We looked into @0xMarko77's 20 SOL lost on @Higgspad
It's not a drainer. He paid twice for one launch, the launch went out with no dev buy, and the SOL is still in Higgspad's wallet.
He's not the only one π§΅
Thanks @skrootimburg for flagging it
Robinhood Chain tokens are live on Iris.
Paste any CA and see in seconds:
- Who funded the dev, and if they already sold
- Bundled wallets sniping the launch
- Insiders and linked wallet clusters
- Where the money went, through bridges and swaps
Free, no account -> https://t.co/9HLJgolm8v
Iris is now on Telegram:
- Paste any token, see who funded the dev
- Bundles and Proxima launches flagged before you ape
- Free, in your group or in DMs, already in 18 groups
Add it -> https://t.co/Oj7kOggEPd
@1ayberkk Sorry man. We can trace the drainer for free: drop the drained wallet or paste it on https://t.co/PQrPo2Smgt to see where the SOL went, and who funded the drainer.
Careful with anyone in the replies offering "solutions": real tracers never ask for fees or keys upfront.
This is what we built Iris for. Thanks @ashxonchain for the trace.
If anyone affected needs help following the rest, through Wormhole or an exchange, our DMs are open. Free.
I tracked the stolen funds from realist's two wallets with @iris_intel_app
Total $753K is stolen from two wallets, $718K USDC that stolen was sent indirectly to a wallet drainer that already drained 53,279 victim wallets for over $2.7M funds that shows as @hitbtc hot wallet.
Iris just submitted to @colosseum
- Paste any token: see who funded the dev and if the launch was bundled, before you ape
- Got drained? Follow your funds through mixers, bridges and swaps, wallet by wallet
- Free, no account, results in seconds
-> https://t.co/PQrPo2ROqV
7 free tools to see who's really behind a memecoin
paste the CA before you buy. takes 2 minutes
1.) iris β who funded the dev, bundles, Proxima launches. follows the money even through mixers and bridges. 10 free scans, no account
https://t.co/VXBenMotRx
2.) rugcheck β open the insiders tab, not just the score. that's who's sitting on the supply
3.) bubblemaps β are the top holders connected to each other
4.) https://t.co/6CNGbCh0gr β bundle risk: wallets that bought in sync and share a funder
5.) gmgn β the dev's past tokens and how they ended
6.) solscan β "funded by" on the dev wallet. one click back to the source
7.) dexscreener β top traders tab. who's already up big and can dump on you
none of them need your wallet. if a "checker" asks you to connect or sign, close it
bookmark this
@zettelkastten Thanks for the feature!
One tip: if a token was made with Proxima, the dev wallet usually looks clean.
Iris traces its funding back through the stake-account bounce to the real funder. Free here: https://t.co/PQrPo2ROqV
Great work. Shielded pools didn't fail here, the pattern did: exact lot sizes and short round-trips.
Iris runs the same amount-and-timing matching on Tornado Cash, Railgun and Solana privacy pools, for stolen funds only.
How it works: https://t.co/gZsIP7PjwD
Ledger theft, day two. Since yesterday the thief has pushed ether through Tornado Cash three times, and each time on into Zcash's shielded pool. We followed every lot out the far side. Here is how, step by step.
1. THE SAME BUILD, THREE TIMES
An ether wallet pays a fresh splitter. The splitter pays four fresh wallets. The four drop it into Tornado Cash's 100, 10 and 1 ETH pools. Minutes, every time.
Run 1, yesterday 15:17: 1,254 ETH. Run 2, today 09:42: 1,291 ETH. Run 3, today 11:56: 450 ETH from 0xfa4EaBB840A33C156E600311433AE261CBfCb0e2, in the pools by 12:15.
2. OUT OF TORNADO CASH
The mixer breaks the link between a deposit and a withdrawal. We do not need the link. Our tooling fingerprints the withdrawal transactions themselves: how each one is constructed, who constructs it, and when.
Yesterday's 65 withdrawals (1,084 ETH) and today's 96 (1,726 ETH) all carry the same signature. The six other withdrawals from those pools in today's windows do not. Run 3 came out from 12:18 into 0x0d697aa182801566d87adc86e68e95fd3b2f5f82 (213 ETH) and 0x676b16cc18542f37d202a1a79ac05463395496a4 (122 ETH), and 195 ETH of it was inside a cross-chain swap service by 12:38. Forty-two minutes, end to end.
3. INTO ZCASH, AND OUT AGAIN
The swap service turns the ether into shielded ZEC, where sender, amount and recipient vanish. But the service's own shielding of each lot is public, and from it we derive a value signature for that lot's exit, then scan every transparent exit from the pool. 108 of 108 exits across both days match their lot to the zatoshi. Not one other exit from the pool does.
First lot today: in at 10:18:18, out at 11:06:16 in block 3512847 (8d26a9b095d4d28373527f7a6eb81a3be7f906d1e2190960c0512ff64f369418 and 738c6d1261e79766e4dd16bdbd38dced91b8e3a86ce41dcda83eda1f19208fbf), straight into a ZEC to USDC order.
Today so far: 20 lots ordered (2,379 ZEC, $2.9m), 14 out, 5 inside the pool, 1 still settling. Every exit feeds a ZEC to USDC order paying two wallets born at 11:11, 22 of the 28 paid by 12:43:
0x816D5Ee17DB1495d1409F135b98FF3edc5F3cDf8: 940,561 USDC
0xBA736A4b616e79867B6d586293966b552883f3F3: 852,258 USDC
1.79m USDC, unspent. @Circle can freeze it.
(1/2) π§΅β€΅οΈ