Sybil Attacker Report

[defienjoyer]

Related Addresses

Set 2:

Addresses	hash
0x0ebed597a4fe5b230d79a720ccd3068c4c0ac496	0x2f2d4cde7e130c8a2e0089d1e77d1bbd3270af2417293d6b26291c9be48f1c31
0x815400bf42a37af49f0229b502a15c880ad14ad2	0x2f2d4cde7e130c8a2e0089d1e77d1bbd3270af2417293d6b26291c9be48f1c31
0x8ef6659bfda25b525a21a3dbb41bca3e20b8da0b	0x2f2d4cde7e130c8a2e0089d1e77d1bbd3270af2417293d6b26291c9be48f1c31
0xa2a9234dd5db7be6c31372b51f2b1328cf28b407	0x2f2d4cde7e130c8a2e0089d1e77d1bbd3270af2417293d6b26291c9be48f1c31
0xa5b7b4eb029295159d9b3df038b343a2169032d3	0x2f2d4cde7e130c8a2e0089d1e77d1bbd3270af2417293d6b26291c9be48f1c31
0xd39ea6043d1fa03f5be2beb2cfe65faa4ef0e595	0x2f2d4cde7e130c8a2e0089d1e77d1bbd3270af2417293d6b26291c9be48f1c31
0xf8e80f333c25b614b9334b04dfef57bbfbf69aae	0x2f2d4cde7e130c8a2e0089d1e77d1bbd3270af2417293d6b26291c9be48f1c31
0xfb716561e917709912fbb819ebe54978c750398d	0x2f2d4cde7e130c8a2e0089d1e77d1bbd3270af2417293d6b26291c9be48f1c31

Set 7:

Addresses	hash
0x455839e1ffafe624051de0b89d3eb2930ea4d69d	0x88ef31565fa83fa6e5e18fe4f73c84189e0238e9623d43cb57e282da087eea0c
0x9da71fa22953121d3d00f525dd082188dc1b5064	0x88ef31565fa83fa6e5e18fe4f73c84189e0238e9623d43cb57e282da087eea0c
0xd32b0a3d760fd00d9fe44dc7793a5fe3c028159a	0x88ef31565fa83fa6e5e18fe4f73c84189e0238e9623d43cb57e282da087eea0c
0xd3844212d481c135bcd2659a0a1de4075b0d31f5	0x88ef31565fa83fa6e5e18fe4f73c84189e0238e9623d43cb57e282da087eea0c

Set 9:

Addresses	hash
0x0aee7893ca0387cfab680e402f325e995712fff4	0xebdd8f94cb032d9cb9b33c5d4d34492a3e027f6c79a9e0b2fc1e61cf0095013f
0x833a0454bd5ebcb9f56b0fe9f8b857fbe094934b	0xebdd8f94cb032d9cb9b33c5d4d34492a3e027f6c79a9e0b2fc1e61cf0095013f
0xdf823f05ec88a26d4a200ee519a1c66b631c4877	0xebdd8f94cb032d9cb9b33c5d4d34492a3e027f6c79a9e0b2fc1e61cf0095013f
0xfb27a04c861c766ad5e2804edb9374ded26f6560	0xebdd8f94cb032d9cb9b33c5d4d34492a3e027f6c79a9e0b2fc1e61cf0095013f

All addresses are related via one disperse transaction

Methodology

I created a script to link disperse address with eligible addresses document.

Rewards Address

0xCBd39631F4fb359cA966424B622aee0A5c1DaAa1

[defienjoyer]

Set 2:

1. 0x0ebed597a4fe5b230d79a720ccd3068c4c0ac496
2. 0xd39ea6043d1fa03f5be2beb2cfe65faa4ef0e595
   Are potentially malicious based frequency of trades and mainly done with airdrop protocols.
   Set 7:
3. 0x455839e1ffafe624051de0b89d3eb2930ea4d69d low amount of tx
4. 0x9da71fa22953121d3d00f525dd082188dc1b5064 low amount of tx and interacted with 1 and farms airdrops
5. 0xd32b0a3d760fd00d9fe44dc7793a5fe3c028159a low amount of tx and interacted with 1 and farms aidrops
6. 0xd3844212d481c135bcd2659a0a1de4075b0d31f5 low amount of tx and interacted with 1 and farms airdrops
7. 0xf2664dfa7924d9f3895349bae785027ab9da1c87 low amount of tx and interacted with 3 and farms airdrops
8. 0x4dea563a60191c7231c8c557623b320a36ebae0c interacted with 3 and farms airdrops
   Few of them linked by disperse too.
   Set 9:
9. 0x833a0454bd5ebcb9f56b0fe9f8b857fbe094934b low tx, interacts with airdrops, clear sybil
10. 0x0aee7893ca0387cfab680e402f325e995712fff4 low tx, interacts with airdrops, direct tx to 1
11. 0x910c60c049d833a7fd2f5bda310bbea1c5fa3598 low tx, interacts with airdrops, direct tx to 1
12. 0xf6f470af0f83021ff797d2295cc63bfa1f698173 low tx, interacts with airdrops, direct tx to 2
13. 0xFB27A04c861C766AD5e2804eDB9374DED26F6560 low tx, interacts with airdrops, direct tx to 2
14. 0xdf823f05ec88a26d4a200ee519a1c66b631c4877 low tx, interacts with airdrops, direct tx to 2
15. 0x7370f377359fcdd379845ee24b7847ea6d16c6db low tx, interacts with airdrops, direct tx to 4
    all linked via disperse too!

[shanefontaine]

@defienjoyer We have observed cases of apps sending funds through Disperse to help their users pay for gas on L2s. We have also seen altruistic people and faucets do the same. Because of this, we will need additional evidence. Some potential compelling evidence may be:

• Identical transactions on the exact same day/time by most or all of the addresses
• A trace of the ERC20 token between addresses (as opposed to native tokens)
• A similar time/date that all the addresses started transacting on a chain

Please note that there will need to be much more data provided for this submission. Per the rules, the data will also have to be easily verifiable. The additional data you provided does not show how the all the addresses are related to each other, which is another rule. The data in that comment is not extremely conclusive.

Please let us know if you can provide this data. Thank you for your work.