0xScope Profile picture
Nov 10, 2022 11 tweets 8 min read Read on X
😬Rumor has it that @SBF_FTX has been moving users' funds around. We dived in for a hell lot of time and here's what we found:

🚨We found that @SBF_FTX and @AlamedaResearch have been SHARING the same funding and lots of exchange accounts for a long time 🫡.

Proofs👇:
First of all, we applied address clustering to all the @SBF addresses we can find, and one of them is highly connected with a tagged #Alameda's address.
SBF's: 0xD57581D9e42E9032e6f60422fA619b4A4574Ba79 (0xD5)
Alameda's:
0xf108a465a5dafb51bb48615b1a4f5e00401ff90d (0xf1)
Why do we say address 0xD5 is @SBF_FTX?
Okay, first of all, he admits himself.

And we also find this is one of the multi-signer of @sushiswap, which SBF is.

panewslab.com/en/articledeta…
Okay here we go:
Proof 1:
#Alameda address 0x f1 provides initial gas funding to Sam and transfers 12710 $ETH to Sam in Sep. 2020.
Proof 2:
Go further, we find that #Alameda 0xf1 and Sam share the same #FTX and #Binance deposit addresses!
Proof 3:
Expand to the 3rd level, and more #Alameda addresses pop up, it shows Sam sharing #FTX & #Binance deposit addresses with at least 7 #Alameda addresses.
🚨We have reasons to believe that those deposit addresses are the company's account.
What's also interesting is that Sam's last transaction was sent all 12 ETH to #FTX on 2022/07/12, so maybe the problem already existed at that time.
⏲️All of the proofs happened on Nov. 2020.

Rumor has it that @SBF_FTX controlled all #Alameda's addresses, we can't verify it.

But we strongly believe 🫡that at least at this time period, @SBF_FTX used the company's funds and accounts to finish some individual business.
🚀Follow us for more about the recent events and other on-chain insights:

The product shown above: @0xWatchers watchers.pro

FTX incident Dashboard:
watchers.pro/#/report
@SBF_FTX Edit:
All of the proofs happened on Sep. 2020.
@0xWatchers Okay, I know you all hate @SBF_FTX but don't get bots🤖 to boost the stats🤣
Now we look like a scam🤣🤣🤣

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with 0xScope

0xScope Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @ScopeProtocol

Apr 25, 2023
1/n #Meme season is also #rug season
If you get rugged, don't just give up

@0xWatchers have a full set of investigation tools to help you locate and monitor the rug pullers⚔️

Product: watchers.pro
2/n First, enter the following information in the 'Money Flow':

- Your Address
- Stolen tokens
- Time period

Once you have entered this information, you can locate the hacker's address and track where the funds went afterwards.

Use the tool here:
watchers.pro/moneyFlow/0xd8… Image
3/n If you discover that your funds have been deposited by a hacker into an exchange, you can apply to the relevant exchange to freeze the hacker's account.

In addition to this, you can also DM us for assistance. Image
Read 5 tweets
Jan 6, 2023
Huobi had a net outflow of 11.7M in the past hour and 57.9M in the past 24 hours, the net outflow velocity appears to be increasing.
The largest token outflow in the last 24 hours is $USDC (-9.45%).
Huobi is currently the exchange with the largest asset outflow in the past 24 hours, and the token that #Huobi currently holds the biggest position is $HT, while other exchanges are stable coins and $ETH.
The chains with the most asset outflows are #Ethereum and #Tron, but #Huobi's Eco chain (Heco) balance has increased.

Currently, 44.74% of Huobi's Ethereum assets are $HT.
The drop in $HT price may have a greater impact on the total balance.
Read 4 tweets
Jan 6, 2023
🚨 The @justinsuntron is super active on #Tron today.

Here's what he did:

1. Withdraw 62M USDT on #Justlend
2. Buy 2M USDD using 2M USDT on #Sun
3. Withdraw 6M USDC on #JustLend and transferred out
4. Transfer 60M USDT to @binance

tronscan.org/#/address/TPyj…
Based on the record, Justin usually:

1. Transfer $USDT on #Tron to binance
2. Transfer $USDC/ $BUSD out from binance on Ethereum
3. Cashed out them on #Paxos and #Circle.

Let's see if Justin will do this again.

Since the last time we posted about this, Justin cashed out $88.5M $BUSD on the last day of 2022.
Read 5 tweets
Jan 6, 2023
🚨.@GenesisTrading laid off 30% of its employees and is "considering" filing for bankruptcy according to @WSJ.

wsj.com/amp/articles/c…

1. How did genesis end up here?
2. How does this gonna affect the market and why should you care?

A explain thread.
👇
Now, Who is #Genesis?

Genesis "was" a leading CeFi platform that provides mainly lending services for institutions.

A lending platform usually borrows money from one side and lends the borrowed money to the other side to profit from the interest gap.

That's what CeFi does.
But #Genesis is not independent, it is under the control of @DCGco and @BarrySilbert.

#GrayScale is also part of the group.

That's why you see @cameron battling Barry on CT with an open letter.
Read 21 tweets
Jan 4, 2023
🚨Massive NFTs have been hacked including multiple #BAYC & #CryptoPunks & #Meetbits of @CryptoNovo311, the total hacked value is $6M+.

We identify the whole process and hacker address, and those funds ended up in @ChangeNOW_io. Image
Before his NFT got transferred, it seems he approved the hacked collection to
0x8e25ab3382ad5bde35a09e72d3b9a851a7cc8d00 (0x8e)
and then 0x8e transfer all NFT to:
0x43ca3957a188ee03da87d6bed138bcc8d5c3d7a0(0x43) ImageImage
0x43 takes all the offers and swapped the $ETH he gets to $ETH and goes to #changenow.

(hacker tries to confuse others but with money flow, you can clearly see where the $ETH goes) Image
Read 6 tweets
Nov 22, 2022
We find a smart money (or dark money?) address that always borrows >$10M USDC/ETH and deposits it to exchange every time before FTX-drainer dumps ETH.
Chances are he knows the activity of FTX-drainer and benefits from it:
🧵
🎯Target: 0xd275e5cb559d6dc236a5f8002a5f0b4c8e610701

⏳Time: 2022-11-21 UTC
14:11 0xd275 transferred 15,000 $ETH to the exchange
16:11 the FTX hacker began to transfer 15,000 $ETH to multiple addresses

Both happened to transfer the same amount.
⌛️2022-11-21
8:00 0xd275 began to transfer $USDC to the exchange. #Binance
9:16 Hacker began to sell $ETH to get $RenBTC.
Read 7 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us!

:(