Acquiring intelligence…
The flashiest address in the room is never the boss.
A contract ending in …deadbeef has been draining approvals for a week.
Vanity addresses are expensive to grind. Somebody paid for that suffix.
It was deployed through a relayer and a CREATE2 factory to hide its creator.
Find the wallet that actually ordered it.
Identify the wallet that paid for the deployment of the …deadbeef contract.
The wallet you see deploying is a relayer. Relayers work for whoever pays.
Every relayed task has a number. Match the task to the fee.
The vanity wallet is a decoy. Real operators don't sign with their logo.
| Tx | Time (UTC) | From | To | Value | Method | Block · Pos | |
|---|---|---|---|---|---|---|---|
| 01 | 03:13:58 | 0.0091 ETH | payFee(task 7779) | 23,473,167pos 24 | |||
| 02 | 03:14:05 | — | deploy(task 7779) | 23,473,168pos 76 | |||
| 03 | 03:14:31 | 0.0114 ETH | payFee(task 7780) | 23,473,170pos 27 | |||
| 04 | 03:14:40 | 0.0183 ETH | payFee(task 7781) | 23,473,171pos 95 | |||
| 05 | 03:14:44 | — | deploy(task 7780) | 23,473,171pos 98 | |||
| 06 | 03:14:52 | — | deploy(task 7781) ⇒ creates 0x05d0…beef | 23,473,172pos 99 | |||
| 07 | 03:15:20 | 0.0077 ETH | payFee(task 7782) | 23,473,174pos 71 | |||
| 08 | 03:15:29 | — | deploy(task 7782) | 23,473,175pos 25 | |||
| 09 | 03:22:10 | 0.5 ETH | fund | 23,473,208pos 79 | |||
| 10 | 04:02:33 | 12,400 USDC | transferFromvia 0x05d0…beef | 23,473,410pos 29 |
Evidence from the season's simulated network. Times in UTC.