search

safe-global / safe-user-allocation-reports

The proposed list of SAFE user allocations has been published on the Safe forum.
Creative Commons Zero v1.0 Universal
34 stars 10 forks source link

Sybil Attacker Report #338

Closed Parkcora closed 2 years ago

Parkcora commented 2 years ago

11 Related Safe Addresses:

0x1a1215031978ba9c765a35a08eb5a60394254f41
0x92f4d688fe5f62237e0e72c23ec89ffa3e8c2b3a
0xfef5f59afe725ea413876a0b55f43415c025ca9a
0x4392f092792ac5e31830e2e5832af59a2e3bddb9
0xd925951201598834997b9b9c05548591a0e90b87
0xb51bf5da1195e30f23b2e58788f4259e4c932140
0x5a1ae51dcb280ab3b5f3f92ae40562f481e64f97
0x8851b55571768f152ecca0ca3999ce999d35f410
0x1402c6f8e6f7e603209430123fb39b0af262f8f4
0x8f8c904ef1649725b5cbbd4fe3ed13723fa41907
0xe9f85f35d234b8cd69a18dd45981e161384b8240

Reasoning

  1. All creator addresses interacted with a NFT contract(Via Early User (VIAV1)) to mint same NFT at a short time window that can only be interpreted as sybil attack, as shown in Table 1.
  2. There are multiple transactions between creator addresses, as shown in Table 2 and Figure 1.
  3. All safe addresses are created from Jul 24, 2022 to Jul 28, 2022.
  4. The safe addresses received a small amount of ETH (0.1x ETH) on the day or the next day of its creation.
  5. The safe addresses then sent out the received ETH in several transactions, usually on the same day when it received the ETH.

Please visit debank links in Table 1 for Safe's transactions.

Table 1 safe address creator address claim NFT tx all transactions
0x1a1215031978ba9c765a35a08eb5a60394254f41 0xff6840e014fc03f9744676e3885c968792c705dd https://etherscan.io/token/0x34f08f2a3f4a86531e9c4139fde571a62689afec?a=0xff6840e014fc03f9744676e3885c968792c705dd https://debank.com/profile/0x1a1215031978ba9c765a35a08eb5a60394254f41/history
0x92f4d688fe5f62237e0e72c23ec89ffa3e8c2b3a 0x3fbc590716d7dbab64c189f8978da62000219b33 https://etherscan.io/token/0x34f08f2a3f4a86531e9c4139fde571a62689afec?a=0x3fbc590716d7dbab64c189f8978da62000219b33 https://debank.com/profile/0x92f4d688fe5f62237e0e72c23ec89ffa3e8c2b3a/history
0xfef5f59afe725ea413876a0b55f43415c025ca9a 0xa23a2dd08009ec52868529757a8c61c50b24ff50 https://etherscan.io/token/0x34f08f2a3f4a86531e9c4139fde571a62689afec?a=0xa23a2dd08009ec52868529757a8c61c50b24ff50 https://debank.com/profile/0xfef5f59afe725ea413876a0b55f43415c025ca9a/history
0x4392f092792ac5e31830e2e5832af59a2e3bddb9 0x4ee641f2980f2d386df825b62025ff862401e520 https://etherscan.io/token/0x34f08f2a3f4a86531e9c4139fde571a62689afec?a=0x4ee641f2980f2d386df825b62025ff862401e520 https://debank.com/profile/0x4392f092792ac5e31830e2e5832af59a2e3bddb9/history
0xd925951201598834997b9b9c05548591a0e90b87 0x4af6ff640da50e6966b57f8273ddc85678863e27 https://etherscan.io/token/0x34f08f2a3f4a86531e9c4139fde571a62689afec?a=0x4af6ff640da50e6966b57f8273ddc85678863e27 https://debank.com/profile/0xd925951201598834997b9b9c05548591a0e90b87/history
0xb51bf5da1195e30f23b2e58788f4259e4c932140 0xaa9822ba14f98c43e6e900bd7d6daaeddf935d85 https://etherscan.io/token/0x34f08f2a3f4a86531e9c4139fde571a62689afec?a=0xaa9822ba14f98c43e6e900bd7d6daaeddf935d85 https://debank.com/profile/0xb51bf5da1195e30f23b2e58788f4259e4c932140/history
0x5a1ae51dcb280ab3b5f3f92ae40562f481e64f97 0x8afef1586400e4fe3fb367f30de3b2a27dd0afcc https://etherscan.io/token/0x34f08f2a3f4a86531e9c4139fde571a62689afec?a=0x8afef1586400e4fe3fb367f30de3b2a27dd0afcc https://debank.com/profile/0x5a1ae51dcb280ab3b5f3f92ae40562f481e64f97/history
0x8851b55571768f152ecca0ca3999ce999d35f410 0x24abcfe7d96129ae56810b1941ec32efb5600b17 https://etherscan.io/token/0x34f08f2a3f4a86531e9c4139fde571a62689afec?a=0x24abcfe7d96129ae56810b1941ec32efb5600b17 https://debank.com/profile/0x8851b55571768f152ecca0ca3999ce999d35f410/history
0x1402c6f8e6f7e603209430123fb39b0af262f8f4 0x310ce73f86b67c42c62adea6bf7ca0eb5f60cc94 https://etherscan.io/token/0x34f08f2a3f4a86531e9c4139fde571a62689afec?a=0x310ce73f86b67c42c62adea6bf7ca0eb5f60cc94 https://debank.com/profile/0x1402c6f8e6f7e603209430123fb39b0af262f8f4/history
0x8f8c904ef1649725b5cbbd4fe3ed13723fa41907 0xbed5a181da0d34c9655fa0ef3e2731aef10bcdbd https://etherscan.io/token/0x34f08f2a3f4a86531e9c4139fde571a62689afec?a=0xbed5a181da0d34c9655fa0ef3e2731aef10bcdbd https://debank.com/profile/0x8f8c904ef1649725b5cbbd4fe3ed13723fa41907/history
0xe9f85f35d234b8cd69a18dd45981e161384b8240 0xd13cef22f20066e72832d46c66bc2d9883edaf94 https://etherscan.io/token/0x34f08f2a3f4a86531e9c4139fde571a62689afec?a=0xd13cef22f20066e72832d46c66bc2d9883edaf94 https://debank.com/profile/0xe9f85f35d234b8cd69a18dd45981e161384b8240/history
Table 2 FROM_ADDRESS TO_ADDRESS TX_HASH BLOCK_TIMESTAMP
0x3fbc590716d7dbab64c189f8978da62000219b33 0xaa9822ba14f98c43e6e900bd7d6daaeddf935d85 0xa84102a5ff56d41a1b961d2ecb8d185b82a43568727949fa5d89deb1a0f9b654 8/1/22 6:59 AM
0xbed5a181da0d34c9655fa0ef3e2731aef10bcdbd 0x3fbc590716d7dbab64c189f8978da62000219b33 0xd780bfa7d7f6be0e4dc2ae30ff45159e90a3d2d9d7e835835097fadd39b610a8 9/13/22 8:58 AM
0x3fbc590716d7dbab64c189f8978da62000219b33 0xd13cef22f20066e72832d46c66bc2d9883edaf94 0x3f43852c8fbda7e000b306b83d347391c80b760078bec92db181c22f7c70a716 7/14/22 6:11 AM
0x3fbc590716d7dbab64c189f8978da62000219b33 0x4af6ff640da50e6966b57f8273ddc85678863e27 0x0609dc6f5f41175e9fc3e9a251a28ee8c55d9a5aa40c2902491c35b7e8015049 8/1/22 3:48 AM
0x3fbc590716d7dbab64c189f8978da62000219b33 0xbed5a181da0d34c9655fa0ef3e2731aef10bcdbd 0x0615946d6b053c9e93fb3cb76093054eaba2a40af229f3ef7b01ef87c4ee3e23 7/24/22 1:12 PM
0x3fbc590716d7dbab64c189f8978da62000219b33 0xaa9822ba14f98c43e6e900bd7d6daaeddf935d85 0xf1dc80e2bc67ce7581375da79ad5dd7a33d43aa1d41c682ba1bc3438f32c74f7 7/26/22 11:19 AM
0x3fbc590716d7dbab64c189f8978da62000219b33 0xaa9822ba14f98c43e6e900bd7d6daaeddf935d85 0x8afc31cf41a0b9725c863c6c4bf41be4fd52a83c36aee5aa346f71fd55469283 7/26/22 11:17 AM
0xd13cef22f20066e72832d46c66bc2d9883edaf94 0x310ce73f86b67c42c62adea6bf7ca0eb5f60cc94 0xfa61044b1c04d2ecfd43d82c4a6035b935e809baf6655c8e4833e2d9b6353509 7/30/22 3:04 AM
0xbed5a181da0d34c9655fa0ef3e2731aef10bcdbd 0x24abcfe7d96129ae56810b1941ec32efb5600b17 0xa23582655836e3f2d1db20b5cb3a97b95fe976b28d1db173813b85a586af3e68 7/25/22 7:13 AM
0xa23a2dd08009ec52868529757a8c61c50b24ff50 0x8afef1586400e4fe3fb367f30de3b2a27dd0afcc 0xa59416607cbca0f930cd162224f76fe7219ed4188b9f4b061e153049193e2590 7/27/22 11:51 AM
0xff6840e014fc03f9744676e3885c968792c705dd 0x310ce73f86b67c42c62adea6bf7ca0eb5f60cc94 0xf878cb9b700aab4c4ae00231b9e8adae0fb3e516f824b78ce22d17b3f794b92a 7/28/22 10:21 AM
0x3fbc590716d7dbab64c189f8978da62000219b33 0x4ee641f2980f2d386df825b62025ff862401e520 0x2605131f0f9c06c04b15950cb89d22ac21c906acefcc3c017709f8d66748310f 7/25/22 8:31 AM
0x3fbc590716d7dbab64c189f8978da62000219b33 0xd13cef22f20066e72832d46c66bc2d9883edaf94 0xf1b1383d77fd8741384ea2a3df322f4667d87abdd541c74ec5f3638355f38f37 7/27/22 8:25 AM
0xa23a2dd08009ec52868529757a8c61c50b24ff50 0x310ce73f86b67c42c62adea6bf7ca0eb5f60cc94 0x0e0ccb717473c1c03dc91536c25195e181f1dad6e0078964bfb4e93ff298ef71 7/28/22 10:23 AM
0x3fbc590716d7dbab64c189f8978da62000219b33 0x4ee641f2980f2d386df825b62025ff862401e520 0xce081607f8a8ca4813112dbf011ea55bd0fa1c98e8537837cdbb220339ed92c3 8/2/22 6:45 AM

Figure 1

Methodology

It can be identified by visualization and further analysis of the details of the above transaction listed.

Safe Address

0xD50fF80Ce8EFc38D024272f4019978Dc017eA200