tf0rs / forta-address-poisoning-agent Goto Github PK
View Code? Open in Web Editor NEWDetecting address poisoning transactions on EVM chains
License: Other
Detecting address poisoning transactions on EVM chains
License: Other
Hi tf0rs,
I have been watching the performance for this bot for the month of April and it looks like it has a high number "tx_drops" for BSC chain, this issue might be also extending to the rest of the chains. I would appreciate if you can check it out, and consider sharding as a potential solution to mitigate this.
Pls see https://etherscan.io/tx/0x4e23ab22ae7dbe87e5d2b36e66845908e8e88700ec8ee1a782717efa352cbcfe
Trevor, can we pull this into scope?
Hi trevor,
I am still seeing issues for this bot. Let me describe you what I have observed:
Tested locally and got no alerts as well.
Hi Trevor,
The address poisoner label seems to be flagging addresses that indeed are executing a revoke scam.
e.g:
https://explorer.forta.network/alert/0x0cb5ed9bb3ba81b877ed01c5cce54563b251adba0af9342dcda166c0f40be2e5
https://bscscan.com/txs?a=0x1b162ce9a63eb81ee1ebae82ed1497092c50208a
e.g2:
https://explorer.forta.network/alert/0x18c5f777b4ec3fc58d244a2acc427ed2b347acdb4158a4a482093a57020553da
https://bscscan.com/address/0xe8e0960da069c336852246a5bedf18ad05ea25e7
It would be great if the bot could be tweaked so when these types of activities happen, the address could be categorized with another label.
I have reviewed some alerts for the month of April and saw a bunch of alerts that from my assessment they shouldn't be considered as TP.
It seems that the bot is firing every time there's a bulk transaction.
E.g: 0xdead5755e7c08d537834933498b2841e071fe349 was flagged as an address poisoner address.
Forta alert: https://explorer.forta.network/alert/0x8154ff181646eee2769faf9108c2c456a7fc2763f903a245867871c861592b6c
Scan link: https://etherscan.io/address/0xdead5755e7c08d537834933498b2841e071fe349
e.g2: 0xa3096ecc4ae1ab833e3f54fbf371873211822b41 was flagged as an address poisoner address.
Forta alert: https://explorer.forta.network/alert/0x52a3bc412ca246c3ff780c3ae48b470525a5d7771b19d77b13909ae1b3d45b80
Scan link: https://etherscan.io/address/0xa3096ecc4ae1ab833e3f54fbf371873211822b41
Both cases alerts seem to trigger right after the "bulk transfer"
Hi Trevor,
Opening an issue in order to tackle the following FN. This transaction was not picked up by the address poisoning bot https://etherscan.io/tx/0xd65b7f9b1497a5e2afaf65b36d3d6f111de8c888b6db4be94b5eace359e2d491
Wondering if something should be tweaked in order to have caught it.
0x5f1a7b7e5d899e0379d0e536e3de825b73676a9c isnt the attacker address. Seems like neither the sender nor recipient is the actual attacker, but rather just the contract?
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.