{
  "checkedUTC": "2026-10-31T12:13:03.955989+00:00",
  "newCorporateFinding": "Official basic KVK search confirms separate current registrations: ClearCode B.V.93131437 and PredictFolio B.V.42169313. Their respective registered activities concern company holdings/management and financial-data software/services.",
  "whoOwnsWhat": "Website policies declare ClearCode the operator/provider. The current footer calls the product PredictFolio B.V. No retrieved shareholder, parent/subsidiary, stake-buyer, consideration or IP-transfer record binds those roles into an ownership chain.",
  "carStatement": "Car said on2026-06-25 that he sold his entire stake and handed the project to cofounder meepie to continue development. Meepie is a named handover recipient, not an independently verified stake buyer.",
  "businessInterpretation": "Observed product distribution combines editorial content, community/PnL-card promotion, free analytics and implemented via=predictfolio outbound links. Referral monetization is a possible business mechanism; no specific beneficiary or earnings are verified.",
  "orderAttribution": {
    "kind": "RETAINED_SELECTED_ORDER_BUILDER_ATTRIBUTION_AUDIT",
    "frozenUTC": "2026-10-31T12:10:08.853704+00:00",
    "result": "All87 selected Car observations (84 distinct signed orders) and the two exact secondary-account SELL controls have zero signed builder/metadata, bound to87+2 positive OrderFilled events. No nonzero project/provider code was recovered.",
    "scope": {
      "extendedSelectedSet": {
        "observations": 87,
        "transactions": 87,
        "uniqueSignedOrders": 84,
        "BUY": 4,
        "SELL": 83,
        "executionUTC": [
          "2026-10-29T16:10:37+00:00",
          "2026-10-29T17:31:40+00:00"
        ],
        "blocks": [
          96389905,
          96393147
        ],
        "firstTransaction": "0x4f6907a066bdf2906b9e5d566b2169963603af9687652e01f58c0a074a199586",
        "lastTransaction": "0x7b093b11228a8d88d43ccc3a2a5bd5dbe164b591525d2c8213994adc7d10ef13"
      },
      "rapidSELLBurst": {
        "observations": 60,
        "transactions": 60,
        "uniqueSignedOrders": 59,
        "BUY": 0,
        "SELL": 60,
        "executionUTC": [
          "2026-10-29T17:16:10+00:00",
          "2026-10-29T17:17:16+00:00"
        ],
        "blocks": [
          96392527,
          96392571
        ],
        "firstTransaction": "0x6213c6377f74627f90a655eebd87863ca921733e704be89beddd8102ec6506ba",
        "lastTransaction": "0x8858bb5a240ac1cac2ef81850972dedcac2386f4a0bcf82fc9a389f90c703f37"
      },
      "originalSourceWindowLabels": {
        "first-attack-before-car-transfer": 60,
        "car-transfer-to-claim": 22,
        "baseline": 5
      },
      "selectionRule": "Reused complete already-retained selection: all83SELL observations in the cached pre/post windows plus4baselineBUY controls. Five baseline observations include oneSELL and fourBUY. This is not an exhaustive time-interval, account-history or incident-causation claim. Original window names are capture labels, not conclusions about causation."
    },
    "trueFormat": "Actual V2 tuple includes metadata/builder; no legacy-field assumption was used.",
    "verification": "Original calldata decode, EIP712 digest reconstruction and84 actual signer recoveries; successful receipts/header consistency; positive OrderFilled digest/maker/side/token/builder/metadata binding.",
    "projectComparison": "The retained project implements via=predictfolio link routing; no explicit bytes32 builder code was recovered in the checked25 current source files. URL referral routing is not signed builder attribution.",
    "limits": [
      "Zero builder fields rule out nonzero signed builder attribution only for these selected orders. They do not rule out ordinary via referral rewards, private/off-chain payments or coordination.",
      "Valid signatures identify authority, not consent or a human operator. The extended selection is not a claim all87 orders were incident-caused.",
      "No nonzero builder code, financial association, source-control relationship or Car–drainer causation follows from this result."
    ],
    "publicPolicy": "Curated decoded fields/source hashes only. Raw records and local verifier stay local; no website or frozen evidence was edited.",
    "secondaryControl": {
      "orders": 2,
      "transactions": [
        "0x0082057804eda7bc90fd30c2f2545b553bf637fb1cfa27de8f0611e5877c95a0",
        "0x23b6cacd62841b6988c65c9e8b54bd3f66e4b5924dbd498327105c47919502e6"
      ],
      "executionUTC": [
        "2026-10-29T17:54:43+00:00",
        "2026-10-29T17:54:55+00:00"
      ],
      "blocks": [
        96394069,
        96394077
      ],
      "signatureType": 3,
      "actualRecoveredInnerSigner": "0x0543635ef8e7981c4885fcfc187bc8564481ef74",
      "allSignedBuilderAndMetadataZero": true,
      "positiveOrderFilledEvents": 2,
      "record": "SECONDARY-ORDER-CONTROLS.json",
      "role": "Attacker-associated secondary account; not victims."
    },
    "victimControlLimit": "No separate known-victim order was substituted or claimed; the two exact secondary orders fulfill the optional secondary control scope."
  },
  "attackerConnection": "No verified common key, malicious deployment access, financial consideration, builder beneficiary or coordination link between Car/the companies and the drainer was recovered.",
  "financialScope": "This pass checks corporate/product/order-attribution records. It contains no new live balance snapshot. Prior financial observations remain dated on their original pages.",
  "evidenceScope": "Curated corporate/professional metadata and decoded public onchain fields. Full social/legal/code bodies, personal identities, physical addresses and unrelated profiles are excluded. This package is not a full-input offline authentication replay."
}
