[Program for investigators] Check eth and btc address connections in bounty

[Makkara]

I made this program few months back where you give in input the spreadsheets data of a bounty and give out a report in html which shows if any transaction between partecipants in the same category is found.


Repository with source code https://github.com/MakkaraServices/Bounty-Checker

Compiled Version https://github.com/MakkaraServices/Bounty-Checker/releases

Sample input https://drive.google.com/open?id=1oVsZbvhMv8T1FtylzMQ7qOedbYLuKrew

The program run under Windows, you need to install and get:
   

• Visual Studio 2017 Community Edition: https://visualstudio.microsoft.com/downloads/
• Get an API Key from Etherscan by registering in there: https://etherscan.io/apis

For the input data (example)
Once you are set and can compile the application, you need to create the following folder and files structure at the same level of the exe:
   

• Bounties: this is where the data will be read

   
Under Bounties you create a folder named after the bounty:

•    Bitmillex

Inside create the xml file:
          

• BitmillexSpreadSheet.xml this must always be name of the bounty + “Spreadsheet.xlm”

Copy this code inside:

Code:

<?xml version="1.0" encoding="utf-8"?>
<!--Bounty Users Connections-->
<Campaign Name="Bitmillex">
<SpreadSheet Category="Signature" File="Bounties\Bitmillex\SpreadSheet\Signature.txt" OriginalSpreadSheetLink="https://docs.google.com/spreadsheets/d/1P9NwmuDwuG7HNZHLvKFuFxQRBb7Je8fHWuDEwzOTWHA/edit#gid=57298040"/>
</Campaign>

Create a folder named "SpreadSheet", now open the Spreadsheet link specified in the xml and substitute replace '/edit#gid=<some_number>' with '/preview?usp=embed_googleplus' at the end of the link, copy and paste the rows with the user informations all inside a file named Signature.txt and place it under SpreadSheet folder

You can do the same thing for other bounty categories, the only requirement is that the user profile link must come before the eth address.

Here is some input data for the example above, just copy the folder Bounties under the exe path https://drive.google.com/open?id=1oVsZbvhMv8T1FtylzMQ7qOedbYLuKrew to try it


You can create your custom input file as well, instead of using infos from a spreadsheet, like this

Code:

https://bitcointalk.org/index.php?action=profile;u=1
0xaddress
https://bitcointalk.org/index.php?action=profile;u=2
0xaddress1
https://bitcointalk.org/index.php?action=profile;u=3
0xaddress2

The output html with all the information will appear in the bounty folder Bitmillex (index.html and Details folder contain everything)

Use the app
To run the application simply press start, you will see how is going through some phases of reading the data, checking the connections and creating the output.
In the end it will read he usernames in here from the forum to produce the html report, this part can take some time, just let the program run till you see final report opening up in your browser.


End result should look something like this: https://makkaraservices.github.io/Pool-of-stake-bounty-checks/ clicking on a user name will take you to the finding details https://makkaraservices.github.io/Pool-of-stake-bounty-checks/Details/1170328.html

 When you present your results put a reference to this thread please.

Bitcoin update

Code and release version here, i added another button to find connectiond among bitcoin addresses, even segwit.  
https://github.com/MakkaraServices/Bounty-Checker

[coinlocket$]

Tried on a virtual machine with windows7 with 3 spreadsheet/bounty

And I got 3 errors

Two gap bounty
https://docs.google.com/spreadsheets/d/16iJbddhuhHs7G0lU4CMTASeVryTR3-RB6uHi3y_EFgg/edit#gid=875949511
Blank result


greentoken bounty
https://docs.google.com/spreadsheets/d/1EfE0Q2JpZWrWQ9JUxPQNXzzecP7mXJANZAE6dmb9E50/edit#gid=1341964714

and

payforblock bounty
https://docs.google.com/spreadsheets/d/14pZOdsaMvTn2dxF7InGyWwMmjGQpb7eTW0InOSPT0Ac/edit#gid=1161037249

The code is



but the result is

[Makkara]

there was some "\" too much on the xml, i corrected above as well, just edit as follows

from

Code:

File="Bounties\\\Bitmillex\SpreadSheet\Signature.txt" 

to

Code:

File="Bounties\Bitmillex\SpreadSheet\Signature.txt" 

If you get some other error try to run the data in here https://drive.google.com/open?id=1oVsZbvhMv8T1FtylzMQ7qOedbYLuKrew so we know if everything is in order, you should see a report like this(3 users, 2 connected to 1):
https://makkaraservices.github.io/Bitmillex/

i run twogap for a test this is what i see: https://makkaraservices.github.io/Twogap/  


I forgot to say you can create your custom input file as well, instead of using infos from a spreadsheet, like this

Code:

https://bitcointalk.org/index.php?action=profile;u=1
0xaddress
https://bitcointalk.org/index.php?action=profile;u=2
0xaddress1
https://bitcointalk.org/index.php?action=profile;u=3
0xaddress2

Remember you need the api key from etherscan, if you got it, you are ready to get blasted.  

When you present your results put a reference to this thread please.

[coinlocket$]

I will try again this evening and I will report here results and questions if I will have some.

[Makkara]

I will try again this evening and I will report here results and questions if I will have some.

Im noticing your xml is missing this part below, that is what is complaining about in the error

Code:

OriginalSpreadSheetLink="spreadsheet link"

[coinlocket$]

Tried again with two gap





Maybe now I'm doing wrong something with the signature.txt what I need to do exactly?

I create one inside the spreadsheet folder and?

Also on the example file, the link for the spreadsheet is edit#gid but you wrote " substitute replace '/edit#gid=<some_number>' with '/preview?usp=embed_googleplus"

[Makkara]

You can try to download the sample data i linked and see if that work, in there you can check how the signature.txt data is supposed to look as well. That error is referring to the xml, but i dont see what is wrong with it at the moment.

You can also share your files so it's easier for me to see what is the problem

EDIT:

you are missing the closing " at the end of the spreadsheet link, that must be it

Also on the example file, the link for the spreadsheet is edit#gid but you wrote " substitute replace '/edit#gid=<some_number>' with '/preview?usp=embed_googleplus"

You need to do this because the spreadsheet is protected and doesn't allow you to copy data from it to paste on your *.txt
The link in the xml is just a reference to the original spreadsheet used in the report

[coinlocket$]

Same error after the "

This is the copy paste xlm

Code:

<?xml version="1.0" encoding="utf-8"?>
<!--Bounty Users Connections-->
<Campaign Name="TWOGAP">
<SpreadSheet Category="Signature" File="Bounties\TWOGAP\SpreadSheet\Signature.txt" OriginalSpreadSheetLink="https://docs.google.com/spreadsheets/d/16iJbddhuhHs7G0lU4CMTASeVryTR3-RB6uHi3y_EFgg/preview?usp=embed_googleplus"
</Campaign>

the bitmillex works in part (we have the .edit link on the sample btw)

[Makkara]

Good, so it's just some small problem i cannot see at the moment. i can show you tomorrow the input data i prepared for twogap.

[coinlocket$]

Ok, I will wait next update then, as a suggestion if possible it would be nice an option to save the eth API.

[Makkara]

Ok, I will wait next update then, as a suggestion if possible it would be nice an option to save the eth API.

The *.xml file was not properly formatted <SpreadSheet> section was missing the closing tag /> after the link, this is the version fixed:

Code:

<?xml version="1.0" encoding="utf-8"?>
<!--Bounty Users Connections-->
<Campaign Name="TWOGAP">
<SpreadSheet Category="Signature" File="Bounties\TWOGAP\SpreadSheet\Signature.txt" OriginalSpreadSheetLink="https://docs.google.com/spreadsheets/d/16iJbddhuhHs7G0lU4CMTASeVryTR3-RB6uHi3y_EFgg/preview?usp=embed_googleplus"/>
</Campaign>

To be sure the xml is correct use this(or create an empty template and start to work from that so it's easier):

https://codebeautify.org/xmlvalidator

Empty template:

Code:

<?xml version="1.0" encoding="utf-8"?>
<!--Bounty Users Connections-->
<Campaign Name="Name_Campaign">
<SpreadSheet Category="Category" File="Bounties\Name_Campaign\SpreadSheet\File.txt" OriginalSpreadSheetLink="linkspreadsheetoriginaldata"/>
</Campaign>

OriginalSpreadSheetLink can be any link that shows those people you found were really part of the campaign


There is new release in github, that can save the last etherscan key used

[Parodium]

Great work, definitely a great tool for bounty managers.

I recommend that all bounty managers run this tool after their bounty ends, rather than periodically throughout, typically bounty abusers like to send all their tokens to a single master wallet which eventually makes them easy to catch.

[Makkara]

This should also be used by anyone to understand what kind of campaign are run by clueless bounty manager and finally help to find and punish abuses, possibly faster

[coinlocket$]

It seems to works now, I will do more test during the weekend.
Need always a manual check in the end since anyone can put other users data and the personal ETH address but this speed up the thing

[buwaytress]

Will run this myself on an old list I manually compiled some time ago, would have been useful to have this tool then.

Maybe not for this particular tool but Any chance anyone tried inputting similar data but not using ETH addresses but cross compared to repository of like maybe Bitcoin addresses or even strings of known/marked addresses? Or know of such a tool? Might be useful beyond bounty multis, could this be modified to even be used to track where the washed funds go to AFTER multi abuse?

[Makkara]

Will run this myself on an old list I manually compiled some time ago, would have been useful to have this tool then.

Maybe not for this particular tool but Any chance anyone tried inputting similar data but not using ETH addresses but cross compared to repository of like maybe Bitcoin addresses or even strings of known/marked addresses? Or know of such a tool? Might be useful beyond bounty multis, could this be modified to even be used to track where the washed funds go to AFTER multi abuse?

If there is a website providing API to list BTC addresses transactions can be done, i think there is.

For checking where the funds go, is possible for both eth and btc, but it needs a prefixed max number of jumps from addr to addr in input, to avoid infinite loop if somebody covered its tracks very well.

[FIEX]

This is great!
Great work Makkara, really hope once this has been finetunned more bounty managers will use it or people who like doing some investigations.

Keep this up Makkara! +1 Merit
Will check this out in a bounty where I'm community manager for the project.

Will post feedback in this thread!

[btcltcdigger]

Any plan for a online version?

[Makkara]

Any plan for a online version?

Is not a bad idea, i don't have a lot of experience on web development but i suppose this should work with some changes in asp.net.

Will post feedback in this thread!

share your results too 

[morvillz7z]

I think that a tool like this was much needed, anything that helps prevent scam/cheat or any kind of abuse gets my approval. I'm sure that bounty managers and those who like to catch alts will be very grateful for you did here, as it will definitely make their life easier by saving time and effort.

Good job again and congrats on the new rank.