Forensics on 12HmUEdk3fqz9W4SEf1xjxPqvkGDqAqHyc

[Gleb Gamow]

<for full disclose, I voted yes, but will change the vote if proven wrong>

This tread is designed to conduct forensics on the 12HmUEdk3fqz9W4SEf1xjxPqvkGDqAqHyc BWA that I currently believe belongs to Butterfly Labs (BF Labs Inc./BFL).

Feel free to chime in with your analyses.

#ASKFTC

[Gleb Gamow]

Reserved for determination.

EDIT: I'm pretty sure I nailed it in Post #6 - https://bitcointalk.org/index.php?topic=890785.msg9820795#msg9820795 - that this BWA truly does belong to BFL.

[MrTeal]

From the other thread.

If you look at the wallet with 18Ux and 12Hm addresses, you see a pretty consistent pattern where a hair over 3BTC is transferred to 12Hm (directly from the Eclipse 1Baf mining address in Yellow, a couple hops away from 1Baf in Orange), as well as a bunch of payments of various sizes (in red) from BitPay to 12Hm.

Unless you have evidence otherwise, I would suggest that 12Hm represents a mining payout address for BFL from Eclipse and its BTC1181 was likely from burn in, while the 18Ux was BFL's BitPay withdrawal address and the funds from that likely came from equipment sales. 18Ux was the much larger address though.

An additional note since I (somehow) forgot it before, likely since I've been tracking down the mining addresses tonight. 12Hm is what I would suggest is the new burn in address, as of Sept 10, 2013. It's relatively small peanuts compared to the old burn in address, 12uy (with BTC6252). You can pretty clearly see the patterns of massive income in the fall of 2012 and the bump again in summer 2013 as they test the equipment.

[Gleb Gamow]

First thing of note is the date of the last transaction - 2014-09-11 22:30:04 - seven days prior to the FTC raid on BFL, in spite of the BWA being fairly active up to that timeframe (further noting the 7 day intervals between payouts): https://blockchain.info/address/12HmUEdk3fqz9W4SEf1xjxPqvkGDqAqHyc

[Gleb Gamow]

From the other thread.

If you look at the wallet with 18Ux and 12Hm addresses, you see a pretty consistent pattern where a hair over 3BTC is transferred to 12Hm (directly from the Eclipse 1Baf mining address in Yellow, a couple hops away from 1Baf in Orange), as well as a bunch of payments of various sizes (in red) from BitPay to 12Hm.

Unless you have evidence otherwise, I would suggest that 12Hm represents a mining payout address for BFL from Eclipse and its BTC1181 was likely from burn in, while the 18Ux was BFL's BitPay withdrawal address and the funds from that likely came from equipment sales. 18Ux was the much larger address though.

An additional note since I (somehow) forgot it before, likely since I've been tracking down the mining addresses tonight. 12Hm is what I would suggest is the new burn in address, as of Sept 10, 2013. It's relatively small peanuts compared to the old burn in address, 12uy (with BTC6252). You can pretty clearly see the patterns of massive income in the fall of 2012 and the bump again in summer 2013 as they test the equipment.

And, those ~3 BTC transactions have been fairly consistent since the BWA's creations, as seen here: http://www.walletexplorer.com/address/12HmUEdk3fqz9W4SEf1xjxPqvkGDqAqHyc

That, in spite of it being impossible given the difficulty increases if no further bitcoin miners are added to account for the regular payouts. Also, Josh Zerlan is on record in stating that the payouts are done automatically sans his input, yet these payouts seem to have an ongoing helping hand during the transfer process. (hoping this assessment of mine makes sense)

[Gleb Gamow]

The first ~3 BTC transaction commenced on 2013-09-10 22:07:36 as shown in the following pic: http://www.walletexplorer.com/address/12HmUEdk3fqz9W4SEf1xjxPqvkGDqAqHyc



The last ~3 BTC transaction commenced on 2014-09-11 22:44:23 as shown in the following pic: http://www.walletexplorer.com/address/12HmUEdk3fqz9W4SEf1xjxPqvkGDqAqHyc?page=4



The first major withdraw was on 2013-09-16 21:05:53 for 129.39081211 BTC as shown in the following pic: http://www.walletexplorer.com/address/12HmUEdk3fqz9W4SEf1xjxPqvkGDqAqHyc?page=4



This is that transaction: http://www.walletexplorer.com/txid/46f66eb07466b3fe84d478906fc120248eecfb7ff0059dc729a2fe3d67a626b9 (depicted in part due to its size - please visit the link provided to see its entirety)



In case you missed it, the BTC from 12HmUEdk3fqz9W4SEf1xjxPqvkGDqAqHyc went to http://www.walletexplorer.com/address/1QAHVyRzkmD4j1pU5W89htZ3c6D6E7iWDs, the same exact BWA that the FTC had BFL transfer the remaining BTC out of for safe keeping, for BFL was in the process of liquidating them bitcoins, currently unaccounted for by the #ASKFTC or #ASKIRS.

Since the FTC doesn't have control of these funds, then Josh Zerlan, Sonny Vleisides, et al., has a lot of 'splainin' to do for lying under oath AND holding back monies that the receiver is getting paid for to recover.

[Gleb Gamow]

One more thing. The 12HmUEdk3fqz9W4SEf1xjxPqvkGDqAqHyc BWA belongs to BFL's wallet http://www.walletexplorer.com/wallet/00237e09a5eed5df, of which currently has an overall 57.23015646 BTC balance, this wallet consisting of a myriad BWA and not just 12HmUEdk3fqz9W4SEf1xjxPqvkGDqAqHyc.

#ASKFTC

[Gleb Gamow]

One more thing, #ASKFTC: Since you didn't find it, and BFL didn't provide it, and I'm the one that brought it to your attention, I'm submitting a 10% claim on the balance of https://blockchain.info/address/12HmUEdk3fqz9W4SEf1xjxPqvkGDqAqHyc: $20,363.92. That equates to $2,036.39.

Furthermore, since I'm the one who first brought attention to http://www.walletexplorer.com/address/1QAHVyRzkmD4j1pU5W89htZ3c6D6E7iWDs not being owned by HashTrade, but BFL, hence the receiver taking control of the account, I'm entitled to 10% of at least 24279.00350892 BTC, equating to (fuck me, now I have to do maths) $102,326.29 at the exchange rate on September 18, 2014.

#ASKFTC

[Chopperman]

Chopperman was led to believe that the 10% finders fee from the IRS is 10% of any recovered tax payment that the IRS finds was unpaid, so not 10% of the total amount uncovered.

Otherwise, mazel tov!

[MrTeal]

And, those ~3 BTC transactions have been fairly consistent since the BWA's creations, as seen here: http://www.walletexplorer.com/address/12HmUEdk3fqz9W4SEf1xjxPqvkGDqAqHyc

That, in spite of it being impossible given the difficulty increases if no further bitcoin miners are added to account for the regular payouts. Also, Josh Zerlan is on record in stating that the payouts are done automatically sans his input, yet these payouts seem to have an ongoing helping hand during the transfer process. (hoping this assessment of mine makes sense)

That's not exactly true, those payouts are consistent with a relatively fixed amount of hardware running and the payout decreasing over time. What is happening is that his payout threshold is set to 3BTC, so every time the balance clicks over 3BTC it gets a payout.
If you look at the BTC transferred in per day you can see that.
https://blockchain.info/charts/received-per-day?timespan=2year&showDataPoints=false&daysAverageString=1&show_header=true&scale=0&address=12HmUEdk3fqz9W4SEf1xjxPqvkGDqAqHyc

It starts off with a massive income per day, dropping off sharply in Oct last year as the hashrate was exploding. Soon it was 6-9 BTC/day, then 3-6BTC/day, then 3BTC most days, 3BTC every couple days, 3BTC/week, etc. Towards the end of spring/early summer it was earning very little, as you'd expect whatever 65nm hardware they still had to do. Then, in July they get in a bunch of Monarchs for burn in and payouts pick up, starting to space a little further apart again as difficulty rises.

[Cablez]

That is very damning news.  Let us hope a crucifixion takes place at BFL headquarters.

[MrTeal]

Reserved for determination.

EDIT: I'm pretty sure I nailed it in Post #6 - https://bitcointalk.org/index.php?topic=890785.msg9820795#msg9820795 - that this BWA truly does belong to BFL.

You should probably show some evidence that the wallet listed actually does belong to BFL.

[Gleb Gamow]

And, those ~3 BTC transactions have been fairly consistent since the BWA's creations, as seen here: http://www.walletexplorer.com/address/12HmUEdk3fqz9W4SEf1xjxPqvkGDqAqHyc

That, in spite of it being impossible given the difficulty increases if no further bitcoin miners are added to account for the regular payouts. Also, Josh Zerlan is on record in stating that the payouts are done automatically sans his input, yet these payouts seem to have an ongoing helping hand during the transfer process. (hoping this assessment of mine makes sense)

That's not exactly true, those payouts are consistent with a relatively fixed amount of hardware running and the payout decreasing over time. What is happening is that his payout threshold is set to 3BTC, so every time the balance clicks over 3BTC it gets a payout.
If you look at the BTC transferred in per day you can see that.
https://blockchain.info/charts/received-per-day?timespan=2year&showDataPoints=false&daysAverageString=1&show_header=true&scale=0&address=12HmUEdk3fqz9W4SEf1xjxPqvkGDqAqHyc

It starts off with a massive income per day, dropping off sharply in Oct last year as the hashrate was exploding. Soon it was 6-9 BTC/day, then 3-6BTC/day, then 3BTC most days, 3BTC every couple days, 3BTC/week, etc. Towards the end of spring/early summer it was earning very little, as you'd expect whatever 65nm hardware they still had to do. Then, in July they get in a bunch of Monarchs for burn in and payouts pick up, starting to space a little further apart again as difficulty rises.

https://blockchain.info/charts/received-per-day?timespan=2year&showDataPoints=false&daysAverageString=1&show_header=true&scale=0&address=12HmUEdk3fqz9W4SEf1xjxPqvkGDqAqHyc

Visualized