AnubisDAO 러그 풀러 용의자의 신원이 밝혀졌습니다

Two years ago, AnubisDAO was rug-pulled for about $60 million worth of Ethereum (ETH) and funds were never recovered. However, the blockchain never forgets and block analysts have been keeping an eye on Anubis exploiter wallets.

2년 전, AnubisDAO는 약 6천만 달러 상당의 이더리움(ETH)을 인수했으며 자금은 결코 회수되지 않았습니다. 그러나 블록체인은 결코 잊지 않고 있으며 블록 분석가들은 Anubis 익스플로잇 지갑을 주시하고 있습니다.

New on-chain analysis by ZachXBT may have revealed who the scammers are.

ZachXBT의 새로운 온체인 분석을 통해 사기꾼이 누구인지 밝혀낼 수 있습니다.

Deeper analysis reveals possible identity of exploiters

An analysis done by ZachXBT, an on-chain analyst, shows that the funds ended up in two exchange deposit addresses.

온체인 분석가인 ZachXBT가 수행한 분석에 따르면 자금은 두 개의 거래소 예금 주소로 끝났습니다.

These addresses are 0x51da686c7a2f973ad11fafed6ce9a3ffc020349f, herein marked as (1) and 0x253d7ba533b7d13720fb5ec5a7d1e64d4ff3f58b, herein labeled as (2).

1/ Here is my analysis of the $60M Anubis DAO rug pull.

I noticed a clear trend in 2023 of funds being withdrawn from Tornado Cash and bridged to Polygon before consolidating to two exchange accounts. pic.twitter.com/UX0uHSG9TN
— ZachXBT (@zachxbt) July 20, 2023
1/ 6천만 달러 규모의 Anubis DAO 러그 풀에 대한 분석은 다음과 같습니다. 저는 2023년에 자금이 Tornado Cash에서 인출되어 Polygon으로 연결되고 두 개의 거래소 계정으로 통합되는 분명한 추세를 발견했습니다. pic.twitter.com/UX0uHSG9TN— ZachXBT(@zachxbt) 2023년 7월 20일

ZachXBT was able to trace a transaction of 95 ETH sent to (1) from bsl.eth, an address owned by Beerus. Up until now, the identity of the DAO exploiters had remained unknown. Upon further investigation, wallet (1) belongs to Ersan, a friend of Beerus.

While Beerus’ Twitter account is mainly dormant, having posted last in October 2021, Ersan is quite active, only recently posting on July 20, 2023.

Beerus의 트위터 계정은 2021년 10월에 마지막으로 게시된 등 주로 휴면 상태인 반면, Ersan은 2023년 7월 20일에야 최근에 게시하는 등 꽤 활발하게 활동하고 있습니다.

You might also like: Attacker behind AnubisDAO rug pull transfers another $5.9m to Tornado Cash

AnubisDAO rug pull suspects laid low for 2 years

In October 2021, following the massive Dogecoin pump, AnubisDAO raised 13,556 ETH from crypto investors. However, just 20 hours after receiving the funds, the ETH was sent to different addresses in a rug pull.

The result was an immediate loss for investors.

그 결과 투자자들은 즉각적인 손실을 입었습니다.

Two years later, block analysts noticed a trend of the funds (13,556 ETH) getting bridged to Polygon before getting sent to two exchange deposit addresses. These funds were moved through Tornado Cash, a cryptocurrency mixer that completely anonymizes transactions.

2년 후, 블록 분석가들은 자금(13,556 ETH)이 두 개의 거래소 예금 주소로 전송되기 전에 Polygon으로 연결되는 경향을 발견했습니다. 이 자금은 거래를 완전히 익명화하는 암호화폐 믹서인 Tornado Cash를 통해 이동되었습니다.

As it turned out, the rug pullers didn’t move funds for over two years only for Peckshield, a blockchain security firm, to be among the first on-chain analytics platforms to pick out funds’ movements.

It seems the rugged @AnubisDAO funds are being washed via @TornadoCash https://t.co/DPoZ1ifSNX https://t.co/LvDSUsL6tS pic.twitter.com/mKfSdTE6D9
— PeckShieldAlert (@PeckShieldAlert) July 16, 2023

Hackers may be involved in other online scams

해커가 다른 온라인 사기에 연루되었을 수도 있습니다.

Further deep-dive reveals that Ersan is a notorious exploiter who “works with multiple ‘suppliers’ for a scam website known as CDGORoll.”

Warren, another blockchain analyst, links Ersan to high-level and coordinated online casino scams involving shady payment processors and x-rated website hosting services.

Great finds, Zach.

Ersan, the owner of the address you mentioned in the 3rd tweet, works with multiple "suppliers" for a scam website known as CSGORoll. The money is laundered through there into some very odd places. This site is a hub for illegal funds. https://t.co/cdhA8V5WIt
— Warren (@variancewarren) July 20, 2023
세 번째 트윗에서 언급한 주소의 소유자인 Zach.Ersan은 CSGORoll이라는 사기 웹사이트를 위해 여러 "공급업체"와 협력하고 있습니다. 돈은 그곳을 통해 매우 이상한 곳으로 세탁됩니다. 본 사이트는 불법자금의 중심지입니다. https://t.co/cdhA8V5WIt— 워렌(@variancewarren) 2023년 7월 20일

This breakdown comes weeks after PolyNetwork was hacked for millions of dollars.

Given the size and patience of the AnubisDAO exploiters, investors may have to watch as their investment disappears into the Tornado Cash black hole.

더 읽어보기: PolyNetwork가 해킹된 것으로 추정되며 대규모 거래가 감지되었습니다.