Sybil Attacker Report
Closed this issue · 1 comments
Related Addresses
0xaa6c7b556449e1d5a75b6322a256180edd1c8edc
0xb2ecace0eb5cad865bf2e603cbf885597f0036e1
0xb722c43edec90e4fa0e4463486f5ec91757de429
0xbe87e73e639aa5e815a02672bb18519cd8bfee66
0xd858f6b012b8375ac8bd7eb2bccbabf904fd40f4
0xe784226260d2e0081a9d55cde9384f6f3d8caa99
0x013e0a9ac418ca71de2b3b8ae7b67fbd13f2ab4a
0x84ef8cc347b05447f43ba97049f5d716b1dd7945
0x891ade8337151b26dcbe6662e5180f00ed14959d
0x324573a3d659eb0069262da78deef0c69ee63a1c
Reasoning
Those wallets are related to 0xaa6c7b556449e1d5a75b6322a256180edd1c8edc.
8 of them was initially funded on Ethereum blockchain for the same amoint of 0,0001 ETH at 12.10.2020 between 3:48 and 3:53 (in 5 minutes).
Last one - 0x324573a3d659eb0069262da78deef0c69ee63a1c was initially funded by 0xaa6c7b556449e1d5a75b6322a256180edd1c8edc on Gnosis and Polygon blockchains.
All of them have low activity on Gnosis blockchain. It is easy to see there that 0x324573a3d659eb0069262da78deef0c69ee63a1c is related to other: he have multiple transfers with 0x013e0a9ac418ca71de2b3b8ae7b67fbd13f2ab4a (who is also in list) and 0xeF7085068b5172eFF980C79d9532508faE3b5F9A (who was also initialy funded by parent wallet of this group - 0xaa6c7b556449e1d5a75b6322a256180edd1c8edc).
Additionally if you check 0x324573a3d659eb0069262da78deef0c69ee63a1c and 0xaa6c7b556449e1d5a75b6322a256180edd1c8edc activity on Polygon blockchain you can see that 0x324573a3d659eb0069262da78deef0c69ee63a1c did same transactions as 0xaa6c7b556449e1d5a75b6322a256180edd1c8edc in same dates. Especially before 7.01.2022. After 7.01.2022 0x324573a3d659eb0069262da78deef0c69ee63a1c starts to make same transactions with 2-7 days delay.
Methodology
I analysed initial fundings those wallets made on different blockchains. And found this group of 9 accounts. Then I also found 10th account. And collected additional evidence for it by analysing its blockchain activity in different blockchains manually.
Rewards Address
0x72153F1040BDfe6961bB73448f1AF265B2bFDf0b
Thank you for your report.
Unfortunately, none of these addresses are eligible. All eligible addresses are here.
It looks like these addresses were submitted in #506.
Please note that, per the rules, only the Hop Bridge User token allocations are taken into consideration for the Sybil attacker submissions and not Hop LPs.