librehash Profile picture
1 Apr, 24 tweets, 21 min read
1/ In light of the ramapnt fraud that has been perpetrated by @bitfinex, @Tether_to, @paoloardoino, @cz_binance, @binance, @HuobiGlobal and others - this thread is designed to bring light to their actions by tracking down all ERC20 USDT.

librehash.org/tracking-down-…
2/ In order to do this, I decided to start with the Treasury - where all funds are minted via an "issue" call made on the relevant smart contract.

The Bitfinex "MultiSigWallet" is responsible for confirming any and all "issue" calls made to the Tether smart contract.
2a/ Visiting the "logs" panel on Etherscan afford us knowledge of the smart contract for the token being minted [USDT] (i.e., this tells us what the 'Tether' smart contract address is)
2b/ The Bitfinex "Multi Sig 2" wallet we see has the address 0xc6cde7c39eb2f0f0095f41570af89efc2c1ea828

Bloxy provides the addresses listed as owners. 3/6 signatures are needed here to approve Tether mints.

bloxy.info/address/0xc6cd…
2c/ The execution trace shows us that the "confirm transaction" call must be executed first before any USDT are issued.

So every issuance is done by Bitfinex

This multi-signature address by Bitfinex is governed by these standards

medium.com/mycrypto/intro…
3/ Given what we know above, we can unequivocally state that @CryptoWhalebot is purposefully hiding the identity of @bitfinex by placing "unknown" instead of "Bitfinex" whenever Tether issuances (minting) occur.

They should know well enough @bitfinex is issuing / minting USDT
4/ Moving forward though - if we look at the Bitfinex Multi Sig address we see nothing too remarkable at first.

However, visitin the 'Erc20 Token Txns' panel, we can see every outgoing USDT transfer was to the same address

0x5754284f345afc66a98fbb0a0afe71e0f007b949
5/ It doesn't take long for one to start to realize that the 0x575 address is actually the Tether Treasury.

In total, its received 25.66 billion USDT on the blockchain.

Source = explorer.bitquery.io/ethereum/addre…

As we can see disbursements are made to an assortment of counterparties
6/ Going further - we want to get a breakdown of *where* these funds are going.

Again, thanks to Bloxy - we can see that the "top receiver" is definitively a Bitfinex address

However, we still don't know about the others

source: explorer.bitquery.io/ethereum/addre…
6a/ Fortunately, this space has crafted plenty of tools that allow users to ascertain where funds are going.

This tweet contains a GIF of the 'ethtective' tool (completely free ; ethtective.com)

edit: had to remove it in order to tweet this thread
6b/ Another solid choice for an analytical deep dive is 'Bitquery' ; inputting the Treasury address, we received this initial relational transaction map showing the primary recipients of the lion's share of funds

Specifically, we can see that was @bitfinex frequently
6c/ We can also see that 22.3 billion worth of USDT have been minted (or at least sent from the MutliSigWallet we covered above) + a non-trivial 300M+ from @Poloniex for some reason
7/ Getting confused? Don't worry - here's a quick recap.

We started with a TX alert message from @CryptoWhalebot , which involved the Bitfinex multisig contract to confirm

We then discovered that this contract was designed to always send to one outgoing address (0x575)
8/ That address (0x575) is the @Tether_to treasury, which we're examining now. Thus far, we've observed *billions* in USDT being shipped directly to @bitfinex

In total, 9B USDT can be seen on screen alone.
8a/ The @NewYorkStateAG made it abundantly clear that @bitfinex and @Tether_to are ran by the same entity.

This is important to keep in mind as we can continue along through the rest of this thread
9/ Here are some quick notes regarding the relationship between the attached addresses to the @Tether_to treasury.
10 / Here, we can see 1.608 billion USDT that went to a nondescript address (0xf36a47300f002c0c9f8c131962f077c3543b2fc6)

This address is interesting since its also received significant amounts of UDST, ETH, LINK, REN, SNX, and ANT

Photo of wallet entity map is attached too
11/ More important than the 1st nondescript address is this second one that's received 5.65 billion USDT

The address is (0xf44e17140b4c32ef1e9fab15cbcb14074bd832ee)

Since there are only 16 outgoing USDT TXs, tracking them to @binance was easy
12/ Additionally, 800M USDT was sent directly to @binance's exchange wallet (no clear reason for why 5.6B+ USDT needed to be sent covertly through the other wallet).

Now we know at last 6.4B USDT went to @binance via disbursements. Nearly 10B were issued to @bitfinex
13/ Attached to this tweet is a photo of all of the *Ethereum* USDT mint events (there is significant activity on Tron we're going to bring to light as well in another thread)

Remember address 0x575 is the Treasury

source: stablecoin.tokenview.com/en/usdt
14/ Knowing the treasury address allows us to identify anomalous periods like the one isolated in the photo attached to this tweet showing 3.2 billion USDT being minted over the course of *4* days.

source: eth.tokenview.com/en/address/0xc…
15/ Now that we've looked at the primary recipients of the ERC20 USDT (@binance and @bitfinex) , we're going to move on to examine whether Tether disbursements have catalyzed $BTC's price run.

The real "run" started around Oct. 8th 2020.
16/ Curiously there are no 100% accurate sources for Tether online - but this is the best one since it gets the *total* amount minted in that time frame correct (they just incorrectly identify ownership among exchanges)
17/ Overall, 16-17B USDT (at least) were minted... *just on the Ethereum blockchain!* This does not include anything going on with @Tronfoundation @justinsuntron at all.

That thread is coming soon. Hopefully this thread serves as a useful resource.

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with librehash

librehash Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @librehash

23 Mar
1/ Assuming you're referring to the CFTC report on Coinbase's market activity, you can trace this via unusual activity occurring in one of the deposit addresses.
2/ That's how I discovered that QuadrigaCX was trading on its own exchange (and more specifically, that it was Gerry Cotten or someone else in an administration role). The analysis was painstaking, but I'll walk down a super brief example in the next tweets.
3/ Attached to this tweet is a screenshot of the 0x0247BC4E03142079CfA2E3Daf500722Ed0F9A6b2 address.

The pattern we see of funds being sent in and then immediately being swept to the exchange means that this is more than likely a deposit address (i.e., should be a custie addy)
Read 11 tweets
20 Mar
1/ This post is going to break down the @monero backdoor that I've been referencing (that got @fluffypony so riled up he had to make false, defamatory claims about me "exit scamming"; imagine he was red in the face banging his keyboard when he wrote this one) Image
2/ To be clear, this post is referring to this Monero proposal: ccs.getmonero.org/proposals/xiph…; which was successfully funded with 181 XMR, currently worth > $40,000.

Here's the relevant GH repo we're going to dissect = github.com/tevador/monero… (linked from the proposal) ImageImageImage
3/ To start, the idea that this wallet repo will save "5 bits reserved" for "future updates", makes zero sense.

The bits he's referring to here are generated from entropy & only exist in an ephemeral, indistinguishable form (how would one select the "5-bits"?) Image
Read 16 tweets
20 Mar
1/ ICYMI, I schooled the entire @monero community and exposed @fluffypony as a pseudo-intellectual wannabe bully that forgot he ran into the crypto space's biggest bully.

See them get humbled here - reddit.com/r/Monero/comme…
2/ To be clear, the original Reddit post was created to urge the community to pay @veorq more money than what they offered because he's actually worth more - and he has the intelligence, expertise & proven ability to help curate unique solutions that could enhance Monero. ImageImageImage
3/ @fluffypony attempted to respond...and, well, let's just say that this is where it got embarrassing (he was mad that I pointed out that Monero is trying to push a wallet solution with a backdoor in it) Image
Read 5 tweets
20 Mar
1/ There are many that are shocked by the @CFTC's press release condemning @coinbase (and @brian_armstrong) criminal behavior.

But that's likely because you all forgot that this is who @coinbase has always been!

Let's take a trip down memory lane, shall we?
2/ In 2015, it was revealed that Coinbase had lied about its regulatory status - sfgate.com/business/artic…
3/ On July 18th, 2018, Coinbase published an announcement informing the cryptocurrency space that it had lied about receiving regulatory approval from the U.S. government to “list coins considered securities” - cointelegraph.com/news/coinbase-… (Coinbase Retracts Announcement)
Read 10 tweets
17 Jan
1/ Wrote an article here about an exchanger that allows you to swap several different cryptocurrencies for Monero without KYC or logins at all

librehash.org/alfacash-a-mon…
2/ Being the eternal skeptic, wanted to test if this website was actually legitimate (there are a lot of crypto scams out there; way too many)..

So we start off visiting the main website and set up a LTC:XMR conversion.
3/ The Monero address that you see in the picture above was created using this "mindwallet" altered tool created by Pactito (patcito.github.io)
Read 11 tweets
17 Jan
1/ Polkadot is a really well-designed project with some extremely smart folks at the helm - but their plan for interoperability with Bitcoin won't work for a few reasons that will be explained in detail within this thread. #Polkadot $DOT #Parity
2/ Documentation on the proposed 'bridges' for $DOT can be found here = wiki.polkadot.network/docs/en/learn-…

This is where the 'XClaim' protocol is introduced.
2a/ One major setback stopping this from being trustless from the jump is the fact that Polkadot does not use Proof of Work (that is necessary) - but even putting this to the side, there are critical elements missing.
Read 21 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!

Follow Us on Twitter!