Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Sybil Attacker Report #539

Open
defienjoyer opened this issue May 21, 2022 · 2 comments
Open

Sybil Attacker Report #539

defienjoyer opened this issue May 21, 2022 · 2 comments

Comments

@defienjoyer
Copy link

defienjoyer commented May 21, 2022

#Addresses

Set 6:

Addresses hash
0x56b68f31535ba5340237fe827291b237bd2e57d0 0x46868ce0f27251eee22c66b84b4831a5ec05f3b6b800cf951c261ace57e1009e
0x9d4a9a7df229b2e63b883b8ffa69585e59bf16cb 0x46868ce0f27251eee22c66b84b4831a5ec05f3b6b800cf951c261ace57e1009e
0xb154ae9dd24e41bb0ddcc0ceab42b13314f3704f 0x46868ce0f27251eee22c66b84b4831a5ec05f3b6b800cf951c261ace57e1009e
0xe15427495141b5b961e50885a9b0b6bc15edc3c2 0x46868ce0f27251eee22c66b84b4831a5ec05f3b6b800cf951c261ace57e1009e
0xf468c3a13bd009f10a93e002ed1c15d636c1e44c 0x46868ce0f27251eee22c66b84b4831a5ec05f3b6b800cf951c261ace57e1009e

Reasoning

All addresses are related via one disperse transaction

Methodology

I created a script to link disperse address with eligible addresses document.

Rewards Address

0xCBd39631F4fb359cA966424B622aee0A5c1DaAa1

@defienjoyer
Copy link
Author

Set 6:

  1. 0x9d4a9a7df229b2e63b883b8ffa69585e59bf16cb Clear sybil attacker
  2. 0xb154ae9dd24e41bb0ddcc0ceab42b13314f3704f Clear sybil attacker and linked to 1
  3. 0xe15427495141b5b961e50885a9b0b6bc15edc3c2 Clear sybil attacker and linked to 2
  4. 0x56b68f31535ba5340237fe827291b237bd2e57d0
  5. 0xf468c3a13bd009f10a93e002ed1c15d636c1e44c
    all linked and all clear

@shanefontaine
Copy link
Member

@defienjoyer We have observed cases of apps sending funds through Disperse to help their users pay for gas on L2s. We have also seen altruistic people and faucets do the same. Because of this, we will need additional evidence. Some potential compelling evidence may be:

  • Identical transactions on the exact same day/time by most or all of the addresses
  • A trace of the ERC20 token between addresses (as opposed to native tokens)
  • A similar time/date that all the addresses started transacting on a chain

Please note that there will need to be much more data provided for this submission. Per the rules, the data will also have to be easily verifiable. The additional data you provided does not show how the all the addresses are related to each other, which is another rule. The data in that comment is not extremely conclusive.

Please let us know if you can provide this data. Thank you for your work.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants