{
  "capturedUTC": "2026-10-30T18:32:19.745506+00:00",
  "scope": "Bounded public provenance of earliest observed drained wallet; not a determination of actor participation.",
  "victim": {
    "wallet": "0x322a754382c59e9b6a05ebb74bc150dadfd25cdc",
    "currentPublicName": "Iann2026",
    "publicUserId": "9676513",
    "profileCreatedAt": "2026-09-08T12:49:51.189528Z",
    "pseudonym": "Exalted-Dramaturge",
    "controllerCurrentAndAttackBlock": "0x8164ac2537987ac7b1a516b2816f94770ba99cb3",
    "profileURL": "https://gamma-api.polymarket.com/public-profile?address=0x322a754382c59e9b6a05ebb74bc150dadfd25cdc",
    "ageAtFirstObservedDrain": "51 days 4 hours 20 minutes; profile timestamp is not wallet deployment time"
  },
  "initialDrain": {
    "timestampUTC": "2026-10-29T17:10:23Z",
    "collateralAmountPUSD": "181.831978",
    "collectorNativePOL": "1957.062835268601520992",
    "collector": "0x3f99139f1c5854bb628c2e576aaf638e99dffc18",
    "transactionURL": "https://polygonscan.com/tx/0x896e4b56ab0142a6b3bf16c029a7f139e64bc3fc2c6b99c7f949d31cb6172e47",
    "interpretation": "First observed collector POL is a redemption/Relay payout from this wallet, not an independently identified external gas sponsor."
  },
  "verifiedPreincidentDeposits": [
    {
      "timestampUTC": "2026-09-13T04:37:31Z",
      "amountPUSD": "4",
      "transactionURL": "https://polygonscan.com/tx/0xc5eb08bd2444182bddaa84e0fcb464bffaad234cecea459ae0d5b00902bfb27d"
    },
    {
      "timestampUTC": "2026-09-13T04:39:10Z",
      "amountPUSD": "46",
      "transactionURL": "https://polygonscan.com/tx/0x30e392b7dfa09e66b6a10595ba7c13240b987744aaee1f4f8a9339af70b051bf"
    },
    {
      "timestampUTC": "2026-10-10T07:35:04Z",
      "amountPUSD": "76.202320",
      "transactionURL": "https://polygonscan.com/tx/0xd860eca4be2f8775ab51d3a5d39e733c728bb8dcb7f87417d7dd7367507c1fc1"
    },
    {
      "timestampUTC": "2026-10-14T09:53:56Z",
      "amountPUSD": "92",
      "transactionURL": "https://polygonscan.com/tx/0x1fe515edc875e1bcaf19e858bb2d405735f8c0286c23de6dca58186bcff09575"
    }
  ],
  "depositMechanism": {
    "payer": "0x49f19c92d24f78d9074b5eefd8200cf4e1f870e9",
    "payerType": "EIP-7702 delegated EOA at first deposit",
    "verifiedReceiptLegs": "Payer USDC.e goes to collateral token; equal pUSD minted to victim. All four preincident deposits have this payer.",
    "fundingService": "All four have nearby exact-amount USDC.e payouts from Relay solver 0xf70da97812cb96acdf810712aa562db8dfa3dbef. Solver use is shared infrastructure."
  },
  "initialFourPUSDFunding": {
    "sourceProxy": "0xf97106f2dd5b53b5cc4f8eb0a9c8990125a809d3",
    "sourceCurrentName": "colacoffee",
    "sourcePublicUserId": "9579350",
    "sourceProfileCreatedAt": "2026-08-27T00:38:49.399187Z",
    "sourceOwnerCurrent": "0x46db14eb920ea7ce8155e4e782a293ee98d92fb3",
    "profileURL": "https://gamma-api.polymarket.com/public-profile?address=0xf97106f2dd5b53b5cc4f8eb0a9c8990125a809d3",
    "path": "f971 withdraws 1pUSD and 3pUSD to Relay; Relay pays 1+3 native USDC to49f. A second same-chain Relay conversion exchanges4USDC for4USDC.e to49f, followed by4pUSD minted to322a.",
    "sourceWithdrawalURLs": [
      "https://polygonscan.com/tx/0x4d3cde608d1f60525e0bcc06487bcfc70d437fd130a95d5fa08893ddde6b9c5c",
      "https://polygonscan.com/tx/0xa61b6d79c39d7894601a243305863f47da74082a76caee4d80294d664fb3bd7b"
    ],
    "sameChainConversionURL": "https://polygonscan.com/tx/0x1501ad8f7475accd7d73034a206e2412477e165b15453c7414acfe3881f4c5b1",
    "verification": "Source/payout receipts all status1; canonical pUSD/USDC.e/native-USDC logs match Relay request amounts and recipients.",
    "controlLimit": "A financial funding path is established; common human control of f971,49f and322a is not established. Current public names are not historical name proof.",
    "sourceOwnerAtSep13Withdrawal": "0x46db14eb920ea7ce8155e4e782a293ee98d92fb3"
  },
  "exactCarCandidateJoins": {
    "checkedAtUTC": "2026-10-30T18:30:57.858769+00:00",
    "candidateSetSizes": {
      "86leadInputs": 86,
      "344Derived": 344,
      "39DepositCandidates": 39
    },
    "newParticipants": {
      "victim": "0x322a754382c59e9b6a05ebb74bc150dadfd25cdc",
      "victimController": "0x8164ac2537987ac7b1a516b2816f94770ba99cb3",
      "depositPayer": "0x49f19c92d24f78d9074b5eefd8200cf4e1f870e9",
      "earliestFundingAccount": "0xf97106f2dd5b53b5cc4f8eb0a9c8990125a809d3",
      "earliestFundingAccountOwner": "0x46db14eb920ea7ce8155e4e782a293ee98d92fb3"
    },
    "matches": []
  },
  "metadataOverlap": {
    "observedReferrer": "funxyz|su4gnoxz14",
    "where": "Initial f971-to49f withdrawals and49f native-USDC-to-USDC.e conversion; also116 cached Car Relay requests.",
    "meaning": "Public application/provider routing metadata, not signing authority or evidence of common control. Cached attacker requests instead use relay.link.",
    "CarRelayComparisonSource": "../attacker-counterparty-overlap/car-bridge-and-deposit-exact-join.json"
  },
  "postIncidentDeposit": {
    "timestampUTC": "2026-10-29T22:19:42Z",
    "amountPUSD": "181.83",
    "transactionURL": "https://polygonscan.com/tx/0xe66f178c1fafb01d985ef301c696dfd01867d2325813fc2af00c4b7298d08a70",
    "mechanism": "Multi-recipient distribution via0xd152f549545093347a162dce210e7293f1452150, funded by0x71a7b22d671c93a7a40edff2ffed52dd64ed3235.",
    "limit": "Purpose and payer affiliation not independently established; not called a proven refund."
  },
  "coverageLimits": [
    "Genesis-wide incoming-log attempts timed out; not interpreted as empty history.",
    "5,001-block incoming windows succeeded around all4preincident deposits.",
    "Further Relay requests for46/76.20232/92 underlying source paths returned HTTP429; their deeper funding remains unresolved.",
    "Wallet code predates its first observed deposit; precise deployment time not determined.",
    "No recovered signature proof was newly performed here; owner getters/immutable runtime arguments and exact receipt transfers establish stated bindings.",
    "No determination that the first victim is attacker-controlled or complicit."
  ]
}