{
  "checkedUTC": "2026-10-31T17:17:11.700126+00:00",
  "claimUnderReview": "An attacker relayer wallet allegedly received three0.1ETH Tornado funding transfers on October27\u201328.",
  "verdict": "UNVERIFIED_FOR_POLYMARKET; do not publish as established attacker funding.",
  "socialSourceCheck": {
    "URL": "https://zamantika.com/vi/profile/immortalhowwl",
    "fetches": 1,
    "observed": "The returned profile feed did not contain the cited Tornado/relayer assertion or its exact wallet/transaction identifiers.",
    "claimedOriginalPoster": "@0xmoopie, per task input only; original post not authenticated in this pass.",
    "limit": "A missing claim from a changing profile feed does not disprove that an older post or search snippet existed. No broader profile expansion performed."
  },
  "retainedPolymarketRoles": [
    {
      "address": "0xe7b5f4a5b76f07f291042862bd7e3651f545216e",
      "role": "Outer submitter of the victim-conversion batch funding collector3f99 with POL",
      "tx": "0x896e4b56ab0142a6b3bf16c029a7f139e64bc3fc2c6b99c7f949d31cb6172e47",
      "URL": "https://polygonscan.com/tx/0x896e4b56ab0142a6b3bf16c029a7f139e64bc3fc2c6b99c7f949d31cb6172e47",
      "UTC": "2026-10-29T17:10:23+00:00"
    },
    {
      "address": "0xf466487817220ff6958891576d5a746c078fc1af",
      "role": "Outer gas-paying submitter of the secondary wallet factory deployment, distinct from owner0543",
      "tx": "0x560af1b795839a9c8aead6e3fa1f8331efa1f677be38b9c3aab08347ff44d087",
      "URL": "https://polygonscan.com/tx/0x560af1b795839a9c8aead6e3fa1f8331efa1f677be38b9c3aab08347ff44d087",
      "UTC": "2026-10-29T17:44:28+00:00"
    }
  ],
  "polymarketBoundary": "Submission and gas sponsorship do not establish attacker key ownership. Retained collector funding is a victim conversion, not an independently established Tornado seed. No exact source address or transaction ties the reviewed social claim to either submitter.",
  "separateBinancePattern": {
    "status": "Exact independently retained three-withdrawal set exists in Binance-case evidence, but is not linked to the reviewed social assertion.",
    "chainId": 1,
    "recipient": "0x7c8601d4645b93cea45f71e118a729332e6b5ca0",
    "pool": "0x12d66f87a04a9e220743712ce6d9bb1b5616b8fc",
    "withdrawals": [
      {
        "tx": "0xd9e59064d7681439e732a5eb0e2a167b9a23f161d3ce4c8ef111ca824fe59008",
        "URL": "https://etherscan.io/tx/0xd9e59064d7681439e732a5eb0e2a167b9a23f161d3ce4c8ef111ca824fe59008",
        "UTC": "2026-10-28T07:39:47+00:00",
        "poolDenominationETH": "0.1",
        "recipient": "0x7c8601d4645b93cea45f71e118a729332e6b5ca0",
        "relayer": "0x213cfeb89529efc2eae2a502d4a8253fe4ae76ef",
        "netRecipientETH": "0.09825699656315"
      },
      {
        "tx": "0xa79503c2b47c55e9bff226a239bbcd9b79d22815d4f94e12fac938504281221a",
        "URL": "https://etherscan.io/tx/0xa79503c2b47c55e9bff226a239bbcd9b79d22815d4f94e12fac938504281221a",
        "UTC": "2026-10-28T08:53:59+00:00",
        "poolDenominationETH": "0.1",
        "recipient": "0x7c8601d4645b93cea45f71e118a729332e6b5ca0",
        "relayer": "0x5555555731006f71f121144534ca7c8799f66aa3",
        "netRecipientETH": "0.09789260928915"
      },
      {
        "tx": "0x18ae9a759c2edcbd8117f82b54962877da24f6f04ece41dc2896475d2d8b1cae",
        "URL": "https://etherscan.io/tx/0x18ae9a759c2edcbd8117f82b54962877da24f6f04ece41dc2896475d2d8b1cae",
        "UTC": "2026-10-29T08:23:11+00:00",
        "poolDenominationETH": "0.1",
        "recipient": "0x7c8601d4645b93cea45f71e118a729332e6b5ca0",
        "relayer": "0x0a5b2bf3ccfb44c1d22f07eed9553ecba752d4ad",
        "netRecipientETH": "0.09794285280185"
      }
    ],
    "netRecipientETH": "0.29409245865415",
    "dateMismatch": "Retained rows are October28\u201329UTC, not the claimed October27\u201328.",
    "roleMismatch": "Recipient is the Binance-case controller; the Tornado relayers are distinct service senders. Neither recipient nor the three service senders matches the two listed Polymarket submitters.",
    "checkedOffline": [
      "Three receipt statuses successful and transaction hashes match retained transactions.",
      "Pool Withdrawal data decodes to controller7c86; indexed relayer equals the outer sender and differs from recipient.",
      "Three0.1ETH denominations less receipt fees reconcile to net0.29409245865415ETH."
    ],
    "interpretation": "A concrete cross-case confusion risk, not proof that the inaccessible social claim originated from this Binance set."
  },
  "retainedInputs": [
    {
      "path": "/root/polymarket-investigation/evidence/attacker-origin-20261031T1500/origin/ORIGIN-ROLE-BOUNDARY.json",
      "bytes": 3049,
      "SHA256": "080f32f5ec1be90d55c4fc1f9d571569b1e25c50b53f2fb262be0ac0821c0b1c"
    },
    {
      "path": "/root/investigation-archives/binance-investigation-20261029/root-cause/deeper/funding/Tornado-withdrawal-relayer-proof.json",
      "bytes": 33477,
      "SHA256": "200462f254f1a0a9f736069f13f89b5614512be891a6d350b8538e4132921df2"
    },
    {
      "path": "/root/investigation-archives/binance-investigation-20261029/scope/controller-tornado-funding-decoded.json",
      "bytes": 4020,
      "SHA256": "102b8804cc0b300d630f50a71214d79afe522b810801e01cdf4410cfec73fe06"
    },
    {
      "path": "/root/investigation-archives/binance-investigation-20261029/scope/source-controller-and-authorization-summary.json",
      "bytes": 9285,
      "SHA256": "312170a5effc2b029518ae494696730050efb1945bc61c885b24d157e1a50021"
    }
  ],
  "publicationDecision": "Exclude the social funding assertion from positive attribution. Keep the signed collector swap and exact public fee-target finding as separately supported evidence.",
  "limits": [
    "No full historical Tornado audit of every Polygon submitter was performed; absence of an established link is not proof no such history exists.",
    "No new chain/provider requests, login, private account mapping, broad social history or case-directory edits. Only the requested social source was fetched."
  ]
}
