search

safe-global / safe-user-allocation-reports

The proposed list of SAFE user allocations has been published on the Safe forum.
Creative Commons Zero v1.0 Universal
34 stars 10 forks source link

Sybil Attacker Report #362

Closed zlgitol closed 2 years ago

zlgitol commented 2 years ago

Related Safe Addresses

0x8bdbed9f9604899f376072888d64505ff0f11597
0x4e3fe972d4b3d93a3ce8f576297529919e8ae129
0xc17dbe6f238848e2488be4ecd870884b43465d9a
0xdca220d6e554ed7cdeb5a633d8c9d8f76f59bc77
0x7dcd6ffe272122bbb38152e28d3135b2f1690477
0x4cd3ceed1727dda8320532c98a498532606e5ae5
0xfc27103632218401509e9a330694063a4fab7b84
0xab96e16a5d9fa39077bd83e34583b04e6913cf31
0xb5b1310190627e12308de350bb0e2a53fe8a8274
0x1847c81cf0a0fe0a476f089e79c3a995a3e6449d
0xf2b133a6068fb7f32aea0ca7f82b230fffaf8680

Reasoning

  1. All the safe addresses were created on July 3, 2022, and received 0.001~0.002 ETH on the same day. No other transactions further. image

    As shown below

https://gnosis-safe.io/app/eth:0x8bdbed9f9604899f376072888d64505ff0f11597/transactions/history https://gnosis-safe.io/app/eth:0x4e3fe972d4b3d93a3ce8f576297529919e8ae129/transactions/history https://gnosis-safe.io/app/eth:0xc17dbe6f238848e2488be4ecd870884b43465d9a/transactions/history https://gnosis-safe.io/app/eth:0xdca220d6e554ed7cdeb5a633d8c9d8f76f59bc77/transactions/history https://gnosis-safe.io/app/eth:0x7dcd6ffe272122bbb38152e28d3135b2f1690477/transactions/history https://gnosis-safe.io/app/eth:0x4cd3ceed1727dda8320532c98a498532606e5ae5/transactions/history https://gnosis-safe.io/app/eth:0xfc27103632218401509e9a330694063a4fab7b84/transactions/history https://gnosis-safe.io/app/eth:0xab96e16a5d9fa39077bd83e34583b04e6913cf31/transactions/history https://gnosis-safe.io/app/eth:0xb5b1310190627e12308de350bb0e2a53fe8a8274/transactions/history https://gnosis-safe.io/app/eth:0x1847c81cf0a0fe0a476f089e79c3a995a3e6449d/transactions/history https://gnosis-safe.io/app/eth:0xf2b133a6068fb7f32aea0ca7f82b230fffaf8680/transactions/history

  1. The creator addresses, as shown below, all received a particular token (token contract: https://etherscan.io/address/0xccb67615b0334205fa90516decd79167026daddf) from 0x1cb95644f868108406d4f10e5040272b44cb9356 on the same day (Dec-27-2018).

Tx details (in the order according to the below table)

https://etherscan.io/tx/0x8cc792b382dc1a1e690653de68872f24d8111d1d6572eb926d68c6319694bcee https://etherscan.io/tx/0x6cc4be6c05b442651c68e3544fc5557149182a90d870148ae3fc0434a1f21e6f https://etherscan.io/tx/0xb0df33b941ff8bc150a6711c0aadbadb0cbcccef19d71ffbe57a18a7ccd6d3a4 https://etherscan.io/tx/0x46b18198c01dbe473c9935957174b8ee5b718ba9153821fee238275c654b5ca1 https://etherscan.io/tx/0x852e30bbf631a39be080272ffc508c24e67cb67025432bebab179c656889bf3c https://etherscan.io/tx/0xf63fa89baf83c72b9116dd29d7b77919c7907c14b8e1d7ac6229a41f0a4e5665 https://etherscan.io/tx/0x7d707f63d9d44d3395ca8961031eca40749e22c6aff161d00bfdd04b6e18cc0b https://etherscan.io/tx/0x78639f87a56fff7f6501fc5a692a236ba15a39d83cdaa2b3a24fee1120bf5897 https://etherscan.io/tx/0x0329c26be1aec4f9c641614f4171fdf859b6e62e84ccd4eb3f3dd33df0e803f6 https://etherscan.io/tx/0x113547f5dfa92bef597606f1eff43e32e54bc0e420f88773b7bd240a95cb854d https://etherscan.io/tx/0x6311afae1e4ca18c427c9be778a5136f8792ea7ff5d1821902449872f6080401

Creator Addresses Safe Addresses
0x45333364136f0f127fd3b0a705c29fac74c5f7e4 0x8bdbed9f9604899f376072888d64505ff0f11597
0xd809e237cd8c6513e9328b2e86fd62c0d1c7ea41 0x4e3fe972d4b3d93a3ce8f576297529919e8ae129
0xad9c3650d498bfc29e721af0d04b07e95a8d4120 0xc17dbe6f238848e2488be4ecd870884b43465d9a
0x09f8d4fe6900e7615fa1333044bdbc3e849a2189 0xdca220d6e554ed7cdeb5a633d8c9d8f76f59bc77
0x1bc92b4dd44b1dca0cc50207251e83f5418ada17 0x7dcd6ffe272122bbb38152e28d3135b2f1690477
0x3a90aaa5bfc2f0055cc69c843754404d5ccf45ae 0x4cd3ceed1727dda8320532c98a498532606e5ae5
0x358f4b58cb82e6c6ac68bf38d76ca111dac181fa 0xfc27103632218401509e9a330694063a4fab7b84
0x836243bacb6896ad026daa7ac3d352ed33f51b18 0xab96e16a5d9fa39077bd83e34583b04e6913cf31
0x2f5f8dc9016c59963b81f56ffbd2271c4c0923b3 0xb5b1310190627e12308de350bb0e2a53fe8a8274
0xb7f114adfe2c9ec78a1b7afd280de9bc4045a6a3 0x1847c81cf0a0fe0a476f089e79c3a995a3e6449d
0xcb3be600394a9d72d5c0430b5a551aefb50e8493 0xf2b133a6068fb7f32aea0ca7f82b230fffaf8680

Methodology

The reported addresses were discovered by checking their safe behaviors using https://gnosis-safe.io/app/, and the mainnet behaviors using ethscan.

Safe Address

0xAbeA4DC133037af99dfa63541090124ae9e0C81c

zlgitol commented 2 years ago

I am just curious where I had copied these addresses from. @tschubotz

zlgitol commented 2 years ago

How ridiculous when most of these safe addresses are only reported in this issue, and it is marked as copy. @tschubotz @johannesmoormann @lukasschor

skyonedot commented 2 years ago

wow, #124 (comment) can you provide evidence that i am copycat????

I never said anyone is copycat. I only stated the facts.

Wow, what's your fact?

you said me 

skydotone raised a lot of empty issues (too many), and suddenly, these empty issues were full of results
But always there is someone in these issues who said that he was the first to find these addresses. :-)

Then can you give me an example? Whose address did I steal? ?

skyonedot commented 2 years ago

LISTEN, @zlgitol ,

I gave you six hours today, and I hope we can have a good communication. check it 👉 https://github.com/safe-global/safe-user-allocation-reports/issues/443#issuecomment-1253183888

However, you have never made any reply.

So, let me sort out what happened.

You said me:

skydotone raised a lot of empty issues (too many), and suddenly, these empty issues were full of results
But always there is someone in these issues who said that he was the first to find these addresses. :-)

I answer you that I need to get the issue number to save my local markdown file , i always edit content to format in typora

I post 26 issues, only two of which had disputes with others, issue124 and issue260

SO THIS IS ALWAYS??????

The next day, all my report were labeled Heavily edited and potential copycat.

Do you know how much damage you have done to me??

Do you know how hard it is for me to prove my innocence now??

Because of your insult and slander, all of my efforts have been ruined, ALL EFFORT!

I CAN TELL YOU CLEARLY THAT THIS IS REVENGE

tschubotz commented 2 years ago

Thanks for the report. Some of the Safes have been reported before already. But we found the following to be related to airdrop farming:

0xc17dbe6f238848e2488be4ecd870884b43465d9a
0xdca220d6e554ed7cdeb5a633d8c9d8f76f59bc77
0x7dcd6ffe272122bbb38152e28d3135b2f1690477
0x4cd3ceed1727dda8320532c98a498532606e5ae5
0xab96e16a5d9fa39077bd83e34583b04e6913cf31
0xb5b1310190627e12308de350bb0e2a53fe8a8274
0x1847c81cf0a0fe0a476f089e79c3a995a3e6449d
0xf2b133a6068fb7f32aea0ca7f82b230fffaf8680