Specter

Onchain Investigator | Peace ✌️
Specteranalyst.sol (.eth)

[Specter @SpecterAnalyst]

@zachxbt @jadoodoo_ Pumpra👀

[Specter @SpecterAnalyst]

@edgeX_exchange How about telling us who your market makers and insiders are?

A quick look at the token holder distribution. The top five wallets appear to be linked to the team and collectively control around 70% of the supply 👀

Maybe start there

[Specter @SpecterAnalyst]

@0xlaggin @zachxbt This particular clown was likely liquidated and now wants an investigation into why the token dumped and wiped out his position 🤣

[Specter @SpecterAnalyst]

A project on BNB Chain, @TesseraDao , has been exploited. The attacker minted 99M $TSR and dumped the tokens for $2.4M.

As a result, $TSR plunged 99%.

The attacker has already has deposited them into Tornado Cash.

Theft address:
0x2201037A1755eC48eC5f00Fea21A10A9E56f2Dd8

Meanwhile, the UXLINK exploiter is also actively depositing funds into Tornado Cash. So far, approximately $7.1M has been deposited.

Stay smart.

[Specter @SpecterAnalyst]

@ScalpWithIsrul @zachxbt @DriftProtocol @solana @tether Are you daft?
What exactly were you expecting from a project that suffered a loss of that magnitude? That the token would pump?
And that's not even considering the current state of the market.

[Specter @SpecterAnalyst]

Y'all are just full of shit.

What exactly were you expecting from a project that suffered a $285M exploit? The token was supposed to pump?

There are countless examples of projects suffering exploits for far less and still ending up shutting down. Yet you chose to hold a token after an incident of that magnitude.

Now you want Zachxbt to do what exactly? Call the team and ask them to pump the token? What is it that you expect him to investigate?

At some point, you need to accept responsibility for your own decisions instead of looking for someone else to blame.

Y'all should just let the name rest.

[Specter @SpecterAnalyst]

@zachxbt @FourChars__ @ScalpWithIsrul @DriftProtocol @solana @tether The entitlement from airdrop farmers and AI slop accounts never ceases to amaze me.

[Specter @SpecterAnalyst]

@De_secgen @TesseraDao Sleeping onchain 👀

[Specter @SpecterAnalyst]

A project on BNB Chain, @TesseraDao , has been exploited. The attacker minted 99M $TSR and dumped the tokens for $2.4M.

As a result, $TSR plunged 99%.

The attacker has already has deposited them into Tornado Cash.

Theft address:
0x2201037A1755eC48eC5f00Fea21A10A9E56f2Dd8

Meanwhile, the UXLINK exploiter is also actively depositing funds into Tornado Cash. So far, approximately $7.1M has been deposited.

Stay smart.

[Specter @SpecterAnalyst]

@its0xMike @FakeRosaParkXBT @JamesWynnReal People like him ended up useless

Just a routine way of life

[Specter @SpecterAnalyst]

A month after the KelpDAO incident, DPRK has successfully laundered the stolen funds, with just over $1M remaining.

The funds were laundered in two layers: first by bridging to Bitcoin and mixing through Wasabi mixer, and then by returning to Ethereum, withdrawing, and depositing into Tornado Cash.

The protocol that benefited the most from this incident is THORChain. Both laundering layers passed through THORChain, generating significant fees in the process.

The almighty THORChain has been down for two weeks since the hack, yet they couldn't halt operations when other protocols hacked

Stay smart.

[Specter @SpecterAnalyst]

@TedSha7 OTC

[Specter @SpecterAnalyst]

A month after the KelpDAO incident, DPRK has successfully laundered the stolen funds, with just over $1M remaining.

The funds were laundered in two layers: first by bridging to Bitcoin and mixing through Wasabi mixer, and then by returning to Ethereum, withdrawing, and depositing into Tornado Cash.

The protocol that benefited the most from this incident is THORChain. Both laundering layers passed through THORChain, generating significant fees in the process.

The almighty THORChain has been down for two weeks since the hack, yet they couldn't halt operations when other protocols hacked

Stay smart.

[Specter @SpecterAnalyst]

Update: All funds have now been moved from Ethereum to Bitcoin, with most routed through THORChain.

A total of 1,979 BTC is currently spread across multiple wallets, with 18.9 BTC already moved to wasabi wallet, coordinator @Kruwed .

DPRK used 725 + addresses to move funds from Ethereum to Bitcoin, across a total of 3,536 transactions.

A small portion was bridged to Tron, and about $3M was swapped into DAI.

Stay smart.

[Specter @SpecterAnalyst]

@Naeven_0 Yes two weeks now

[Specter @SpecterAnalyst]

@ChangeNOW_io @gravity_bridge Appreciated

[Specter @SpecterAnalyst]

With support from @ChangeNOW_io, I was able to freeze $91K of the @gravity_bridge stolen funds.

The attacker still holds the majority of the funds, which have yet to be moved.

Stay smart.

[Specter @SpecterAnalyst]

It appears the @gravity_bridge bridge contract key may have been compromised, resulting in the theft of $5.4M.

The attacker drained the following assets:

USDC: $4.3M
WETH: 274 ETH (~$553K)
USDT: $434K
$PAYG: $64K

Theft addresses:

0x7B582033061b96cC3F9421e73a749ED7C62da1F9
0x4d3ca32e687e871a58b78AcAc73bE59AC37C7A47

Stay smart.

[Specter @SpecterAnalyst]

@zachxbt @FabianoSolana @Rain__Protocol New week, New manipulation 😔

[Specter @SpecterAnalyst]

Withdraw and dispose of the wallet.

I generally recommend that people never use a wallet created or imported through a Telegram trading bot as their primary wallet, nor keep significant funds in one.

Most of these bots have anonymous founders or teams, and users are often taking on trust assumptions they don't fully understand. If the project shuts down, gets compromised, or turns malicious, users could be exposed to unnecessary risk.

We've already seen examples where users were affected after few weeks after magum shut down

[Specter @SpecterAnalyst]

With support from @ChangeNOW_io, I was able to freeze $91K of the @gravity_bridge stolen funds.

The attacker still holds the majority of the funds, which have yet to be moved.

Stay smart.

[Specter @SpecterAnalyst]

@launder0x 😂😂