Addresses are reported by retrieving information from the chain, using bitquery's graphql, and detecting abnormal behavior, such as empty wallets, mutual transfers, etc.
When only some of the anomalous behaviors are present, we can consider the address reasonable, but when an address has all the anomalous behaviors, we have good reason to suspect that the address is false. Especially if the multi-signature address and the owner address have obvious exceptions both, then it is obvious that this is airdrop farmer.
Abnormal behaviors include
For Multi-Sign Address
Few transactions were executed
There is a lot of overlap in the interactions, such as the destination address, and the time
The owner of multiple multi-signature addresses is exactly the same, and never changes from start to finish
For Owner Address
Empty address
The first source of funds is the owner.
Mutual transfer
Behavior similarity
If the verification is passed and my strategy is great, I can provide my source code, but for now it is not conveninet
Related Safe Addresses
Reasoning
Common Feature of these address
They all have the same owner. From beginning to end, this group of owner, never changed. never add owner or remove owner 🚨🚨🚨🚨
100% of the group address is worked as USDT station, means USDT transfer in and transfer out. NO Other Token, NO Other Token, NO Other Token 🚨🚨🚨🚨
0x62b45c8e324438ca4868e4cfd4394b3e0524774f
or0x4b9c8e40b34945cf7cabc94ecc454f812882ad4d
0x2e2921e23b28fbbeb888953e1ec02d78d316ea4b
or0xf2aa2259702b0eac5a488a7a70a104cfc76fb880
2021-02-26
,2021-03-22
,2021-03-08
2021-04-21
,2021-04-30
,2021-06-29
The owner address has very abnormal behavious 🚨
The number of multi-sign address is very small, most like airdrop farmer 🍄
The owner address has very abnormal behavious
0x938cbcf8d534f6fafbdb521977565be9a058ce8d
exec 49 transacitons, wallet10x94e603d0e65d2890d1a678f8b9ea216fdf999cda
exec 61 transactions, wallet20x43b8d28ed2b4d1e07a1826428e90e2121947d481
exec 0 transacitons, empty wallet.0xc3d741f29d4028db641342295e5c37590e45ae3d
exec 0 transacitons, empty wallet.100% of the group address is worked as USDT station, means USDT transfer in and transfer out. NO Other Token, NO Other Token, NO Other Token
Methodology
Addresses are reported by retrieving information from the chain, using bitquery's graphql, and detecting abnormal behavior, such as empty wallets, mutual transfers, etc.
When only some of the anomalous behaviors are present, we can consider the address reasonable, but when an address has all the anomalous behaviors, we have good reason to suspect that the address is false. Especially if the multi-signature address and the owner address have obvious exceptions both, then it is obvious that this is airdrop farmer.
Abnormal behaviors include
For Multi-Sign Address
For Owner Address
If the verification is passed and my strategy is great, I can provide my source code, but for now it is not conveninet
Safe Address
0xce495858e36c95f491b5a32ca2664405cf10ab76
Thanks