Reports

The full catalogue of published on-chain investigations. Reports are numbered sequentially; a dotted suffix (e.g. 0134.2) denotes a sub-report that extends an earlier investigation with new evidence.

Pages that name natural persons as they appear in public corporate filings are kept out of search engine indexes. They remain reachable via direct link from this page.

Report #0135 - Solana drainer deQzb (October 2025)

A Solana drainer wallet compromised 657 user wallets in a single-day attack on October 9, 2025. The follow-up report traces the laundering path and identifies three additional attacker-controlled wallets plus a Coinbase off-ramp.

Title Published Updated
0135 Solana Wallets Drained: Over 650 Accounts Hit in a Single-Day Attack (October 9, 2025) 2025-10-17 2026-04-15
0135.1 Attacker deQzb follow-up: laundering into Coinbase and ongoing SPL token seizures 2026-04-15 2026-04-24

Report #0134 - Stolen ETH → NFT whales → undeads.com investment

A 100-ETH theft from a Switchere.com hot wallet in May 2022 traces on-chain to NFT whales n0b0dy.eth and indifferent.eth, who subsequently invested into the undeads.com project. The sub-reports document the fund flow, the investment record, the corporate structure, $UDS token concentration, and a routing of ~$1M through the OFAC-sanctioned Cryptex.net platform.

Title Published Updated Notes
0134 Stolen 100 ETH traced to NFT whales (n0b0dy, indifferent) and an investment into undeads.com 2025-08-28 2026-04-08 Overview
0134.0 Crypto theft from Switchere.com connected with NFT whales n0b0dy.eth and indifferent.eth 2025-08-28 2026-04-24  
0134.1 NFT whales n0b0dy.eth and indifferent.eth invested into undeads.com and later attempted to obscure the connection 2025-08-28 2026-04-24  
0134.2 undeads.com: inconsistent public information about legal operating entity 2025-08-28 2026-04-24 Names natural persons - not indexed
0134.3 40% of unlocked $UDS market cap tied to wallets connected with indifferent.eth and n0b0dy.eth 2025-08-28 2026-04-24  
0134.4 undeads.com routed ~$1M through OFAC-sanctioned Cryptex.net while its investors received funds from the same platform 2026-04-07 2026-04-24  

For the research methodology used in every report, see Methodology. For editorial standards and conflict-of-interest policy, see Editorial Standards. For factual corrections and right of reply, see Corrections.