Initial Report For The 10.6K Botnet

Allium Partners
Allium Partners
March 27, 2024
3 min read
Initial Report For The 10.6K Botnet

This blog post was originally written by Meow from Jupiter Research. You can find the original post on their blogspot at the following link: https://www.jupresear.ch/t/initial-report-for-the-10-6k-botnet/4822

In conjunction with Allium labs, we have done a preliminary analysis on the 10.6K botnet that claimed nearly 2M JUP.

photo_2024-02-07 10.17.05
  1. This is the distribution of swaps by the largest sybil attacker, claiming for 10,613 wallets
  2. The first swap dates of these wallets on jupiter were scatter across time, beginning as early as May 2023
  3. The inital timestamps of the swap were varied, scattered throughout the day
  4. These wallets also had unpredicted swap patterns, with varying swap counts and token pairs they swap to
photo_2024-02-07 10.17.08

The swaps were extremely tiny, making < 1cent in volume.

In essence, due to the randomness in their transaction patterns, this looks like an sophisticated farming attempt by a professional that predicted a likely Jupiter airdrop earlier in the year.

We will be collaborating with Allium Labs to have a full report on this to benefit future attempts and any other teams doing large scale airdrops.

In addition, for future airdrops, we will publish all available data and work closely with the community and data experts to to prevent this from happening again.

Notes:

  • TIL: There are institutional airdrop farmers: https://twitter.com/ayyyeandy/status/1754693513269104940 113
  • We included all 955K wallets in an attempt to be as egalitarian as possible, but it looks like this would include too many botnets
  • We decided the criteria only in nov 23 after the breakpoint announcement and in conjunction with the community.
  • We erroneously hypothesized about the botnet being done a few days before the announcement based on speculation before doing a deeper dive on the data. We apologize for this and will do better in the future

Stay Updated with Our Blog

Get the latest blog updates directly to your inbox.

By signing up, you agree to our Terms and Conditions.
Your mail has been sent successfully!
There is error in sending mail! Please try again later.
background image

For Analysts

Accounting & Auditing

Query all balances with USD prices in one line

select date, project, sum(balance)

from ethereum.assets.balances

The quality of tables makes it easy for new SQL users to create complex queries in just a few lines
Matt Maximo, Research Lead at Grayscale
Learn More

Stablecoins

Track every stablecoin transaction across 15 chains in a single query

select token_symbol, sum(usd_volume) from crosschain.stablecoin.transfers group by all;

Learn More

NFTs

A source of truth for NFT trades, supporting all major marketplaces, with washtrading filters.

select block_timestamp, chain, sum(usd_price) from crosschain.nfts.trades group by all

We don’t need an engineer to index each chain and spend time when there are data issues or when we want to add new marketplaces or new columns to our data. It’s all done by Allium with great SLAs!
- Monique, Head of Data Science at MagicEden

Powers Electric Capital's NFTPulse

Learn More

DEXs

Trades from major DEXs and aggregators, liquidity from both DEXes and non-DEX sources

select block_timestamp, chain, count(distinct transaction_from_address) from crosschain.dex.trades group by all

Trusted by the two biggest DEX ecosystems

  • Jupiter DEX
  • Uniswap DEX
Learn More

Wallet360 + Airdrop360

With over $10B in airdrops supported, Allium's curated 100+ attributes can help you explore what your users are doing on-chain.

With the help of machine learning experts from @AlliumLabs, we found several major clusters and will be looking into whether they should be removed from the tiered volume-based allocations
- Jupiter Aggregator
Learn More

Allium AI Assistant

The Allium Assistant can be found within the Allium Explorer platform to generate comprehensive queries to answer research questions asked in simple English

1000+ lines of code reduced to a sentence & one right-click

Spend less time writing lines of code & more time conducting analysis

Learn More

Allium In The Wild

Backed by the Best

...and Industry leaders from