September 1, 2023

Last Sibil

# Related Addresses

Group 1
0xF335baa6e6aD984150A8526238808d2BfF69869d
0xf8aFa6338e9FAbaFC49469c32F5fBFe911ea7c04
0x95D8ac20b2377A00fcdA7Cf56709C4570EDD40b7
0xda428bE4F8E0Ec294FC0647690073895F406C659
0x39643F31647D78Fe1cCfbd9B95c1155262a0f55C

Group 2
0xE910908856DD3Bf536fFc1Db0eAa6eb56aD9Ef34
0x52a96Df011405eF089a0DCBEc97d45380EDB2387
0xaeB79c89Bd801348DA200C73533908562a1D726E

Group3
0x9f9bF87DC03EfEdb4bAbc5ED2dA75c9032a448f5
0x49b705fa04841EAE530568DEE619BF8a4bDCd423
0x6DF8E1Ab5CF8c3729651844Ec6d67E476b929F5c

# Reasoning

Group 1
When we go to DeBank, we see that 4 accounts were created in general in 1 day and the last one is different for a couple of days
![image](https://github.com/connext/community-sybil-reports/assets/143632242/b7078633-15f2-41f9-91bf-3a167b42aed9)
![image](https://github.com/connext/community-sybil-reports/assets/143632242/1956aba7-fc29-4104-8631-9b01973dc0fd)
![image](https://github.com/connext/community-sybil-reports/assets/143632242/65b1201d-9436-4720-aefa-83e04156375f)
![image](https://github.com/connext/community-sybil-reports/assets/143632242/ba644fea-0203-464a-aed1-b0d50245fb96)
![image](https://github.com/connext/community-sybil-reports/assets/143632242/d32dada9-3504-4240-bd8f-c7b4ab1e2780)

on DeBank they already have the Sibil label
![image](https://github.com/connext/community-sybil-reports/assets/143632242/f1ad494b-7524-43b9-abe2-5cd9a6fa43a2)
![image](https://github.com/connext/community-sybil-reports/assets/143632242/ca7ccc41-58c0-455d-a7de-6ac6c6d5a5d1)
![image](https://github.com/connext/community-sybil-reports/assets/143632242/1edca56b-eae4-4d4a-8b28-466c8116a194)
![image](https://github.com/connext/community-sybil-reports/assets/143632242/e0f82783-dd19-4606-a926-0b7d3db3065f)
![image](https://github.com/connext/community-sybil-reports/assets/143632242/7bf69f0a-4ae2-4d9f-bcce-8fcc0af58233)


They also have transfers between them

![image](https://github.com/connext/community-sybil-reports/assets/143632242/df291790-847a-481f-872d-a66c59f733bd)


Also all recent transactions are the same
![image](https://github.com/connext/community-sybil-reports/assets/143632242/c8b2bb65-98f5-420a-af4b-c16f9bd9df8c)
![image](https://github.com/connext/community-sybil-reports/assets/143632242/19fbdd1a-2abe-4657-b89a-bbcc453e6f9c)
![image](https://github.com/connext/community-sybil-reports/assets/143632242/53e6547f-89b4-489c-b031-5fcbb580255c)
![image](https://github.com/connext/community-sybil-reports/assets/143632242/91c8a001-0055-421a-bf66-91c6bf4b4656)
![image](https://github.com/connext/community-sybil-reports/assets/143632242/783161a5-17be-44a9-b830-eb2860773b70)


Adding them to Arkham, we see such a picture, there are a lot of translations among themselves
![image](https://github.com/connext/community-sybil-reports/assets/143632242/f94af277-7e0f-4e19-a0b3-fbc7c0e1f7f7)

https://platform.arkhamintelligence.com/visualizer/entity/0x2A9EA5e8cDDf40730f4f4F839F673a51600C314e,0x31eFc4AeAA7c39e54A33FDc3C46ee2Bd70ae0A09,0xF335baa6e6aD984150A8526238808d2BfF69869d,0xf8aFa6338e9FAbaFC49469c32F5fBFe911ea7c04,0x95D8ac20b2377A00fcdA7Cf56709C4570EDD40b7,0xda428bE4F8E0Ec294FC0647690073895F406C659,0x39643F31647D78Fe1cCfbd9B95c1155262a0f55C?flow=self&positions=%7B%22connext%22%3A%7B%22fx%22%3A21%2C%22fy%22%3A-2%7D%7D&sortDir=desc&sortKey=time&usdGte=0.1

Group 2
Let's go to DeBank, we see that all wallets were created in 1 day

![image](https://github.com/connext/community-sybil-reports/assets/143632242/147e75ec-cf43-4485-afe3-8ec5db30f778)
https://debank.com/profile/0xe910908856dd3bf536ffc1db0eaa6eb56ad9ef34

![image](https://github.com/connext/community-sybil-reports/assets/143632242/45956283-c0d9-4ebc-85bc-bc75de1e98c7)
https://debank.com/profile/0x52a96df011405ef089a0dcbec97d45380edb2387

![image](https://github.com/connext/community-sybil-reports/assets/143632242/2c5a68a1-bd0c-4ed0-ad3d-632cac781dab)
https://debank.com/profile/0xaeb79c89bd801348da200c73533908562a1d726e

They have almost all the same transactions
![image](https://github.com/connext/community-sybil-reports/assets/143632242/be351f2f-6a4f-416d-b502-cbae37f8d4cc)
![image](https://github.com/connext/community-sybil-reports/assets/143632242/e7fdfdad-9648-4c07-888a-3c5370a0154d)
![image](https://github.com/connext/community-sybil-reports/assets/143632242/30eb9fc1-c077-41cb-be61-a010d4545345)

All done in 1 day with a difference of half an hour

By adding these wallets to Arkham, we see that 1 account replenished them
![image](https://github.com/connext/community-sybil-reports/assets/143632242/ed9c46a5-9a17-4896-8295-6c30848eb225)
https://platform.arkhamintelligence.com/visualizer/entity/0xE910908856DD3Bf536fFc1Db0eAa6eb56aD9Ef34,0x52a96Df011405eF089a0DCBEc97d45380EDB2387,0xaeB79c89Bd801348DA200C73533908562a1D726E?flow=self&positions=%7B%220x52a96Df011405eF089a0DCBEc97d45380EDB2387%22%3A%7B%22fx%22%3A10%2C%22fy%22%3A-13%7D%7D&sortDir=desc&sortKey=time&usdGte=0.1

Group 3
As we can see, these 3 accounts interact with each other and even at the same time
![image](https://github.com/SoftEtherVPN/SoftEtherVPN/assets/97559098/7494c76c-dbda-4a0a-86bf-9f3fdf68bac8)
https://platform.arkhamintelligence.com/visualizer/entity/0x2A9EA5e8cDDf40730f4f4F839F673a51600C314e,0x31eFc4AeAA7c39e54A33FDc3C46ee2Bd70ae0A09,0x49b705fa04841EAE530568DEE619BF8a4bDCd423,0x6DF8E1Ab5CF8c3729651844Ec6d67E476b929F5c,0x9f9bF87DC03EfEdb4bAbc5ED2dA75c9032a448f5?flow=self&positions=%7B%7D&sortDir=desc&sortKey=time&usdGte=0.1

Also, they have the same creation time, and received the same token deposit, after which we can see that all 3 accounts have withdrawn funds to the same binance wallet, which proves fraud.
Binance Adress which are used for deposit from 3 wallets: 0x251308E3484fc1E149EC9938885e514351348838

![image](https://github.com/SoftEtherVPN/SoftEtherVPN/assets/97559098/4e1266c8-dd38-4ac6-b9a6-63696b19e1bc)
https://platform.arkhamintelligence.com/explorer/address/0x9f9bF87DC03EfEdb4bAbc5ED2dA75c9032a448f5

![image](https://github.com/SoftEtherVPN/SoftEtherVPN/assets/97559098/cd244788-1f53-4efd-b1ad-cdd04ba0498f)
https://platform.arkhamintelligence.com/explorer/address/0x49b705fa04841EAE530568DEE619BF8a4bDCd423

![image](https://github.com/SoftEtherVPN/SoftEtherVPN/assets/97559098/a931d65f-f313-49c4-afa4-dc558a2b7304)
https://platform.arkhamintelligence.com/explorer/address/0x6DF8E1Ab5CF8c3729651844Ec6d67E476b929F5c

# Methodology

I check all accounts in https://debank.com /, and also use more https://platform.arkhamintelligence.com/visualizer . Seeing obvious coincidences, I begin to study the accounts in more detail, first I look at the day of account creation, then I look at the latest transactions, after that I go to Arkham and build a coincidence map where everything is clearly visible. Every account is checked by hand

# Rewards Address

0x613168efc57b55b87253dE3F8fa93084Bd1985F4