MONEY / TRAIL31 OCT 2026
SAME ADDRESSES · ACTUAL SIGNATURES · NEW TOKEN CHECKS

Optimism is a confirmed part of the route.

The routing key signed on Polygon, Optimism and Ethereum. The new pass checked ten addresses across 22 EVM networks and selected stablecoins on 14 networks. It found a 200 pUSD redemption into the selling account, without establishing a new outside funder or Car connection.

One key, three networks

This October 29 route was established earlier. Matching bridge orders connect the payments, and recovered signatures establish control by the same key on all three networks. The wallet is 0x3f7019221a925537dc20767c38e80a7127fb1ffa.

The checked Optimism remainder is 0.360967751344140708 ETH. The incoming bridge payment delivered value already sent from Polygon; it does not identify an independent financier. Exact amounts, timestamps and order IDs ↗

Where signing control is actually proved

The table counts 84 retained authorizations across six keys. It distinguishes actual signatures from an address merely appearing in a token transfer. A dash means this selected proof collection supplies no authorization on that chain.

KeyPolygonOptimismEthereum
Routing wallet0x3f7019221a925537dc20767c38e80a7127fb1ffa418
C910xc91ee0574a14446de200923729c349b9cae19b6026—1
E40xe4c4c39c1733e1c7c06b79f97ed442b68df41ec62—2
Collector0x3f99139f1c5854bb628c2e576aaf638e99dffc1834——
74E90x74e940e4eb470a9d8b78c5eb8919938041219897——1
Selling-account signer0x0543635ef8e7981c4885fcfc187bc8564481ef745——

The selling-account key has five Polygon authorizations even though its ordinary transaction counter is zero: the signatures were carried in transactions submitted by other addresses. A matching contract address on another chain also needs its own control evidence. Authorization matrix ↗ · Matrix CSV ↗

The fresh check across 22 networks

Twenty networks returned complete snapshots. Blast returned a server error; Plasma rate-limited the remaining reads. Those two are recorded as gaps. Each row has its own block and time.

The state checks cover native coins, ordinary transaction counters and deployed code. We separately checked 240 balances across 24 selected stablecoin contracts on 14 networks. No nonzero selected-token balance appeared on the additional networks. Current state does not reconstruct every earlier transfer.

NetworkResultObserved state31 Oct cutoff UTCProof
EthereumKnown holdingsPreviously tracked balances and account state2026-10-31T21:28:23ZSnapshot ↗
PolygonKnown holdingsPreviously tracked balances and account state2026-10-31T21:28:34ZSnapshot ↗
OptimismKnown route3f701: 0.360967751344140708 ETH; transaction counter 12026-10-31T21:28:31ZSnapshot ↗
BaseChecked10 addresses: zero native coins/counters; no deployed code2026-10-31T21:28:31ZSnapshot ↗
Arbitrum OneChecked10 addresses: zero native coins/counters; no deployed code2026-10-31T21:28:32ZSnapshot ↗
Arbitrum NovaChecked10 addresses: zero native coins/counters; no deployed code2026-10-31T21:25:11ZSnapshot ↗
BNB ChainChecked10 addresses: zero native coins/counters; no deployed code2026-10-31T21:28:33ZSnapshot ↗
AvalancheChecked10 addresses: zero native coins/counters; no deployed code2026-10-31T21:28:29ZSnapshot ↗
LineaChecked10 addresses: zero native coins/counters; no deployed code2026-10-31T21:28:23ZSnapshot ↗
ScrollChecked10 addresses: zero native coins/counters; no deployed code2026-10-31T21:28:08ZSnapshot ↗
zkSync EraChecked10 addresses: zero native coins/counters; no deployed code2026-10-31T21:28:15ZSnapshot ↗
UnichainChecked10 addresses: zero native coins/counters; no deployed code2026-10-31T21:28:28ZSnapshot ↗
HyperEVMChecked10 addresses: zero native coins/counters; no deployed code2026-10-31T21:28:30ZSnapshot ↗
MonadChecked10 addresses: zero native coins/counters; no deployed code2026-10-31T21:28:31ZSnapshot ↗
MantleChecked10 addresses: zero native coins/counters; no deployed code2026-10-31T21:28:30ZSnapshot ↗
opBNBChecked10 addresses: zero native coins/counters; no deployed code2026-10-31T21:29:46ZSnapshot ↗
BlastIncompleteServer error; no state readUnavailableSnapshot ↗
TaikoChecked10 addresses: zero native coins/counters; no deployed code2026-10-31T21:29:45ZSnapshot ↗
InkChecked10 addresses: zero native coins/counters; no deployed code2026-10-31T21:29:47ZSnapshot ↗
SoneiumChecked10 addresses: zero native coins/counters; no deployed code2026-10-31T21:29:47ZSnapshot ↗
SonicChecked10 addresses: zero native coins/counters; no deployed code2026-10-31T21:29:44ZSnapshot ↗
PlasmaIncomplete23 of 30 state fields read; remaining reads rate-limited2026-10-31T21:29:48ZSnapshot ↗

Coverage and baseline comparisons ↗ · All200 complete address/network rows ↗ · Selected token balances ↗

New finding: 200 pUSD from an existing position

The selling account 0x5a2764fbbe5d139ef0ed988ec5f95320ce730c0b held 5,139.424699 pUSD at 21:33:46 UTC, up200 from the previous check.

The increase occurred at 20:02:30 UTC on October 31. The account redeemed 200 winning-position units in a batch covering 20 holders. The receipt shows the position burn, 200 USDC.e moving through the redemption adapter and wrapper, and 200 pUSD minted to the same account.

200 position units→200 USDC.e→200 pUSD to 5a…

The exact token ID and quantity match the collector’s October 29 handoff to this account. The batch’s outer signer and operation sender differ from the selling account and its owner key. This records conversion of an existing position matching the earlier collector transfer; it does not establish new theft, fresh attacker authorization or outside financing.

New redemption transaction ↗ · Independent signature, asset-flow and platform-record check ↗

A shared NFT reached 3,000 wallets in one transaction

Fresh Optimism history showed matching NFT receipts at C91, 3f701 and 74E9. The transaction explains the overlap: at 06:32:07 UTC on October 31, one key outside the established cluster minted to 3,000 distinct recipients. All 3,000 mint events came from the zero address.

These receipts supply no signature by C91 or 74E9 and no control link between the recipients. The mint’s sender and token contract produced no exact match to the selected Car financial keys or addresses. Mass-mint transaction ↗ · Decoded events and history coverage ↗

TRON checked too

Nine financial-role addresses were converted to TRON’s address format and checked for account records, confirmed ordinary transactions and TRC20 transfers. The 27 target responses returned no rows; a separate positive control returned data. This is an indexed lookup result, without a TRON signing-control link. TRON responses ↗ · Address encodings CSV ↗

What remains unresolved

No new independent prefunder or Car control/funding link emerged. Base and Arbitrum historical-index requests returned 403 and were stopped; their successful state/token reads do not fill those history gaps. Plasma’s incomplete state/token coverage and Blast’s failed read remain open.

Download this evidence collection ↗Transaction register ↗Published file hashes ↗