tschubotz
commented
2 years ago Thanks for the report. All of these Safes have been found by a previous report, unfortunately.
Closed skyonedot closed 2 years ago
tschubotz
commented
2 years ago Thanks for the report. All of these Safes have been found by a previous report, unfortunately.
Related Safe Addresses
Reasoning
All of the address owner is
0x95e453d37ad4f2dc877abed99c3eef382333cb62and0xb211d379aac002e7b575a95496dd390719a60352, never changed 🚨🚨🚨0x95e453d37ad4f2dc877abed99c3eef382333cb62owner send 304 transactions . main wallet0xb211d379aac002e7b575a95496dd390719a60352owner send 278 transactions .assist wallet, The first money came from main wallet. : https://etherscan.io/tx/0x610475e1f89966a2f92a76687bbac763eb15b8fb0a1454ba3d7d3fdd2c44d336Assist wallet has only two performances, one is to create a multi-signed wallet, and the other is to execute the transaction of the multi-signed wallet.
it is obvious that the assist wallet is for airdrop.
The objects of these multi-signature address transactions are very repetitive, such as operating the same batch of Token and the same batch of NFT.
0x8bd3d1472a656e312e94fb1bbdd599b8c51d18e3at same time2022/08/15--2022/08/16Methodology
Addresses are reported by retrieving information from the chain, using bitquery's graphql, and detecting abnormal behavior, such as empty wallets, mutual transfers, etc.
When only some of the anomalous behaviors are present, we can consider the address reasonable, but when an address has all the anomalous behaviors, we have good reason to suspect that the address is false. Especially if the multi-signature address and the owner address have obvious exceptions both, then it is obvious that this is airdrop farmer.
Abnormal behaviors include
For Multi-Sign Address
For Owner Address
Safe Address
0xce495858e36c95f491b5a32ca2664405cf10ab76Thanks