tschubotz
commented
2 years ago The Safes you reported store >1M USDT for some time. Store of value is legitimate use.
Closed skyonedot closed 2 years ago
tschubotz
commented
2 years ago The Safes you reported store >1M USDT for some time. Store of value is legitimate use.
Related Safe Addresses
Reasoning
The reason why these two group lists are taken out is that
There are three Groups here, and the abnormal behavior of these two Groups is as follows:
1.
Only about USDT execute transacion on the multi-sign account, no other token. And tranfer USDT has an big overlap of destination addresses
The owner of the above three multi-sign addresses are all
The Owner is the same group address, and it is obviously related.
0x209b3271778360d8f8ef3010678a955a7feff7c3, owner send 0 transactions Empty Wallet0x3ea3c70534b683006e1078c8bc663ce9f691dbea, owner send 0 transactions Empty Wallet0x6faf253a449c04e281d1fb10840da9a9240b5bdf, owner send 0 transactions Empty Wallet0xe0df26b1cc6674084bb7ada97d3347004c61888b, owner send 0 transactions Empty Wallet0x3f86d374414010869ea83fe552ac36e101afdbb4, owner send 35 transactions wallet10x6efd37a28c6d3478f67f1c7546611826cdccb308, owner send 82 transactions wallet2, First Money Came From to wallet1 https://etherscan.io/tx/0xdb80e1ab3b3f6d812d99e6661c309647d392034450a286435718e3b200ec4507 ,Last Money Tranfer To Wallet1: https://etherscan.io/tx/0x71717192c565e410ce26c21bb6a84bea6551feb09169c17799a735b08b3d5d5c2.
Only about USDT execute transacion on the multi-sign account, no other token.
The Owner is the same group address, and it is obviously related.
0x290e556cae1d0d17c550edc8f9ed9208e268ed5b, owner send 86 transactions Main Wallet, Distribute money to small wallet0x7684370cd8755c4ac5bef0bb29bb787130df6818, owner send 1 transactions , wallet2 First Fund Came From Wallet 1: https://etherscan.io/tx/0x9d120886bbb82caba7c99f949db214770eeabe4ebc59f9622ac0960c31acdd6d`0x9d120886bbb82caba7c99f949db214770eeabe4ebc59f9622ac0960c31acdd6d0xca33b0edfb55c99d99b1d8f76f07ffe88036083d, owner send 58 transactions, wallet30xa9062f9367987970b6c17128b9ee0cd07c3ce920, owner send 0 transactions Empty Wallet0xc2a8264a49be2fc5bca778b7a61b1e5129169b80, owner send 0 transactions Empty Wallet0x43c9b6d9ca494c5e87ecbd524fa7381c4f4ae3f4, owner send 0 transactions Empty Wallet3. Group1 Transfer USDT to Group2 txs (group2 never send token to group1):
0x12024106a59d0677d65b030b052a1bd60a6710c3 send USDT to 0x02308b53273ab3494d482d5fb3d1f0710acb0890 check it https://etherscan.io/tx/0xfe8be9248bae12c8faeab6d0c4f02e6f76d4ae0d53630632a31649a3b10ab94d
Methodology
Addresses are reported by retrieving information from the chain, using bitquery's graphql, and detecting abnormal behavior, such as empty wallets, mutual transfers, etc.
When only some of the anomalous behaviors are present, we can consider the address reasonable, but when an address has all the anomalous behaviors, we have good reason to suspect that the address is false. Especially if the multi-signature address and the owner address have obvious exceptions both, then it is obvious that this is airdrop farmer.
Abnormal behaviors include
For Multi-Sign Address
For Owner Address
If the verification is passed, my strategy is star, and I can provide my source code.
Safe Address
0xce495858e36c95f491b5a32ca2664405cf10ab76Thanks