 years ago

It looks like all addresses had similar behaviors on the Hop protocol as well:

address ensName total mainnet arbitrum optimism polygon xdai totalVolume
0x7fa2f92fc109e1f5cf47580325eeafa7c0e9d690   26 0 0 0 26 0 $11,273.35
0x5c10ba522e8ba9c69d192c31206d23ef9e54418d   26 0 0 0 26 0 $11,267.23
0x53d9d5f659af25e5218dad06c3d7c6749e70c8e8   26 0 0 0 26 0 $11,259.87
0x45b8ffb907aa15a3f30948974ab5659cbcaf3a2d   26 0 0 0 26 0 $11,259.55
0x29882c37f2d2a0de669f7e88168c9e7885e2f952   24 0 0 0 24 0 $8,236.01
0x1f91aa24c6f189acbd42b2cc513beb287c0fe8ee   22 0 0 0 11 11 $4,318.93
0x48dc01530a54aaa03ad38a03ebf96cf18fc9b3af   22 0 0 0 11 11 $4,318.73
0x68d9d6f5fa1a436bd0726bf451145a0ad252e41c   22 0 0 0 11 11 $4,317.74
0x0f36b9af90ba0e0801173926702934a230ad8df6   25 0 0 0 12 13 $4,256.60
0x9df8cac6b13eb0989dc4ea0b3cf331b0f958a00d   22 0 0 0 11 11 $4,177.66
0x7f1f9340d37c195eeb930602e75a419bfd9ab2f1   22 0 0 0 11 11 $4,176.98
0x6efda4ab10af4a0fafae997f987b96d7a3115799   22 0 0 0 11 11 $4,176.84
0x513f1b0d70a4d31b8dcc52b5e4ae11745f361759   22 0 0 0 11 11 $4,170.49
0x59e8162108255a0195aaba14d030951b9d83a8c3   22 0 0 0 22 0 $4,039.37
0x96fc440586b678c60e8135b0020087b5611215e8   22 0 0 0 22 0 $4,039.37
0x4eadf8a358f4febf1fed5ef777682709b304bf1d   22 0 0 0 22 0 $4,039.18
0x57332b436e2eaa13b3cf1280aad934b11fa52642   22 0 0 0 22 0 $4,039.15
0x571ae79f8e2133a2dfc2be7c9652ecafd7952ba3   22 0 0 0 22 0 $4,037.49
0x952c7e4305ca361ebe37bccb5f406624c6386cf0   22 0 0 0 22 0 $4,036.51
0x30d24a4b7c5a9dda9474be06e26901842094ca16   22 0 0 0 22 0 $4,036.51
0xa242c9b88b57a56ccb188116c307d272fa628754   22 0 0 0 22 0 $4,036.42
0x8dbeb1a1e6ea63baee7eed1dbf740ba2e53e2095   22 0 0 0 22 0 $4,033.14
0x4d8e294d4e4577d62b0279bfaf8d739543b86653   22 0 0 0 11 11 $4,023.99
0x8cd74469ec134c854fa4a4a6eccfb8148618a2c9   20 0 0 0 1 19 $3,921.17
0xe4f05752bbfd392a6c47bae4f5296036381dcfd4   21 0 0 0 21 0 $3,836.16
0x7a7ee0e444d8f20b0735aff3fb33137ada693807   20 0 0 0 1 19 $3,835.19