ABCDEFGHIJKLMNOPQRSTUVWXYZ
1
onchain-hunter.eth
2
3
4
Reasoning
5
6
7
This report details how Sybil activity was categorized based on the addresses involved in farming airdrop projects.
Similar activation dates in different EVM chains. Similar first native token transfer to each account as the funding transaction
Similar transaction volumes Similar metrics on the overall usage of the LayerZero protocol was added afterwards for post-verification purposes.This data helped to confirm that the wallets not only clustered by mainnet activity but also exhibited almost identical activity on LayerZero.
Example of Cluster: 200 LZ users, funded by Kucoin in BSC in 24-hours period and they also funded by OKX in 24-hours period in ETH chain and they also made their first initial transaction in LayerZero in 24-hour period of time + have similar activity on LayerZero.
8
"Detailed Methodology & Walkthrough
9
4,800,000 addresses were collected from public dune- https://dune.com/springzhang/layerzero-users-ranking-for-potential-airdrop
Using different critera sorting of this data was found N wallets with similar metrics in LayerZero Using Moralis, wallet info was retrieved, such as: wallet activation date, dates of interacting with protocols, volume of transactions interacting with these protocols.
These wallets was clustered by identical difference in time between protocols, similar wallet activation date, similar LayerZero metrics.
Clusters of minimum 20 addresses were formed based on these rules. Then we defined all addresses that were already found by L0 and Nansen teams - we remain them and seperated - to show that was found not full cluster. Detailed info on columns of charts: address -wallet address which is considered as part of sybil cluster chain_tx_hash = Hash of first transaction in certain EVM chain chain_value= amount of tokens of first transaction in certain EVM chain chain_first_ts_contract = first funding wallet from whome the funds came chain_date= block time of first transaction in certain EVM chain chain_last_date = block time of last transaction in certain EVM chain
10
Reward Address - 0x8669DAA380F25D08C62667dC82E74D35489Ac06B
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
 0xsdsdasd
27
 0xsdsdasd0xsdsdasd
28
 0xsdsdasd
29
 0xsdsdasd
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100