Thread by @CryptoF85529984

A tale of Not So Stable BNB:

1) This is a thread about @stablebnb and the shady characters that surround it. I have followed them for 3 months and have figured out the scam.

#crypto #stablebnb #rugpull #scam #scamalert $BNB @binance

2) The contract address that was advertised on the website at stablebnb.io was 0xfD53b1B4AF84D59B20bF2C20CA89a6BeeAa2c628. This had literally nothing to do with the contract or contracts people were depositing BNB into

3) 0x86530cadc1fcee6b61aa766ef70c0adbdca20a66 is the contract address that most people will be familiar with. When you deposit or stake in this contract you cannot withdraw. You can only take the interest earned which was 3% daily

Now if you start digging you find that the website domain was only registered on 2022-02-15 at 16:47:18. This is a platform claiming to be profitable for over 12 months. The contract above to deposit into was created Feb-17-2022 01:33:48 AM +UTC

So when we take this contract and look at the transactions, it looks ok, there are only transactions going in. But when we look at the internal transactions it tells a very different story. By extracting the data and focusing on the exceptions....

Exceptions....

0x1f219b79bfbb7365ae6890936092176b2490d1f4
0xee2ad865935ca998a9a0a358897726ff0af49b17
0xee22b5a110a90a1ee28bff9937ee9a086696ef7a
0x69a45a4ce55fcaf2e7c4e6ae39b4ffbf7dbe12d0
0x8b33345da8c8d4f5cf77c3a939be0e29608ee8b0
0x0fb44206eee8a541389e775e4abb850ceeeb0d9e

Now the contract was not published, so in it's normal form was useless. But there are very smart people out in crypto world that have pieced this together and developed a custom ABI to interact with the contract. Interesting that these wallets are coded into the contract

So as far as we can tell, the contract would recycle most of the funds, siphoning off small amounts to each wallet as time went on. The amount of these siphons increased over time until we got to txn 0x9bf5cd57872b24bc55cd626afc4563614060446a1b53157618afee62c1ea62e3

May-25-2022 05:02:48 PM +UTC 1803 BNB was transferred out of the contract. At the same time the website went dark, with an image indicating a Russian law enforcement agency had taken the site down for crypto money laundering. We don't speak Russian so if anyone can translate

So that's it. Job was done by scammers. They rug pulled everyone and got away with it. No way to link to real people because of the anonymity provided by crypto. However.....

We did gain access to the Stable BNB Team Group on Facebook, run by Brian Rhodes. Brian has a history in these platforms, the last being @FastBNB. A person named Biman Das allegedly performed a similar rug pull on that platform, and this appears to be a repeat effort.

Now when we presented these hidden wallets in the contract to the Facebook group, we were instantly banned (surprise!). But why would you ban people when the information is freely available on the blockchain?

Looking at Brians youtube channel, youtube.com/channel/UC5piG…
we can see that he is pretty heavily invested in Stable BNB. Bu the is also re-promoting Biman Das in a new Flamingo business? And another referral scheme

To put this in perspective, we didn't get all the data, but we got most of it. The top 6 accounts appear to have received ~4240 BNB (~$1,350,000) so it's been a good haul for them. And that's all from one contract. We wonder if they had any more?