Bitcoin Forum

Economy => Reputation => Topic started by: Makkara on October 08, 2018, 06:02:40 AM



Title: [Program for investigators] Check eth and btc address connections in bounty
Post by: Makkara on October 08, 2018, 06:02:40 AM
I made this program few months back where you give in input the spreadsheets data of a bounty and give out a report in html which shows if any transaction between partecipants in the same category is found.


Repository with source code https://github.com/MakkaraServices/Bounty-Checker

Compiled Version https://github.com/MakkaraServices/Bounty-Checker/releases

Sample input https://drive.google.com/open?id=1oVsZbvhMv8T1FtylzMQ7qOedbYLuKrew

The program run under Windows, you need to install and get:
   
  • Visual Studio 2017 Community Edition: https://visualstudio.microsoft.com/downloads/
  • Get an API Key from Etherscan by registering in there: https://etherscan.io/apis

For the input data (example)
Once you are set and can compile the application, you need to create the following folder and files structure at the same level of the exe:
   
  • Bounties: this is where the data will be read
   
Under Bounties you create a folder named after the bounty:

  •    Bitmillex

Inside create the xml file:
          
  • BitmillexSpreadSheet.xml this must always be name of the bounty + “Spreadsheet.xlm”

Copy this code inside:
Code:
<?xml version="1.0" encoding="utf-8"?>
<!--Bounty Users Connections-->
<Campaign Name="Bitmillex">
<SpreadSheet Category="Signature" File="Bounties\Bitmillex\SpreadSheet\Signature.txt" OriginalSpreadSheetLink="https://docs.google.com/spreadsheets/d/1P9NwmuDwuG7HNZHLvKFuFxQRBb7Je8fHWuDEwzOTWHA/edit#gid=57298040"/>
</Campaign>

Create a folder named "SpreadSheet", now open the Spreadsheet link specified in the xml and substitute replace '/edit#gid=<some_number>' with '/preview?usp=embed_googleplus' at the end of the link, copy and paste the rows with the user informations all inside a file named Signature.txt and place it under SpreadSheet folder

You can do the same thing for other bounty categories, the only requirement is that the user profile link must come before the eth address.

Here is some input data for the example above, just copy the folder Bounties under the exe path https://drive.google.com/open?id=1oVsZbvhMv8T1FtylzMQ7qOedbYLuKrew to try it


You can create your custom input file as well, instead of using infos from a spreadsheet, like this

Code:
https://bitcointalk.org/index.php?action=profile;u=1
0xaddress
https://bitcointalk.org/index.php?action=profile;u=2
0xaddress1
https://bitcointalk.org/index.php?action=profile;u=3
0xaddress2

The output html with all the information will appear in the bounty folder Bitmillex (index.html and Details folder contain everything)

Use the app
To run the application simply press start, you will see how is going through some phases of reading the data, checking the connections and creating the output.
In the end it will read he usernames in here from the forum to produce the html report, this part can take some time, just let the program run till you see final report opening up in your browser.


End result should look something like this: https://makkaraservices.github.io/Pool-of-stake-bounty-checks/ clicking on a user name will take you to the finding details https://makkaraservices.github.io/Pool-of-stake-bounty-checks/Details/1170328.html

 When you present your results put a reference to this thread please. 8)




Code and release version here, i added another button to find connectiond among bitcoin addresses, even segwit.  8)
https://github.com/MakkaraServices/Bounty-Checker


Title: Re: [Program for investigators] Check eth address connections between bounty users
Post by: coinlocket$ on October 08, 2018, 08:51:01 PM
Tried on a virtual machine with windows7 with 3 spreadsheet/bounty

And I got 3 errors

Two gap bounty
https://docs.google.com/spreadsheets/d/16iJbddhuhHs7G0lU4CMTASeVryTR3-RB6uHi3y_EFgg/edit#gid=875949511
Blank result
https://puu.sh/BHQq3/c2d6e15093.png

greentoken bounty
https://docs.google.com/spreadsheets/d/1EfE0Q2JpZWrWQ9JUxPQNXzzecP7mXJANZAE6dmb9E50/edit#gid=1341964714

and

payforblock bounty
https://docs.google.com/spreadsheets/d/14pZOdsaMvTn2dxF7InGyWwMmjGQpb7eTW0InOSPT0Ac/edit#gid=1161037249

The code is

https://puu.sh/BHQxs/fc22a46eca.png

but the result is
https://puu.sh/BHQk7/eaf2a3ff9d.png


Title: Re: [Program for investigators] Check eth address connections between bounty users
Post by: Makkara on October 09, 2018, 04:57:32 AM
there was some "\" too much on the xml, i corrected above as well, just edit as follows

from
Code:
File="Bounties\\\Bitmillex\SpreadSheet\Signature.txt" 
to
Code:
File="Bounties\Bitmillex\SpreadSheet\Signature.txt" 

If you get some other error try to run the data in here https://drive.google.com/open?id=1oVsZbvhMv8T1FtylzMQ7qOedbYLuKrew so we know if everything is in order, you should see a report like this(3 users, 2 connected to 1):
https://makkaraservices.github.io/Bitmillex/

i run twogap for a test this is what i see: https://makkaraservices.github.io/Twogap/  8)


I forgot to say you can create your custom input file as well, instead of using infos from a spreadsheet, like this

Code:
https://bitcointalk.org/index.php?action=profile;u=1
0xaddress
https://bitcointalk.org/index.php?action=profile;u=2
0xaddress1
https://bitcointalk.org/index.php?action=profile;u=3
0xaddress2

Remember you need the api key from etherscan, if you got it, you are ready to get blasted.  8)

When you present your results put a reference to this thread please.



Title: Re: [Program for investigators] Check eth address connections between bounty users
Post by: coinlocket$ on October 09, 2018, 11:18:12 AM
I will try again this evening and I will report here results and questions if I will have some.


Title: Re: [Program for investigators] Check eth address connections between bounty users
Post by: Makkara on October 09, 2018, 06:13:55 PM
I will try again this evening and I will report here results and questions if I will have some.

Im noticing your xml is missing this part below, that is what is complaining about in the error
Code:
OriginalSpreadSheetLink="spreadsheet link"



Title: Re: [Program for investigators] Check eth address connections between bounty users
Post by: coinlocket$ on October 09, 2018, 07:34:10 PM
Tried again with two gap

https://puu.sh/BIlyP/3065636ece.png

https://puu.sh/BIlGW/ebb556e1d7.png

Maybe now I'm doing wrong something with the signature.txt what I need to do exactly?

I create one inside the spreadsheet folder and?

Also on the example file, the link for the spreadsheet is edit#gid but you wrote " substitute replace '/edit#gid=<some_number>' with '/preview?usp=embed_googleplus"


Title: Re: [Program for investigators] Check eth address connections between bounty users
Post by: Makkara on October 09, 2018, 07:43:50 PM
You can try to download the sample data i linked and see if that work, in there you can check how the signature.txt data is supposed to look as well. That error is referring to the xml, but i dont see what is wrong with it at the moment.

You can also share your files so it's easier for me to see what is the problem

EDIT:

you are missing the closing " at the end of the spreadsheet link, that must be it




Also on the example file, the link for the spreadsheet is edit#gid but you wrote " substitute replace '/edit#gid=<some_number>' with '/preview?usp=embed_googleplus"

You need to do this because the spreadsheet is protected and doesn't allow you to copy data from it to paste on your *.txt
The link in the xml is just a reference to the original spreadsheet used in the report


Title: Re: [Program for investigators] Check eth address connections between bounty users
Post by: coinlocket$ on October 09, 2018, 07:50:41 PM
Same error after the "

This is the copy paste xlm

Code:
<?xml version="1.0" encoding="utf-8"?>
<!--Bounty Users Connections-->
<Campaign Name="TWOGAP">
<SpreadSheet Category="Signature" File="Bounties\TWOGAP\SpreadSheet\Signature.txt" OriginalSpreadSheetLink="https://docs.google.com/spreadsheets/d/16iJbddhuhHs7G0lU4CMTASeVryTR3-RB6uHi3y_EFgg/preview?usp=embed_googleplus"
</Campaign>

the bitmillex works in part (we have the .edit link on the sample btw)

https://puu.sh/BImdY/f7b6cef4c5.png


Title: Re: [Program for investigators] Check eth address connections between bounty users
Post by: Makkara on October 09, 2018, 07:56:34 PM
Good, so it's just some small problem i cannot see at the moment. i can show you tomorrow the input data i prepared for twogap.


Title: Re: [Program for investigators] Check eth address connections between bounty users
Post by: coinlocket$ on October 09, 2018, 09:48:59 PM
Ok, I will wait next update then, as a suggestion if possible it would be nice an option to save the eth API.


Title: Re: [Program for investigators] Check eth address connections between bounty users
Post by: Makkara on October 10, 2018, 04:54:50 AM
Ok, I will wait next update then, as a suggestion if possible it would be nice an option to save the eth API.


The *.xml file was not properly formatted <SpreadSheet> section was missing the closing tag /> after the link, this is the version fixed:
Code:
<?xml version="1.0" encoding="utf-8"?>
<!--Bounty Users Connections-->
<Campaign Name="TWOGAP">
<SpreadSheet Category="Signature" File="Bounties\TWOGAP\SpreadSheet\Signature.txt" OriginalSpreadSheetLink="https://docs.google.com/spreadsheets/d/16iJbddhuhHs7G0lU4CMTASeVryTR3-RB6uHi3y_EFgg/preview?usp=embed_googleplus"/>
</Campaign>


To be sure the xml is correct use this(or create an empty template and start to work from that so it's easier):

https://codebeautify.org/xmlvalidator

Empty template:

Code:
<?xml version="1.0" encoding="utf-8"?>
<!--Bounty Users Connections-->
<Campaign Name="Name_Campaign">
<SpreadSheet Category="Category" File="Bounties\Name_Campaign\SpreadSheet\File.txt" OriginalSpreadSheetLink="linkspreadsheetoriginaldata"/>
</Campaign>

OriginalSpreadSheetLink can be any link that shows those people you found were really part of the campaign


There is new release in github, that can save the last etherscan key used


Title: Re: [Program for investigators] Check eth address connections between bounty users
Post by: Parodium on October 10, 2018, 02:46:54 PM
Great work, definitely a great tool for bounty managers.

I recommend that all bounty managers run this tool after their bounty ends, rather than periodically throughout, typically bounty abusers like to send all their tokens to a single master wallet which eventually makes them easy to catch.


Title: Re: [Program for investigators] Check eth address connections between bounty users
Post by: Makkara on October 11, 2018, 09:32:07 AM
This should also be used by anyone to understand what kind of campaign are run by clueless bounty manager and finally help to find and punish abuses, possibly faster


Title: Re: [Program for investigators] Check eth address connections between bounty users
Post by: coinlocket$ on October 11, 2018, 11:50:18 PM
It seems to works now, I will do more test during the weekend.
Need always a manual check in the end since anyone can put other users data and the personal ETH address but this speed up the thing


Title: Re: [Program for investigators] Check eth address connections between bounty users
Post by: buwaytress on October 12, 2018, 06:53:49 AM
Will run this myself on an old list I manually compiled some time ago, would have been useful to have this tool then.

Maybe not for this particular tool but Any chance anyone tried inputting similar data but not using ETH addresses but cross compared to repository of like maybe Bitcoin addresses or even strings of known/marked addresses? Or know of such a tool? Might be useful beyond bounty multis, could this be modified to even be used to track where the washed funds go to AFTER multi abuse?


Title: Re: [Program for investigators] Check eth address connections between bounty users
Post by: Makkara on October 12, 2018, 07:42:37 AM
Will run this myself on an old list I manually compiled some time ago, would have been useful to have this tool then.

Maybe not for this particular tool but Any chance anyone tried inputting similar data but not using ETH addresses but cross compared to repository of like maybe Bitcoin addresses or even strings of known/marked addresses? Or know of such a tool? Might be useful beyond bounty multis, could this be modified to even be used to track where the washed funds go to AFTER multi abuse?

If there is a website providing API to list BTC addresses transactions can be done, i think there is.

For checking where the funds go, is possible for both eth and btc, but it needs a prefixed max number of jumps from addr to addr in input, to avoid infinite loop if somebody covered its tracks very well.


Title: Re: [Program for investigators] Check eth address connections between bounty users
Post by: FIEX on October 12, 2018, 08:51:36 AM
This is great!
Great work Makkara, really hope once this has been finetunned more bounty managers will use it or people who like doing some investigations.

Keep this up Makkara! +1 Merit
Will check this out in a bounty where I'm community manager for the project.

Will post feedback in this thread!


Title: Re: [Program for investigators] Check eth address connections between bounty users
Post by: btcltcdigger on October 12, 2018, 12:06:18 PM
Any plan for a online version?


Title: Re: [Program for investigators] Check eth address connections between bounty users
Post by: Makkara on October 12, 2018, 01:28:14 PM
Any plan for a online version?

Is not a bad idea, i don't have a lot of experience on web development but i suppose this should work with some changes in asp.net.



Will post feedback in this thread!


share your results too  8)


Title: Re: [Program for investigators] Check eth address connections between bounty users
Post by: morvillz7z on October 13, 2018, 02:08:10 PM
I think that a tool like this was much needed, anything that helps prevent scam/cheat or any kind of abuse gets my approval. I'm sure that bounty managers and those who like to catch alts will be very grateful for you did here, as it will definitely make their life easier by saving time and effort.

Good job again and congrats on the new rank.  ;)



Title: Re: [Program for investigators] Check eth address connections between bounty users
Post by: Piggy on October 13, 2018, 06:25:37 PM
Well done, this will make the life of many people easier indeed :)

It may be worth to explore the tracking of washed funds as buwaytress suggests, it may reveal even more than what this program does.


Title: Re: [Program for investigators] Check eth address connections between bounty users
Post by: babo on October 13, 2018, 06:59:44 PM
Great!
Very nice job. Excellent

Very pleased to send my remaining merits (personal)
More when i'm recharged


Title: Re: [Program for investigators] Check eth address connections between bounty users
Post by: Makkara on October 14, 2018, 07:05:39 AM
~
~

~

Glad you like the program. If the time will allow me ill try to improve and add new checks and feature suggested in here. If some user feels like contributing to improve it by coding, you can fork or do a pull request as you like.  8)


Title: Re: [Program for investigators] Check eth address connections between bounty users
Post by: Makkara on October 31, 2018, 01:02:57 PM


Code and release version here, i added another button to find connectiond among bitcoin addresses, even segwit.  8)
https://github.com/MakkaraServices/Bounty-Checker