hop-protocol / hop-airdrop

Hop Airdrop distribution 🐰
174 stars 218 forks source link

Sybil Attacker Report #608

Open Annu2047 opened 2 years ago

Annu2047 commented 2 years ago

Related Addresses

10 addresses:

0x2497060fcca49c9e9a7ef70168ddaf4fcff691b2
0x67796e73f9ceb80c1c861661fad9b7d0935042de
0xdd115e5e326e22d61fe213da9e627c0b035ef17d
0x0fd7def5c03e2840ed902105af10d3a22ef215f2
0xd98773be592e521826d52438e03ee7a04d629b76
0xceb631ccfd53ebba3c43aec5ecd8b3b610f7791e
0xe58b39e514c5a0651adfaee619d36509dec26aaa
0x9b123e0ee764be49da6c8339aa44a1a45ec8f9b1
0xd0a1e7ca42effecdfe9ffc04d0d45451d37bce2d
0x1e42a798fda5e5e567905eb92444aad33aea7f4c

Reasoning

All address received (0.095 or 0.01)ETH from 0x2fc617e933a52713247ce25730f6695920b3befe on arbitrum network on Feb-27-2022

Tx details: 0x2497060fcca49c9e9a7ef70168ddaf4fcff691b2(https://arbiscan.io/tx/0xe7d4c95e8d4fa12cc319d20bcb1bbceecc1bb42621911709aeeb6526c149dc05) 0x67796e73f9ceb80c1c861661fad9b7d0935042de(https://arbiscan.io/tx/0x84f8760d6e95ff5323c59a00a7ae34bf7a9cc0147aab2b0364e079d4d514d554) 0xdd115e5e326e22d61fe213da9e627c0b035ef17d(https://arbiscan.io/tx/0xb4625803c807c5019d47583edffb5416fa47dee593c1e6277ec063f6d17515f2) 0x0fd7def5c03e2840ed902105af10d3a22ef215f2(https://arbiscan.io/tx/0x146842da03263c08d229f7e4b53b1ea5e59699288bbc99e4ca2efd30adfac3d6) 0xd98773be592e521826d52438e03ee7a04d629b76(https://arbiscan.io/tx/0x8626ec8e7129fa295e7c99bb4071814e3067ffc2742d8f1f95e598303328a554) 0xceb631ccfd53ebba3c43aec5ecd8b3b610f7791e(https://arbiscan.io/tx/0x62443d9f5bc75c362855426c2f2bdfbb085f56873e607640befd83b7647299c0) 0xe58b39e514c5a0651adfaee619d36509dec26aaa(https://arbiscan.io/tx/0xd3758b4af7e02d9b0ebb339a831b6ab6ec07f9aff23fef7e9fe1ced911387a46) 0x9b123e0ee764be49da6c8339aa44a1a45ec8f9b1(https://arbiscan.io/tx/0xe1b38bc576307359ab0fba0fdf2534733e33e6475706f89ab8a12b764a2ced55) 0xd0a1e7ca42effecdfe9ffc04d0d45451d37bce2d(https://arbiscan.io/tx/0x2f5b4b798b195c6eba1060a4b81f782c42adcc0b6c0e4c157f37a005c101158c) 0x1e42a798fda5e5e567905eb92444aad33aea7f4c(https://arbiscan.io/tx/0x6c4745b51e26b5097c33f69d39176611b2a92c558eee00fd982c1a734a78fc2a)

All addresses farmed NFTSprites.com from 2021-08-11 1:29:15 to 2021-08-11 1:45:15(15 minutes)

Tx details: 0x2497060fcca49c9e9a7ef70168ddaf4fcff691b2(https://polygonscan.com/token/0x49bb73b257592bb68cce4e89125482ec5263f17f?a=0x2497060fcca49c9e9a7ef70168ddaf4fcff691b2) 0x67796e73f9ceb80c1c861661fad9b7d0935042de(https://polygonscan.com/token/0x49bb73b257592bb68cce4e89125482ec5263f17f?a=0x67796e73f9ceb80c1c861661fad9b7d0935042de) 0xdd115e5e326e22d61fe213da9e627c0b035ef17d(https://polygonscan.com/token/0x49bb73b257592bb68cce4e89125482ec5263f17f?a=0xdd115e5e326e22d61fe213da9e627c0b035ef17d) 0x0fd7def5c03e2840ed902105af10d3a22ef215f2(https://polygonscan.com/token/0x49bb73b257592bb68cce4e89125482ec5263f17f?a=0x0fd7def5c03e2840ed902105af10d3a22ef215f2) 0xd98773be592e521826d52438e03ee7a04d629b76(https://polygonscan.com/token/0x49bb73b257592bb68cce4e89125482ec5263f17f?a=0xd98773be592e521826d52438e03ee7a04d629b76) 0xceb631ccfd53ebba3c43aec5ecd8b3b610f7791e(https://polygonscan.com/token/0x49bb73b257592bb68cce4e89125482ec5263f17f?a=0xceb631ccfd53ebba3c43aec5ecd8b3b610f7791e) 0xe58b39e514c5a0651adfaee619d36509dec26aaa(https://polygonscan.com/token/0x49bb73b257592bb68cce4e89125482ec5263f17f?a=0xe58b39e514c5a0651adfaee619d36509dec26aaa) 0x9b123e0ee764be49da6c8339aa44a1a45ec8f9b1(https://polygonscan.com/token/0x49bb73b257592bb68cce4e89125482ec5263f17f?a=0x9b123e0ee764be49da6c8339aa44a1a45ec8f9b1) 0xd0a1e7ca42effecdfe9ffc04d0d45451d37bce2d(https://polygonscan.com/token/0x49bb73b257592bb68cce4e89125482ec5263f17f?a=0xd0a1e7ca42effecdfe9ffc04d0d45451d37bce2d) 0x1e42a798fda5e5e567905eb92444aad33aea7f4c(https://polygonscan.com/token/0x49bb73b257592bb68cce4e89125482ec5263f17f?a=0x1e42a798fda5e5e567905eb92444aad33aea7f4c)

All address also have low nonce on atbtrium network.

Methodology

Same as https://github.com/hop-protocol/hop-airdrop/issues/602#issue-1245041297

Rewards Address

0x6a1AF72bBcfD0BA492E502F83334d3910Fa025dB

shanefontaine commented 2 years ago

@Annu2047

It looks like everything related to 0xe58b39e514c5a0651adfaee619d36509dec26aaa is quite different than the rest of the group. Are you able to provide additional proof about the inclusion of that address in the group?