FTX hacker begins possible Pump & Dump scam as troll messages & cryptic tokens sent to Uniswap FTX hacker begins possible Pump & Dump scam as troll messages & cryptic tokens sent to Uniswap

FTX hacker begins possible Pump & Dump scam as troll messages & cryptic tokens sent to Uniswap

Deeper look at on-chain data shows the hacker has been sending messages to exchanges, Vitalik and Uniswap using tokens created within the past 24 hours.

FTX hacker begins possible Pump & Dump scam as troll messages & cryptic tokens sent to Uniswap

Cover art/illustration via CryptoSlate

Update Nov. 20: The mentioned transactions below appear to have been subject to transaction spoofing and, thus, the relationship between the hacker and the tokens is therefore still unknown. 

The FTX Hacker address — 0x59AB…fd32b — is sending cryptic tokens, including one labeled “WHAT HAPPENED” to addresses across the blockchain, including exchanges, Vitalik, and Uniswap.

A deeper analysis of the on-chain transactions by CryptoSlate revealed the messages have been going on for multiple days using newly created tokens such as “WHAT HAPPENED,” “CRO NEXT,” and “FTX SUCKS.”

The image below showcases the token, “WHAT HAPPENED,” which was created at 9.40 AM GMT and minted directly to the FTX Hacker’s address with a supply of 1 billion tokens. Within 2 minutes, 90% of the tokens were sent to the Uniswap V2 contract, with many others distributed among other addresses linked to the Hacker.

Investors should be aware that such tokens may be trading on Uniswap with accounts linked to the FTX Hacker wallet, tagged as ‘FTX Accounts Drainer 1 – 6,’ potentially trading the tokens to inflate their price. The possibility of a new scam targeting meme coin investors is now feasible.

ftx hacker what happened
Source: Etherscan

The name of the token — ‘WHAT HAPPENED’ — relates to a series of obscure tweets sent from former CEO Sam Bankman-Fried’s Twitter account over the past few days. A ten-part thread started with the word ‘what’ and then continued to spell out the word ‘happened’ before ending with the following statement:

Examples of other tokens and transactions can be seen below, including the WHAT, SOYCONMAN, FTX SUCKS, CRO NEXT, and FUCK FTX tokens.

CryptoSlate is utilizing Arkham Intelligence to track transactions, and will publish any further developments as we find them.

SOYCONMAN
SOYCONMAN TOKEN
WHAT TOKEN
WHAT TOKEN
WHAT HAPPENED TOKEN
WHAT HAPPENED TOKEN
FUCK FTX TOKEN
FUCK FTX TOKEN
FTX SUCK TOKEN
FTX SUCKS TOKEN

As of press time, the account has also moved roughly $50 million out, with close to $300 million left in the wallet.

Arkham Intelligence shared insights revealing that the Hacker had moved $48.2 million DAI to ETH on Cowswap.

 

Connect your wallet, trade with Orion Swap Widget.

Directly from this Widget: the top CEXs + DEXs aggregated through Orion. No account, global access.