{
  "curatedUTC": "2026-10-31T03:01:57.730256+00:00",
  "purpose": "Test the chronology of Car\u2019s Choice allegation against public June drain reports and the June vendor-breach disclosure. These are distinct records; temporal proximity does not identify the actor.",
  "primaryPublicRecords": [
    {
      "id": "2069048497920155799",
      "createdAt": "2026-06-22T13:22:57.000Z",
      "authorID": "861844460",
      "authorHandle": "qihu00",
      "URL": "https://x.com/qihu00/status/2069048497920155799",
      "checkURL": "https://cdn.syndication.twimg.com/tweet-result?id=2069048497920155799&lang=en&token=1",
      "description": "Public self-report of two Polymarket accounts drained, with positions sold and withdrawals. This is the author\u2019s allegation, not an independently authenticated loss or proof of the same June campaign.",
      "source": {
        "file": "june-x-2069048497920155799.source",
        "bytes": 4490,
        "SHA256": "45d7c42139b9e57c793e5db3ce97a2a4c7f680921bed87451d5e84997987d6f7"
      }
    },
    {
      "id": "2070105083891851364",
      "createdAt": "2026-06-25T11:21:27.000Z",
      "authorID": "1651074712146173954",
      "authorHandle": "Ashgang51",
      "URL": "https://x.com/Ashgang51/status/2070105083891851364",
      "checkURL": "https://cdn.syndication.twimg.com/tweet-result?id=2070105083891851364&lang=en&token=1",
      "description": "Public self-report supplies proxy520d8406d896cf179a265eb62f431b0859253b93, a withdrawal transaction and alleged recipientC29309bB2ce2F46BC888CFAD1F630C01db278cE3. Receipt verification is a separate task.",
      "source": {
        "file": "june-x-2070105083891851364.source",
        "bytes": 1048,
        "SHA256": "8004c3ffbdd4fab0318cdc810ef0a3df91d3186774ea1640a3d9664cf85e929f"
      }
    },
    {
      "id": "2070152064051605517",
      "createdAt": "2026-06-25T14:28:08.000Z",
      "authorID": "1795853073924939778",
      "authorHandle": "SpecterAnalyst",
      "URL": "https://x.com/SpecterAnalyst/status/2070152064051605517",
      "checkURL": "https://cdn.syndication.twimg.com/tweet-result?id=2070152064051605517&lang=en&token=1",
      "description": "Investigator reports an apparent campaign affecting at least11wallets and approximately$2.94M, with Ethereum consolidation. This is attributed to the investigator.",
      "source": {
        "file": "june-x-2070152064051605517.source",
        "bytes": 2361,
        "SHA256": "11d6482a04949d2f19ce2917a1c9ace5a3c18c064e8da8b6af8351b3021b6ce8"
      }
    },
    {
      "id": "2070155882906730671",
      "createdAt": "2026-06-25T14:43:18.000Z",
      "authorID": "1965783030062022656",
      "authorHandle": "PolymarketTrade",
      "URL": "https://x.com/PolymarketTrade/status/2070155882906730671",
      "checkURL": "https://cdn.syndication.twimg.com/tweet-result?id=2070155882906730671&lang=en&token=1",
      "description": "The official trading account says it discovered a compromised third-party vendor that morning, removed the dependency and would refund affected users. It does not name Choice, Car or the vendor.",
      "source": {
        "file": "june-x-2070155882906730671.source",
        "bytes": 1253,
        "SHA256": "3659a2da43fcd1042640fede94510d3af7092c8943f82b291d04d407f6ac8c2b"
      }
    },
    {
      "id": "2070157742514618443",
      "createdAt": "2026-06-25T14:50:42.000Z",
      "authorID": "1128606567354359808",
      "authorHandle": "PeckShieldAlert",
      "URL": "https://x.com/PeckShieldAlert/status/2070157742514618443",
      "checkURL": "https://cdn.syndication.twimg.com/tweet-result?id=2070157742514618443&lang=en&token=1",
      "description": "PeckShield attributes the apparent campaign report to Specter and describes bridging and approximately1,893ETH. It is not an independent source for Specter\u2019s initial wallet count.",
      "source": {
        "file": "june-x-2070157742514618443.source",
        "bytes": 2588,
        "SHA256": "beaa4bbba1d6ff2a4e99885af2502ce79af405ace309c29fb7b72dcbb9e3e5a3"
      }
    },
    {
      "id": "2070199790391177718",
      "createdAt": "2026-06-25T17:37:47.000Z",
      "authorID": "1385312402795859968",
      "authorHandle": "bubblemaps",
      "URL": "https://x.com/bubblemaps/status/2070199790391177718",
      "checkURL": "https://cdn.syndication.twimg.com/tweet-result?id=2070199790391177718&lang=en&token=1",
      "description": "Bubblemaps reports fewer than15affected accounts and about$3M, with refunds. This is the investigator\u2019s reported count.",
      "source": {
        "file": "june-x-2070199790391177718.source",
        "bytes": 3548,
        "SHA256": "594f5c64ba790482e94ab793657115735bdeed7bfba43d1a591f1d0a03fed88a"
      }
    }
  ],
  "CarChoiceResponse": {
    "originalID": "2069909080492183811",
    "originalUTC": "2026-06-24T22:22:36Z",
    "editID": "2069909899048337452",
    "editUTC": "2026-06-24T22:25:51Z",
    "archiveURL": "https://web.archive.org/web/20260624222236id_/https://x.com/CarOnPolymarket/status/2069909080492183811",
    "archiveSourceSHA256": "6064f3483ec73a159ca9df4ba132a0a5fae94690c4cda33555346fd8753db654",
    "description": "Car accuses a promotion client of malicious conduct and says he will not promote it. The record establishes his allegation, not that the client operated a drainer."
  },
  "conclusions": [
    "Car\u2019s June24Choice allegation predates the official June25vendor-breach statement, but public drain allegations were already visible on June22.",
    "The June22report has not been independently linked to the exact June25consolidation cluster in this pass. Do not use the article publication date as the attack start.",
    "The official disclosure does not identify Choice as the compromised vendor or attacker. No payment, malicious-code or control edge joins Car\u2019s commercial dispute to the June or October drainer.",
    "This chronology does not establish advance knowledge of the vendor compromise, responsibility for it, or a connection between the June and October attackers."
  ],
  "quotePolicy": "Metadata and paraphrases only; full primary post bodies and images remain local."
}
