Boost Protocol's Vampire - 2

Today started off pretty ordinary for me. After having lunch, I opened boost.xyz to check out today’s boosts. I found two boosts offering nearly 100% rewards, and both had about 150 rewards left in the pool. Under normal circumstances, you wouldn’t expect these boosts to be completed in seconds. But as soon as I opened the first boost, I saw that all the rewards had been claimed. Of course, my first thought was that someone was using bots. When I checked the list of claimers, my suspicion was confirmed because over 100 people had claimed the rewards at almost the exact same time. I’ll present the evidence shortly, but to summarize, billding.eth (0xdf09b44381484da2cce09f97094f897289a3cd03) is completing boosts on boost.xyz within seconds by using bots across at least 200 addresses.

Step 1: Reviewing Who Completed the Boost

In this step, I decided to randomly examine the addresses of users who completed the boost. The first address I checked was 0xbf05b68560606f7bad37a99ec82e17248b7f03ed, one of the last to claim the reward.

When I reviewed the address on Debank, I wasn’t surprised by the result. The wallet holds just $15, has no DeFi activity, and only completes boosts. Since I couldn’t find any associated Twitter or Lens profiles for this address, I decided to take it a step further and investigate related addresses. When I looked at recent transactions, two addresses caught my attention. I noticed that after the reward was claimed, it was sent to the address 0x45947e587e3ee11759d508d87c330e2024b3e1f2, and shortly after, some $ETH was sent from the address 0xb8d6fba8853a1bef1d564b69e9ba2eb58a565241.

When I examined the transaction where the reward was sent to the e1f2-ending address, everything became clear. The owner of these addresses is completing boosts using at least 190 addresses and then sending all the rewards to the address 0x45947e587e3ee11759d508d87c330e2024b3e1f2 via a smart contract. This address converts the rewards into $ETH and then redistributes the $ETH back to the original addresses using the same contract.

The Connection to billding.eth

The contract on Base network (0xb8d6fba8853a1bef1d564b69e9ba2eb58a565241) that manages the reward distribution was created by the address 0x45947e587e3ee11759d508d87c330e2024b3e1f2, which is also the address redistributing the rewards after converting them into $ETH. The first address to fund the e1f2-ending address on Base network was 0x648377Bc0c29bfe4eB1E2884c3A247727a602c10. This address was funded on Ethereum by 0x08a103ca7E5f92d0f767C6c4EaCFfAd251C3CF91, and finally, the cf91-ending address was funded on Ethereum by none other than billding.eth (0xdf09b44381484da2cce09f97094f897289a3cd03).

Summary

Based on the evidence presented, I request that you blacklist the addresses involved in the ETH distribution transaction (0x979897182d1fa877b30d62e55eccc084e4fa46e944e479b28e6f48a91ed87981). I am listing the addresses in this transaction to serve as a resource for future sybil hunters. If you randomly select and investigate any of these addresses, you’ll see that they’re all empty wallets with no activity beyond completing boosts. If you have any questions, feel free to reach out to me on Discord or Twitter (@avocato31).

o7

0xb8d6fba8853a1bef1d564b69e9ba2eb58a565241 0x68c7f446a273ee7d1b52d8b0b68797f3516c8512 0x7d5a2f70d3b15cd3f99ce58c0fd66f509e2ea88d 0xd758873ed934bb0c04941f67f00cb0bd4b3e28a9 0x319cfbe5b58f6af4f55c2c217e669d9d6083a470 0x2048e9dfa54cbf13eb8d62477ca69924129deddb 0xf5bbfd0ab3bb0c13e2df015882d71fbad4ac061d 0xeb0f9ba36869ca5011b8b0ab90f8227b03de5e75 0x3dd24cbfe6e5f24080439d238f7fb31a7285b030 0xfefcb179c9a0c7bb1d966f93674713d9ba2212a9 0x2c2dcdaa3c89127e25de8ed3ce72fdb9f70edff9 0xb725ae5fa4e5ce2a6098d8af9655dee848fb78ad 0xa78e3760980fa794b10e92c3f42b30c4841bfe74 0x225d7dff8f67c64b1de1217ab0fc3bf2045c2321 0xb4f127dbc4be561f05ee7a4fb65aae9945c1ec19 0x4e1c72b908406ab4efbadc4796d11293c8dc3f40 0x03e31db9119970a89336dc798cc4577610b455b5 0x2399b30b68e69a6a06ea97cb1c3c051f3a6aa85b 0xb7962ef7989d184e110b05483193e2f3826bab7d 0x9db3ef1d878864cb3278d983960d65125106d3cd 0x98cebde9dc6b08155321b3925b8f8ac5e5a14914 0x71d93348eade54f934948c5bcc3e87f8f077948e 0xa9067273c965a912cdf442a048ff3ae83db06219 0xd01249a6b9523552ea2cb493bc222a9beff14ad3 0x135ec4634f6eebb8a6f4b1afb1ad205f5fae6d9a 0xbf21e4bb30354abc97c84ad48ef8286d1611385f 0x9472c5a17c547ac42d163a6cb8b07c7ba04f0db4 0xff82559db38f6dcea6b6be63f8367da470976124 0xcb65c80490bcf234c8d3c43a6edd6851625c4934 0xd2606f26d610544344329a060a630f1e507c0f06 0xa24efc088bf394ce3ad2d7c096de01f24f37cfbb 0xa61356cf4144fe1b80ad6caff07d01437c07fe11 0xf324a87dd1ac2c3d95c329a24b99dbd98afde342 0xec8ea06706e0d049b0d65d5414a120b7ada111c5 0xe150e2e8314aa7c19f58dd47dbd5dcdf1fe2095a 0xb4956921d09a658aa40bd14df73c5ac6a08853b1 0x35a6c767e395b66ce38683ba905643a63c895a12 0x45463e8f1c633a27802a0fd81d6745f87547f2ff 0x54e8543806f55f87a91806884f23a8be52f464cf 0x7326efbca1c9a394433a138e4d4513c34ea7fc8a 0xe20e78baf8f90d3e4281c44ef7bfcc548172f8ac 0x57ff43f0713027093bbc712efb81d51efadd3874 0xc1c0fbd4a186cc721109af1e044c4aa7ede2b0e3 0xf52fd954e1bdb33c04aaf2b8cbcb00079e4d20fa 0x08bf51d7a335c7b2ed64ecca0245c90ee760a392 0xc57324838431109772be0b28e391535debbf38eb 0xa60503a73a745819e9f5f533512534b844d61afc 0x718cf8bbbd0c26211e2b29e5aa1003b53a9850dd 0x06aeb8b4e9a1d494b40de7a33566cc98b1e7ca85 0x03429b3484f7796424f14bb1f8f055c752902a12 0x3f3f4b3710169fdcb250295fa70df142c99fa894 0x7908010a63366232a9eaabb98ea29530dda48375 0xc161b3db4c885d075fed70036fb35235b5e9bd96 0x5eda7a063c615e627f8762d5be1d8cbc49c9d34c 0x0d31c51e21d0138f3a74d1d1dcbb1032b789de88 0xab70bcc6581c272c0747bd260696e90c151352b1 0xbd2fdec416dc7133c46a930e5bed319fc8de0829 0xa00e839d6a9af2bbeb4394e54c2af063b22ec288 0x8098ede1b7c0a7e54d8acdb1c91e0660e185eb00 0x493d937b146b3adf059a4ee798f70357ee940092 0x3f203b67ea76dcd31ff0c89128037d3428bac30b 0xb775157897f41eb5824b3c3d62cb733ff3488cc9 0xc269ac7b2f1a5808084effb0fe34a65da83ffe87 0x79445510e0d90bd980c910b99ead582327b482e5 0x26d51fc203c07a2984e2db7028a66d2a94ea9a89 0xd4be080415fea8e6c0789ea5a71ceac40a617f0e 0x68a2f2bb66200d30bf2d4472c4a697450d8c56bd 0xeece2365e0df60dd0782174e93f8f6916a1868f3 0x9243db13fa5c5232fafad41e0af7bcd829a625ea 0xa4a53400b62527bef0b8b1dce68be79a843aefab 0x48bda6ad26ffae3f6f09fcbf82be1531ba5d88a2 0xee775c3d62f52f5e850e49f4d59b3682ff2921bd 0x17d7d3c8ac19e9abc3931f2a08fc369f867d23ad 0xb6ff961f296538c1d3dcfc767b4f8876cf10c648 0xeb3dffb3df40a9e37d5fdc93831f45db22706802 0xcc049aa9a7ea801f60ce31c95bd88e91d24d50a0 0x472951e17872511a58e16f9c4f6af518b2bd97b6 0x31a1d8f195d898dcc48a186f377e688e847c4e28 0x6482e643f25981bb2695ac4d2b4eda1a7244ae16 0x3658b27abf2ba2b1dbce4c98dc00646172f384c5 0xbe68d46d1a95a1fbd2800b418582624b640e2823 0xb85963ad40d56be6896e5f3780b37c347cecce74 0x8b59aeeba069c9d8e6b1ca0f22b94193b8cf7ad0 0x02667d902a506d9e22b859c0caae9b40a6926cf2 0x9ee52da239ded9185666c465b34c25ab30446c1d 0x5132a357111bd0dd70153c84adcd1b984c5abbf3 0x04a260b9e22a26e3b6d03e64828477a1d34352e3 0xe9d9a043fd2330cb5d24589f15bac1d96c92cf67 0x29ef47b7be79e2376f8cbbf0fca6b48de61bb835 0x012cde12abc92fab1413fa63b9ab0b029c570851 0x9f85f13f40fbe64b1461a00b4a9413afc75ca057 0xf3dfc54bec5a93c111151b6f58fd0a0c88f09791 0x51f8f7682bc09742851271b8f9de43cbb7fb645c 0xf3b4c8cf33f5b0b967820faee01e7a562f61916d 0x22a14a22e4c22ac4f6ac1f4ebdb15638efed0390 0xaedd765f03306fbe9dcc7b6544f56e81582b3c3d 0xba6bd289cbfeb14c14ae4bdcf1e6558771061ca6 0xba01faf93b672a5ad076ef817202069cb2f092b5 0x1e56faf7e40383e453ac03757b2cbbe18281fa69 0xf13bca9514717e46a4dcd54188be79253f031ae0 0x9600850b21c4fcbac8032df463640db0af4737eb 0xc095e46b82088a7fdf706bd090101e9f5b089fa2 0x85bc7e753698fdad7856bc239d037d75221bec1d 0xa88b29307e07189dcaf46280589bca157bc1fcb1 0xea18a4603c25b0ced537fe8ce0b5d81ba364a42d 0x0c98b5331edba684fcfc7cad810f824a250cdc2a 0x4dd8267f5a6abc3c5608303c1f66197117bf1d41 0x13fcb0137b3ed23d98a8dfdfe21fca658b78e129 0x72886c201fe248794967220f6611391087e87503 0xf998e843a4c26e828a68ac78893b7e37c7de2568 0x924992285969731bb7b217c99f403c75b19e8033 0x0f2ac6141f1732bb82376f0995feb7dc060abc2a 0x166af4815474bc7a6783cdbea44c03f9f6ceec95 0x7cf718f19c739601c7a1151720fd0b0bac61ccf3 0x598961e972805c8ecc187713dc9de63556dfbf1f 0x77093310215e8e1c037b5c3568699c989b817629 0x114f4015d43d33a88a183c257e6f32c07a739e8b 0xe7a61c54d4e32b9daab32d55f6fe64a5e7914896 0x992b658a066caee6083234446d017615c843df77 0x3f113805ea92d8c0ef985fbb4e4d7b8c280bc802 0x83459b825de8f96e7d7bb5bf7c19664d8e255794 0x87be0b33b3d37702671978b09e3cdc668b3edb0c 0xdcf2df7a8a01535276cc7100472079206a757974 0xcac66477631a9cf39af389fc424ab672107302f7 0xab511311d4a739bdddfc0ef48bad343fa1535710 0xca5e713064ca961367c385c6a202845239869f37 0xf5433c376aadb24487c546820b372eed7b379425 0xfe6687f36de92062808d8b8cebb047ddcbc90a44 0xecc33e16cc7385aae6f84f8392ed19c547c9eceb 0xd97d57a89b731f4bd82d279fffcdceca4058dd28 0x54080ae1511931388ea14678492ed90e72c7c55c 0x42c052cb0c126475bcf6073f61d51ef707c9a2e2 0x3cb3d6d7ccdfb910b42f6687bf12ab6c9de8e3bf 0x55484309ce44d301a88bab0572e3e24792f07ad2 0x471ee27b59d10d530ac61db7bcf08f178952b79e 0x922f5a0c31ea13cb1c6718398baa4680c2866b33 0xa4a7b5ae6f8cec381d1737d12af5f8f0576b639e 0x8c35682e2861d113894cb0230ece3e83838868ec 0xba643af34d581f63b985e687095bf257a9f019e7 0x4d3ff7946f1d96d41abbbcef82bb547afe6b3944 0x924ff40474ce2c88e3d04197ea649bd4596801bb 0x2032a0c097428365ff1a712f5b8d13c3b31ec3f4 0xbf05b68560606f7bad37a99ec82e17248b7f03ed 0x46fed777aca75a1724f0faf74fc8350225d5ec9c 0xc182c44e229db76af7e97a5a096d5b017c77985c 0xb8e20101a1b41c4f9f35e3c77e595c3be138a6cd 0xa997f10d7d7501319b8c11108ec815b50bb4a61d 0xbd0fa4161da9fef69541aa0543877f7fbb288270 0xb0c982501db8e60485eef4ae724304396c51fd50 0x24f94bb2df690715c5f6cccec25ac2a9f35f62a8 0xfd4e71e6e1c86c3ef1f312984784a48af30d7ad7 0x9de4e8cd4fdcd23b828254bf0b5e4af91873bdea 0x5acad866cc5a497f91ee613ffa383efb86479dc5 0x8d7e8f07f142bf011710c7e0470a6e1184f8e8f6 0xfca584c3a2d4fcded6dae1a7c3d8421ae5aa0aa5 0x16a56367fc91431f5069ebe1f22504de0f3d2999 0xef8e61fae98d3d2ead7aba110fec1c2f9d75dc32 0x61efaae3c2b61673af26aadd48a15d3316ad87e8 0x1949ffcbcfd47e3e49ab7a4ae75b3f49a9adf2ad 0x32bd41ada58b4d54cfe0da1d83cdf33e43258464 0x6b03727156d4d238f083840d8cdf9a49c918bdd3 0xe1fb4a8b0df833f2676eb42ecc5c4d81a0e0c6ba 0xb0bbfb0bc1207435f78d5f69cec782e1cd6135f9 0x06c53eaa847a924aaf742cfcd212f7fd7ae5dc48 0xb60e81ebea6646ea3a88024305811f9e3c846dbb 0xf9ce811ee804e63d04f5d4d08db02aa018932e3f 0x00ddf78a97e757046564fb6c4dea2fa1f5957fe5 0x05b3b0214ab10a8d7a3d4f4ea7bad7b065b04ed9 0x6919498182a8b4bdf5d23f2944a662f7975dc9c1 0xa95e2e02a6b6667b79f67d2bd2bc0b0ca6787cb8 0xcf7e383dbf29df3da7598a7518050dca3024158b 0xf4e9f52afb1bd75cf7243975946b119de52ac5cb 0x5ee7ad216259a1d5811a4c7394c1773c9cde79c7 0x26b4bcd16c76d48b802e30aaf21e252b699029f7 0xdad45be0f5956f5af8444e99c4ceb5db0019cd62 0x808ec7cbd88ff537e8d567273d79cc248a973930 0x3b5a0d70d8998ffbdcf4806a3654b6e47ac23dd7 0x0013d62c28eac41a6869681bd6d576fc8b5e8984 0x230896506da739398c60ae3ddd64efd92e9bfa0c 0x9a957becb7e1f7a10c67c71a2ba2d96be6fff54b 0x096a506dd0cc1adc94a8b65a1f2454be9a2c38eb 0xa4e0e50d050393867520d6b1a796953a31e831ca 0xef58dd440d3e7797104262ba5ddc67f5b4dd1d5b 0x22e8af50490101b238bbd99d67ea1eeb6dc9ca7d 0xcecc3fe6dddfb413af7f752459262bdb4fe15456 0x5a9cb3c4e4d441ecf1a04389f5c5166359e16910 0x6a0dcc8db1d1a2375cd1103ddb399309ce3fbedf 0xc9028e07109545009cc77db3074d490a43ecf869 0x20bfc7b8f62b9e697ad34e92a1f69741e99dc81e 0x1f3381977e0a279b3b81fcb9b6567e76e75af66b 0x87bc716a597e265ed53b833be834d05371ad5e0d 0x15d5da2b0e1aef2796ec8d0f0a74373b214a0351 0xf79a493fd720b4c0f84755c173598681863948ed 0xdadf65dcc529614487c49332224c3f8ea5293372 0xe7881c998b778ab40dc3178ecc5857c386c0978b 0x294cc7d834382c1629f3230de13759e4fc4fc716 0x6d91a61c7cf4bed8e9b211f03690d47cc9578367 0xa046b345ab2e402ff32c39d4160059444c038f10 0xb0305b8331a80421b329238347c6c21408cffaae 0xb00b14fe55e2bfbd97d1a31cd67ce47636eb9452 0x257f5c4b5ecebc98237548b9d6d7e74ea00c5b14