Bounty Details

• POSTED BY ZION:

  • 0xDf8C63bF4FC48c861E66DC0A1477AeF34fc7A000

  • Aug-24-2023 - Etherscan Txn Hash

• VALUE:

  • 9009.75 ARKM

• DESCRIPTION:

  • The following token: 0xcc0d1b36d88fd8f5f26fd00e4e769e2dab4e3e07 and associated deployer + project is associated with intellectual property theft.

  • Can you find out the identities of the owners?

Onchain Findings

0x8c6e $LIGHT DEPLOYER

• 0x8C6e02Dfe803a9E1c94B130dfc4902551B701147

• On Jul-24-2023 at 02:17:23 PM +UTC, 3.99 ETH was deposited by 01121994.eth (0xCDe4) from Across Protocol to 0x8c6e

• 0x8C6e created the Lightning Bot ($LIGHT) token contract (0xCC0D1b) on Jul-24-2023 at 02:20:59 PM +UTC

$LIGHT Team Wallets

In the following 5 hours of deploying the Lightning Bot contract, 0x8C6e supplied liquidity on Uni-V2 with 90M $LIGHT and then funded the following wallets with $LIGHT:

• 0xa4B2 $LIGHT TEAM WALLET 1 received 1M $LIGHT

• 0x0955 $LIGHT TEAM WALLET 2 received 1M $LIGHT

• 0x3d7f $LIGHT TEAM WALLET 3 received 1M $LIGHT

• 0xE73f @MasonDefi received 2M $LIGHT

These wallets proceeded to wash trade $LIGHT for ETH and send the profits to 0x937E.

• Source: breadcrumbs.app/reports/8284

The wallet (01121994.eth) that first funded the $LIGHT DEPLOYER is connected to the Debank profile: MinhNguyen1994_, which is followed by a single wallet: 0xbbb8.

• Source: DeBank - MinhNguyen1994_

On DeBank, 0xbbb8 follows a similar profile: MinhNguyen1994, which belongs to 0xa63f, aka ENS: 0946868.eth.

• Source: DeBank - MinhNguyen1994

It is likely that all three of these wallets (0xbbb8, 0xCDe4, 0xa63f) are owned by the same user who created separate DeBank profiles to monitor and follow their cross-chain activity. Over the last 18 months, 0xa63f has received funds from six wallets associated with $LIGHT team wallets across six chains. This further validates that the username MinhNguyen1994 is the primary user behind the $LIGHT team wallets.

• Source: Arkham Intel Custom Entity - $LIGHT DEV

Additionally, the $LIGHT team wallets are highly correlated to 4 deployer wallets of the following projects:

1. 0x0b41 ordindev.eth

• Security AI ($SecurAI) - Twitter: @BlockchainWars1

• Ordinarium ($ORDIN) - Twitter: N/A

• Zelda Token ($ZELDA) - Twitter: N/A

• Joga Bonito ($Joga) - Reference to $JOGA from @TweetNOfficial

1. 0x9FA TweetN BSC Deployer

• First funded by: 0x0b41 ordindev.eth

• TweetN BSC ($TweetN) - Linktree: @tweetn

1. 0x2265 TweetN ETH Deployer

• TweetN ETH ($TweetN) - Twitter: @TweetNOfficial

1. 0x0351 RAT 2.0 DEPLOYER

• RAT 2.0 ($RAT2.0) - Twitter: @RAT20_ETH

Social Media Findings

Twitter: @LightningBotERC

Telegram Forum: t.me/LightningBotPortal

The wallets with the most onchain interactions involving $LIGHT contracts lead to the primary wallet, 0xE73f. On Opensea, their profile is "MinnieTrade" and is connected to the Twitter account: @MasonDefi => Twitter ID: 1495496101981523972.

1994.eth.zk

@MasonDefi

I'm claiming testnet tokens for @zksync era, the ultimate zkEVM!

My Address: 0xe73f3c90f9f0719d1bd65dfebdf9d1fc97c23cd8

Learn more:

zksync.io

zkSync — Accelerating the mass adoption of crypto for personal sovereignty.

zkSync is a ZK-rollup that represents the end-game for scaling Ethereum - one that scales its technology and values without degrading security or decentralization.

1

3:18 PM • Mar 16, 2023

The account name for @MasonDefi was '01121994.eth.zk' at the beginning of September, but it was recently changed to '1994.eth.zk'. At this time (9/16/23), the NFT PFP 'Milady 3629' owned by @MasonDefi was purchased by 01121994.eth on Aug 28th and was sent to 0xE73f on Sep 11th.

• Source: Opensea - Milady 3629

Based on an archive from July 2022, we know that @MasonDefi also had the username '0946868.eth', which connects the wallet to the DeBank Profile: MinhNguyen1994.

• Source: https://web.archive.org/web/20220721074259/https://twitter.com/MasonDefi/status/1550023375426359296

Summary of Findings

Onchain evidence indicates that the user behind @MasonDefi is likely a person named Minh Nguyen, who was born in 1994. Identical usernames to those found on DeBank have previously been suspended on Twitter (@minhnguyen1994) and Reddit (@minhnguyen1994). This person is responsible for deploying the $LIGHT token and managing the onchain funds and contracts. The primary wallets of the $LIGHT Dev are connected to the deployer wallets of 6+ meme coins that are likely scams or used for wash trading.

1. Debank profile: MinhNguyen1994_

• ENS - 01121994.eth (0xCDe4)

• ZKNS Domain - 01121994.zk (0xCDe4)

• Opensea Profile: 01121994.eth

  

1. DeBank Profile: MinhNguyen1994

• ENS: 0946868.eth (0xa63f)

• Twitter: @MasonDefi

  

• Opensea Profile: MinnieTrade (0xE73f)

1. Other Wallets of @MasonDefi (links redirect to Arkham Profiles)

   1. 0x8c6e $LIGHT DEPLOYER

   2. 0xB529 OS:MasonNFTStore

   3. 0x937E $LIGHT DEV WALLET 1

   4. 0x0b41 ordindev.eth

2. Arkham Intel Custom Entity Profile

   1. $LIGHT DEV (31 wallets)

   2. $LIGHT CEX Wallets (4 wallets)