search

safe-global / safe-user-allocation-reports

The proposed list of SAFE user allocations has been published on the Safe forum.
Creative Commons Zero v1.0 Universal
34 stars 10 forks source link

12 Related Safe Addresses #459

Closed d3-cmd closed 2 years ago

d3-cmd commented 2 years ago

Related Safe Addresses

0xBEFB0078F5e8eC9685DE4fFa14F3605Ef44D2e6B 0x9dc6cff66E33ED5a6d79448F16944A4740b5F6d0 0x6024E9B974f6643A8A9595b521e9D14FEab77F0f 0x19D9090FCDE725DB0B24a6019b5CA3864210077a 0x7cBC951103A0d880079deb94E98721d79e168757 0x5B953DFD01bf281974B296191FCBAA25ED6dd05f 0x805298584b55292215AC90391550641125A75d65 0xEA8206e4372BB589395502C8504EE0d39e313A2d 0xd14CC7bC7B012aCa85a957b366C65818dc5E221F
0xF7204998Ae70DA0D2df7cB41d490393E03C5133D
0x7a901ACF18a34cA90e329e7D9ac3141bbeA45c9d 0x850f657376FD78e8FB581E9f1d4AC560f4094603

Reasoning

0x691b692d9b181df61aba69f22f4721512012bd8a created all of the 12 safe addresses between Dec-20-2020 and Apr-07-2021.

All safe addresses only (!) interact with USDT and/or USDC and send large $ amounts of those tokens to addresses that are inter-connected with each other after having let the stablecoins sit idle in the Safes for unspecified periods of time.

All safe addresses with the exception of 4 (1 2 3 4) have only 1 Safe Owner: the creator 0x691, no one else. Why would you do this? It's a multi-sig after all, not a single-sig. I can't see a legitimate use case for this behavior, no matter how wide you want to make the definition of it.

The 4 exceptions are all 1/2 multi-sigs which were created as 1/1 multi-sigs initially with the second owner added through an "addOwnerWithThreshold" transaction only later.

When looking at the current balance of ETH and ERC-20 tokens hold some other patterns are evident:

8 (1 2 3 4 5 6 7 8) of the eligible addresses have a current balance of 0 1 (1) of the eligible addresses has a current balance of 2 USDC 1 (1) of the eligible addresses has current balance of 1053 USDT and 2 USDC 1 (1) of the eligible addresses has a current balance of 3172.23 USDC 1 (1) of the eligible addresses has a current balance of 22627.5 USDT and 10 USDC

Methodology

I've discovered the 12 reported addresses by checking for the addresses that had the biggest # of Safe creations. After having identified that 0x691 had created >10 addresses, I looked for patterns by manually going through Etherscan and the information provided on gnosis-safe.io for each Safe.

Safe Address

0x81058ff64a2D765E73fC04c6a19E051701D101C8

tschubotz commented 2 years ago

0x691b692d9b181df61aba69f22f4721512012bd8a created all of the 12 safe addresses between Dec-20-2020 and Apr-07-2021.

owning several safes is not airdrop farming per se but quite common.

All safe addresses only (!) interact with USDT and/or USDC and send large $ amounts of those tokens to addresses that are inter-connected with each other after having let the stablecoins sit idle in the Safes for unspecified periods of time.

Store of value is legitimate Safe use.

All safe addresses with the exception of 4 (1 2 3 4) have only 1 Safe Owner: the creator 0x691, no one else. Why would you do this? It's a multi-sig after all, not a single-sig. I can't see a legitimate use case for this behavior, no matter how wide you want to make the definition of it.

The Safes have only 1 owner after the final tx removed 1 owner. They had more than 1 when the stable coins where stored in the Safe.

I'm unable to follow your reasoning on how you can be sure this is not legitimate usage.