Wallet Evidence
During the course of the investigation, several wallets were discovered that connected users to payouts of various projects. The following items provide evidence of the key connections.
Core Wallets
The core wallets listed below are linked to several of the individuals in this investigation.
Wallet: 7XcnC6nkqLcrCabWxkiqPZMED2ndpPurqBHxJhedTng4
Wallet: Aa9yrt7QBM1dABzPyBSYur9bMDZNJnL2xdk1S8tJqsWA
Wallet: H5W9vYPbeYaqodhhP1zZaRRuJwWXqQsmX45rN5C2No9Y
Wallet: BWZTuazh97vSYjjxJFSFnwsfKdUz25EBecs3uaNwqU2B
Wallet: 9xEd3CbJXEfymXF7ikDZYF6deRjV9c5krvcbomnT4r2h
Wallet: 5Q2nQbrCLCW3wHrzS3YpiyfuoKoXdRk832MkDuUKgMq8
The core wallets all ended up being linked in some way to three wallets where funds were transferred after several projects.
Wallet: 8hvcez9RchD1qKhCBbemqFNmX4GpFLKazn87YyPZG3Yy
Wallet: CxQDQgofcKnCzEb8fs7z2THSFetwEAa5zLfPeFabcHyx
Wallet: 9eCuLVUNbAuhX6JD5deb4j79s5n7V525FAK2wzFQJciZ
Beta Tester Wallets
We also discovered that the following wallets were linked to several of the beta testers in the discord. While no forensic activity was captured with these wallets, it should be noted that the investigation primarily focused on the Solana chain.
Wallet: 0xEab16DF6C3Bb01b4e9f2482694355b8404B9Ea02
Wallet: 0x81a1B8ED2D0449a50168C6B410a4De24CebB9f70
Wallet: 0x03cb0b25A0e59f065f4A8D7cb4E048E3b2Bfe666
Wallet: 0x85472981e13c7Cd11dF52f21e69493353e1c6D87
Wallet: 0xOruM7n16rU042e2uLWzq25ysyQB1CaAAu8Ia4EIsLY08v5SrtD
Wallet: 0xE19dcFCdA30314AF5985989B3f6C2876deD735c1
ShushuNFT Twitter and Wallet Connections
To initiate our analysis of wallet connections, we start with the Twitter profile of ShushuNFT. This individual, who is connected to our first core wallet, made a bold statement regarding their involvement in a rug.
ShushuNFT was linked to the purchase of the Cet#4440, which is also the current PFP profile picture used on Twitter.
The wallet that purchased Cet#4440 was also linked to a Matrica profile of a user Shushu.
We can see the purchase in the image below is linked to the same wallet as the Matrica profile.
Wallet: Aa9yrt7QBM1dABzPyBSYur9bMDZNJnL2xdk1S8tJqsWA
ShushuNFT also posted a wallet in the Twitter profile, which is connected to several of the rugged projects.
Wallet: 7XcnC6nkqLcrCabWxkiqPZMED2ndpPurqBHxJhedTng4
The Aa9y... wallet mentioned has transactions showing transfers to the 7Xcn wallet twice in the amounts of 6.6879 and 3 sol. It also has a transaction of 74.28 sol sent to wallet 9eCu... which was one of the wallets receiving funds from projects.
ShushuNFT posted a second wallet in the Twitter profile, which is connected to several other transfer actions.
NFTiski Twitter and Wallet Connection
For our next connection we start with the Twitter profile of NFTiski.
NFTiski posted a wallet in the Twitter profile, which is connected to several of the rugged project interactions.
Wallet: BWZTuazh97vSYjjxJFSFnwsfKdUz25EBecs3uaNwqU2B
SolHooligan/Wagmisaurus1 Twitter and Wallet Connections
Our third connection is linked with the Twitter profile of SOLHooligan who is a key player that has been mentioned in several aspects of the evidence.
SolHooligan posted a wallet in the Twitter profile, which is connected to several of the rugged project interactions. This is also the same wallet as Wagmisaurus1.
Wagmisaurus1 (e.g. SolHooligan) listed wallet from the Twitter profile.
Wallet: 9xEd3CbJXEfymXF7ikDZYF6deRjV9c5krvcbomnT4r2h
SolHooligan also posted on May 30, 2022 that a Bohemia NFT #4984 was purchased for 25 sol as shown below.
This Bohemia NFT #4984 was linked to another wallet, which is connected to several of the rugged project interactions.
Wallet: 5Q2nQbrCLCW3wHrzS3YpiyfuoKoXdRk832MkDuUKgMq8
This same 5QnQ... wallet was linked to multiple fake twitter profiles that were used to try and get whitelists in the past.
Detailed Wallet Connections
To provide additional clarity on the wallet connections, we will begin with the Academy Beasts project, where a transfer of 275 Sol was called out by BigShark_SOL to the following wallet.
Wallet: 4dZFTrvwuuGsKuqK3VXXzfiKurutzUdaMSTBiV6TfURn
As we follow the AcademyBeasts wallet we see in Forensic Figure 1 that it had funds transferred (30.35 sol to 8048... wallet) and interaction with a few other wallets. Make a note that one of these (6EZm...) was mentioned in the Twitter post by BigShark_SOL .
Wallet: 8o48AAaGHntvBiaF65NFuboaFDMUNAAT4cSXsLMWkcew
Wallet: 6EZmqqpp1TWD6ney9aNzE76zZpjFVbVFzWqrJHLHuAeU
We also see this wallet shown in Forensic Figure 2 below transferring funds to and from the DQss... wallet.
Wallet: DQssm2ERhdCo2XCGwEusC7TS3siSMttPAAcobuFQRkAn
Then we see the 4dZF... wallet receiving funds from the Tired Kids creator wallet.
Wallet: 5Ki1bdp7oGcxEmTFpww4Js3Zh9cFxtmwwertxGjWeGfW
We noticed the DE8X... wallet in Forensic Figure 2 was associated with the DarkClub as the creator wallet.
Wallet: DE8XEs3izJHNH5DSonqHwLNpkweJLFksSJrr9n2XUsQr
Another point of interest in the investigation was the CxQD... wallet in the Forensic Figure 2 timeline. This wallet was sent 33 sol and 39 sol from two different accounts. In addition, two other wallets received that same transfer amount of 39 sol.
Wallet: CxQDQgofcKnCzEb8fs7z2THSFetwEAa5zLfPeFabcHyx
Tracing back the transactions provided more evidence that multiple other wallets as shown in Forensic Figure 3 were identified sending sol to the CxQD... wallet in large amounts. We saw transactions of 37 Sol, 50 sol, 36 Sol, and 44 Sol that was transferred.
Wallet: 4Yc8eK5m7xzq4VErTpFqDxNZY9omp7m3gJC7MG9WwRTc
Wallet: 9iaCpzK5ksHJqqrDm7kqeWvkDgbiKswdYghb6zirJUDp
Wallet: B9qahJB64e947Y56oLA76CxaTJx3ube1NA1ZKiMVuCnR
Wallet: 3wt15zqZGT7PyDYDUTQQSa8kaQuUXCTAVxcVDBi3dewB
It was also very interesting that some wallets (4yc8... and B9qa...) were transferring similar amounts to multiple other wallets. For example, if we focus on the Forensic Figure 3 image above we can see 37 Sol was transferred to 3 wallets.
Wallet: 8hvcez9RchD1qKhCBbemqFNmX4GpFLKazn87YyPZG3Yy
Wallet: CxQDQgofcKnCzEb8fs7z2THSFetwEAa5zLfPeFabcHyx
Wallet: 9eCuLVUNbAuhX6JD5deb4j79s5n7V525FAK2wzFQJciZ
We can also see that those same three wallets were sent 36 sol, but this time from a different wallet, which was highlighted in blue and black and was found to be tied to the Friendly Bones mint.
Wallet: B9qahJB64e947Y56oLA76CxaTJx3ube1NA1ZKiMVuCnR
Therefore, our focus was now on the 3 wallets that seemed to be regularly funded by some projects.
Starting with the last funded wallet identified, the 9eCu..., we go back to what may be the initial funding of the account in January of 2022. We notice in Forensic Figure 4 below that the 9eCu... wallet was sent funds from 7xcn... and then sent back funds to the same wallet.
Wallet: 7XcnC6nkqLcrCabWxkiqPZMED2ndpPurqBHxJhedTng4
The 7xcn wallet is the same wallet that was posted by ShushuNFT on Twitter. Also, notice the other wallets that are being interacted with from ShushuNFT's 7xcn.. wallet. They are the wallet 9xEd... that was posted by the SolHooligan and Wagmisaurus1 twitter accounts.
Wallet: 9xEd3CbJXEfymXF7ikDZYF6deRjV9c5krvcbomnT4r2h
We also have the NFTiski wallet BWZT... interacting with both ShushuNFT and the SolHooligan/Wagmisaurus1 wallets in Forensic Figure 4.
Wallet: BWZTuazh97vSYjjxJFSFnwsfKdUz25EBecs3uaNwqU2B
As the investigation continued we noticed in Forensic Figure 4 the 3wt1... address that was being sent funds from ShushuNFT.
Wallet: 3wt15zqZGT7PyDYDUTQQSa8kaQuUXCTAVxcVDBi3dewB
As the investigation starts to trace back the 3wt1... wallet there are several transactions shown in Forensic Figure 5 with NFTiski's BWZT... wallet.
The 3wt1 wallet also appears to have the same Xin Dragons NFT that is used on NFTiski's Twitter profile.
The 3wt1... wallet has multiple transactions with another wallet 4k1m...which eventually became a focus of interest in the investigation.
Wallet: 4k1mLzXCcSZsfwYWh1X88TH8bK8XRRPAw8X7XoKuxvfS
We see this 4k1m... wallet was linked to WOOBACKBABY in Matrica, which led us to start investigating each NFT in the wallet.
As we continued the investigation we identified the following NFT below which was correlated to a NFT likely minted by a person who took CryptoZachLA's mode course. Thus, we have an individual who is potentially trained in discord moderation..
Now as we shift to the 8hvc... wallet we also see in Forensic Figure 5 above that the wallet 9xEd... sent an amount of .3 sol to the 8hvc wallet which might be the initial wallet funding. We know that the 9xEd... wallet is connected with SolHooligan/Wagmisaurus1 Twitter profiles.
Beta Tester Wallets
Regarding the wallets of the Beta testers mentioned, there were several associated with certain profiles. Please note that, at this time, there was no forensic investigation of these wallets and thus no other evidence connecting them to funds on the project.
The wallet OxEa.. was identified with AppleTZ8 Twitter account.
Wallet: 0xEab16DF6C3Bb01b4e9f2482694355b8404B9Ea02
The remaining wallets were all identified with rycepicker Twitter Account.
Wallet: 0x81a1B8ED2D0449a50168C6B410a4De24CebB9f70
Wallet: 0x03cb0b25A0e59f065f4A8D7cb4E048E3b2Bfe666
Wallet: 0x85472981e13c7Cd11dF52f21e69493353e1c6D87
Wallet: 0xOruM7n16rU042e2uLWzq25ysyQB1CaAAu8Ia4EIsLY08v5SrtD
Wallet: 0xE19dcFCdA30314AF5985989B3f6C2876deD735c1
Last updated
