Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- The owner of the address 0x8Ad6aC7d1A042831A6e5bda61D9Abd245DF246d0 is Aaron Shames
- Aaron Shames is the founder and CEO of crypto projects @BlueBnbXyz (a DeFi platform on BNB Chain) and @BookMemeBsc (a meme coin $BOOK on BNB Smart Chain). He has also previously led other projects such as BOMB Money and PegHub Ecosystem, where he openly identifies himself by this name.
- His social media pages are:
- https://www.linkedin.com/in/aaronshames/
- https://x.com/AaronShames
- https://github.com/cryptoaaron
- According to the Arkm platform (https://intel.arkm.com/explorer/address/0x0D8e060CA2D847553ec14394ee6B304623E0d1d6), Aaron Shames officially owns the address 0x0D8e060CA2D847553ec14394ee6B304623E0d1d6, as well as the blockchain name cryptoaaron.eth.
- Direct evidence
- 1. The address 0x8Ad6aC7d1A042831A6e5bda61D9Abd245DF246d0 is linked to the address 0x2347bA6939476B0BE50f4E8Ba7C2419555555225 (book.bnb), with a subsequent connection to the address 0x111111f26ab123764Da895e1627bf9Ba0b000a97 (bluebnb.bnb), which created contracts for projects founded by Mr. Aaron Shames.
- The address 0x8Ad6aC7d1A042831A6e5bda61D9Abd245DF246d0 made a deposit to ChangeNOW Deposit address 0xdddBF16dBA19AE6D4dF514445FCB18f733E703Ca in the amount of 0. 19 ETH. This occurred in transaction https://basescan.org/tx/0x955dd1ec0339d6a6eb0d79b92a33e03cb7c073712efca8790ba4ef4c1dcfe888, which took place on Oct-20-2025 07:34:15 PM +UTC. At the time of this transaction, 0.19 ETH was equivalent to approximately $740.
- The corresponding withdrawal from ChangeNOW can be seen in transaction https://bscscan.com/tx/0xfea93e68f54feddc3b5a15ab941c3923037aefb813ba46e0e9a930df2690d370, which took place on Oct -20-2025 07:36:40 PM UTC, where the recipient of 0.678991 BNB (at the time of this transaction, this amounted to $734.31) is the address 0x2347bA6939476B0BE50f4E8Ba7C2419555555225 (book.bnb (MintStakeShare: Deployer)).
- As we can see, after the address 0x8Ad6aC7d1A042831A6e5bda61D9Abd245DF246d0 made a deposit for the ChangeNOW exchange, within approximately 2.5 minutes, an exchange transaction took place, resulting in 0x2347bA6939476B0BE50f4E8Ba7C2419555555225 received the equivalent of this transaction, minus the ChangeNOW commission.
- This address, 0x2347bA6939476B0BE50f4E8Ba7C2419555555225, which has the blockchain name book.bnb and is the official developer of the MintStakeShare project (https://www.mintstakeshare.com/), is also present in other networks. In particular, the address 0x2347bA6939476B0BE50f4E8Ba7C2419555555225 is also present in the main Polygon network, where it received its initial funding from the address 0x0D8e060CA2D847553ec14394ee6B304623E0d1d6, which officially belongs to Aaron Shames (https://intel.arkm.com/explorer/address/0x0D8e060CA2D847553ec14394ee6B304623E0d1d6). This occurred in transaction https://polygonscan.com/tx/0x731ae9dced172d19fb2b154fdf9d5cc2910efe73d44ffd1d6c211b4c6c565ad3.
- Similarly, it was the address 0x2347bA6939476B0BE50f4E8Ba7C2419555555225, which bears the blockchain name book.bnb, financed the initial Gas for the address 0x111111f26ab123764Da895e1627bf9Ba0b000a97 (bluebnb.bnb), which created the contract https://bscscan.com/address/0xa90298e5B1203A2DD0006A75EABE158989C406Fb, belonging to the project https://www.bluebnb.xyz/, whose founder is Mr. Aaron Shames, as indicated in the personal accounts https://x.com/AaronShames and https://github.com/cryptoaaron. This initial Gas funding occurred in the following transactions: https://bscscan.com/tx/0x4dbca91e5b3483b87cb75597cb0d9f7c65417fb75e1cf16d49932ad037565fcd and https://basescan.org/tx/0xc30e94ab6c7325eb4eaf35946cec2d785da27ebb8e4de9b463f04ae4a42043bb
- 2. Connection between address 0x8Ad6aC7d1A042831A6e5bda61D9Abd245DF246d0 and address Solana Cz1752J9CnTHHkLyC9ggdUedyFqAmNXt3qQBUSrxznsZ
- The address 0x8Ad6aC7d1A042831A6e5bda61D9Abd245DF246d0 made several other deposits to ChangeNOW, performing ETH exchange transactions. However, unlike the previous point (#1), the owner of the address 0x8Ad6aC7d1A042831A6e5bda61D9Abd245DF246d0 made an exchange in the other direction - an ETH/SOL exchange. In other words, they transferred funds to another blockchain.
- In these exchanges, the main recipient of funds (SOL) on the Solana blockchain is the address Cz1752J9CnTHHkLyC9ggdUedyFqAmNXt3qQBUSrxznsZ (https://solscan.io/account/Cz1752J9CnTHHkLyC9ggdUedyFqAmNXt3qQBUSrxznsZ), which is designated as "dbljerker" on Pump.fun on the Arkh platform (https://intel.arkm.com/explorer/address/Cz1752J9CnTHHkLyC9ggdUedyFqAmNXt3qQBUSrxznsZ).
- So, what exchange transactions did the address 0x8Ad6aC7d1A042831A6e5bda61D9Abd245DF246d0 make on the ChangeNOW exchange, and how is this related to the recipient of the funds Cz1752J9CnTHHkLyC9ggdUedyFqAmNXt3qQBUSrxznsZ ("dbljerker")?
- 2.1. (Oct-16-2025 11:46:39 PM +UTC) Transaction https://basescan.org/tx/0x948c078ccac90d08afe5f4f829053c418c39ca42f890018be31f56dfd2f2033a, in which the address 0x8Ad6aC7d1A042831A6e5bda61D9Abd245DF246d0 made a deposit of 0.08 ETH (at the time of this transaction, this was equivalent to approximately $311.63) to the ChangeNOW deposit address 0x7CE03395B61ADc66af1A43CDff63aE55eD580f45.
- The withdrawal from ChangeNOW is reflected in the transaction (23:49:14 Oct 16, 2025 UTC) https://solscan.io/tx/2ZkdSLST3aUiiufzHcWn1eRhaYvBSzxhNSBXGV75L5PwgVETaDgUWo4w7b5cqbXWHxUfPcPYQbCubKkViKKoaME4, which occurred 2.5 minutes after the start of this exchange operation. As a result of this transaction, the address Cz1752J9CnTHHkLyC9ggdUedyFqAmNXt3qQBUSrxznsZ ("dbljerker"), on the Solana blockchain, received 1.67205925 SOL from ChangeNOW (at the time of this transaction, this was equivalent to $309.02).
- Considering the time of the exchange transaction (about 2.5 minutes), as well as the fact that the dollar difference between the ETH sent for exchange and the SOL received is only a small percentage, which is equivalent to the ChangeNOW commission, it can be concluded that in this exchange transaction, the recipient of the funds is the address Cz1752J9CnTHHkLyC9ggdUedyFqAmNXt3qQBUSrxznsZ ("dbljerker").
- 2.2. (Oct-16-2025 10:51:43 PM +UTC) Transaction https://basescan.org/tx/0x35a05050bd8c5351baa0af98507c8a0ed6d9b6c805c169eaf369ab3244a1b76a, in which the address 0x8Ad6aC7d1A042831A6e5bda61D9Abd245DF246d0 made a deposit of 0.055 ETH (at the time of this transaction, this was equivalent to approximately $214. 25) to the ChangeNOW deposit address 0x83dCEea15bc4176D65bCE786479dD8f10a27F339.
- The withdrawal from ChangeNOW is reflected in the transaction (22:54:19 Oct 16, 2025 UTC) https://solscan.io/tx/37X9npxLU1LWqHmf3AS1yAW9AEkLB5wAwXGbUjCPFwB31RFGeiguqXBSxHjz2v4odixmSLszsDC66UFAMmzi3vJw , which occurred 2.5 minutes after the start of this exchange operation. As a result of this transaction, the address Cz1752J9CnTHHkLyC9ggdUedyFqAmNXt3qQBUSrxznsZ ("dbljerker"), on the Solana blockchain, received 1.14743992 SOL from ChangeNOW (at the time of this transaction, this was equivalent to $212.06).
- As in the previous case (#2.1), considering the time of the exchange transaction (about 2.5 minutes), as well as the fact that the dollar difference between the ETH sent for exchange and the SOL received is only a small percentage, which is equivalent to the ChangeNOW commission, it can be argued that in this exchange transaction, the recipient of the funds is the address Cz1752J9CnTHHkLyC9ggdUedyFqAmNXt3qQBUSrxznsZ ("dbljerker").
- 2.3. (Oct-16-2025 10:37:29 PM +UTC) Transaction https://basescan.org/tx/0x7c80ceefcff2c432c481bc9fda9d3c758275f9de04f9592c05db3be2a5515591, in which the address 0x8Ad6aC7d1A042831A6e5bda61D9Abd245DF246d0 made a deposit of 0.08 ETH (at the time of this transaction, this was equivalent to approximately $311.63) to the ChangeNOW deposit address 0x96b3b32ecBed5A3051203cF063e172E12E081a19.
- The withdrawal from ChangeNOW is reflected in the transaction (22:40:03 Oct 16, 2025 UTC) https://solscan.io/tx/45PtrHBtkD7CL3RVdzNtWLnyYz7fYA4s1EFcWju4vQacmnfEh3Sz1ywPyiACm4PKgqfdnLyQsasHdTwyF92TZDA9, which occurred 2.5 minutes after the start of this exchange operation. As a result of this transaction, the address Cz1752J9CnTHHkLyC9ggdUedyFqAmNXt3qQBUSrxznsZ ("dbljerker"), on the Solana blockchain, received 1.66383046 SOL from the ChangeNOW exchange (at the time of this transaction, this was equivalent to $307.5).
- As in the previous two cases (#2.1, #2.2), considering the time of the exchange transaction (about 2.5 minutes), as well as the fact that the dollar difference between the ETH sent for exchange and the SOL received is only a small percentage, which is equivalent to the ChangeNOW commission, it can be argued that in this exchange transaction, the recipient of the funds is the address Cz1752J9CnTHHkLyC9ggdUedyFqAmNXt3qQBUSrxznsZ ("dbljerker").
- 2.4. (Oct-16-2025 10:00:37 PM +UTC) Transaction https://basescan.org/tx/0x20f50f135f6ab22cb8ff9ff3819ef22e6b43ce69d011613b9e6211c493582e8e, in which the address 0x8Ad6aC7d1A042831A6e5bda61D9Abd245DF246d0 made a deposit of 0.07 ETH (at the time of this transaction, this was equivalent to approximately $272.68) to the ChangeNOW deposit address 0xB4aEAcc30679B2B38B12055D0E0E55Dec1e383dF.
- The withdrawal from ChangeNOW is reflected in the transaction (22:03:12 Oct 16, 2025 UTC) https://solscan.io/tx/2qH71F9NcH7774sxswtwnaCHvSGiDc6pZ4uPu8tGLZbqtQYet17b4p4q7PPR9jSgGYyaiNJhiHy6tHUHFkpRPPNd, which occurred 2.5 minutes after the start of this exchange operation. As a result of this transaction, the address Cz1752J9CnTHHkLyC9ggdUedyFqAmNXt3qQBUSrxznsZ ("dbljerker"), on the Solana blockchain, received 1.45149956 SOL from the ChangeNOW exchange (at the time of this transaction, this was equivalent to $268.26).
- As in the previous three cases (#2.1, #2.2, #2.3), considering the time of the exchange transaction (about 2.5 minutes), as well as the fact that the dollar difference between the ETH sent for exchange and the SOL received is only a small percentage, which is equivalent to the ChangeNOW commission, it can be argued that in this exchange transaction, the recipient of the funds is the address Cz1752J9CnTHHkLyC9ggdUedyFqAmNXt3qQBUSrxznsZ ("dbljerker").
- 2.5. (Oct-16-2025 09:42:05 PM +UTC) Transaction https://basescan.org/tx/0xe7e7ac17db7dac2e658cea14ed10da4daf9fb7459598c99fe1d53034dafc3b38, in which the address 0x8Ad6aC7d1A042831A6e5bda61D9Abd245DF246d0 made a deposit of 0.06 ETH (at the time of this transaction, this was equivalent to approximately $233.72) to the ChangeNOW deposit address 0x5e7447779C3Fe73BbC4D06d43532AA55B6560Fcb.
- The withdrawal from ChangeNOW is reflected in the transaction (21:44:38 Oct 16, 2025 UTC) https://solscan.io/tx/ZBCe9FuK3GX6iGX7cwpP13nBZcbmg8jiX6j4T9MXBcTu1NDpBrRcZFFPV5mQCVWtdd1CtRX3GT5R2hGW64Eca36, which occurred 2.5 minutes after the start of this exchange operation. As a result of this transaction, the address Cz1752J9CnTHHkLyC9ggdUedyFqAmNXt3qQBUSrxznsZ ("dbljerker"), on the Solana blockchain, received 1.24531753 SOL from the ChangeNOW exchange (at the time of this transaction, this was equivalent to $230.15).
- As in the previous four cases (#2.1, #2.2, #2.3, #2.4), considering the time of the exchange transaction (about 2.5 minutes), as well as the fact that the dollar difference between the ETH sent for exchange and the SOL received is only a small percentage, which is equivalent to the ChangeNOW commission, it can be argued that in this exchange transaction, the recipient of the funds is the address Cz1752J9CnTHHkLyC9ggdUedyFqAmNXt3qQBUSrxznsZ ("dbljerker").
- Thus, the address 0x8Ad6aC7d1A042831A6e5bda61D9Abd245DF246d0, which is designated in this bounty as the one being sought, carried out 5 ETH/SOL exchange transactions, and each of these five exchange transactions had the same SOL recipient address-the address Cz1752J9CnTHHkLyC9ggdUedyFqAmNXt3qQBUSrxznsZ ("dbljerker"), which is listed on https://intel.arkm.com/explorer/address/Cz1752J9CnTHHkLyC9ggdUedyFqAmNXt3qQBUSrxznsZ as "dbljerker" on Pump.fun.
- 3. Connection between the address Cz1752J9CnTHHkLyC9ggdUedyFqAmNXt3qQBUSrxznsZ ("dbljerker") and the address 0x111111f26ab123764Da895e1627bf9Ba0b000a97 (bluebnb.bnb), which is related to projects founded by Mr. Aaron Shames, as well as directly with the address 0x0D8e060CA2D847553ec14394ee6B304623E0d1d6 (cryptoaaron.eth), which, according to https://intel.arkm.com/explorer/address/0x0D8e060CA2D847553ec14394ee6B304623E0d1d6, belongs to Mr. Aaron Shames.
- 3.1. The Solana address Cz1752J9CnTHHkLyC9ggdUedyFqAmNXt3qQBUSrxznsZ ("dbljerker") is closely linked to the Solana address E4vtjNHV9HB6vSDkjSboebkgwscni6VpqKcQhJkaWYzQ. This mutual connection is found in the execution of mutual transactions between them. These mutual transactions between these two addresses are the following outgoing and incoming transactions, in which these addresses transfer funds to each other. Now we will list these mutual transfers between these two addresses:
- 3.1.1. Cz1752J9CnTHHkLyC9ggdUedyFqAmNXt3qQBUSrxznsZ for E4vtjNHV9HB6vSDkjSboebkgwscni6VpqKcQhJkaWYzQ:
- - https://intel.arkm.com/explorer/tx/yjvkXB3Fw87Do1Cfg4yFAJfrTauzq2RSSV5ew9SPdvfJJvZmqxwY2cLmtsqqJ31q8JNHVtUzbHgHZjMBUzSEsEM
- - https://intel.arkm.com/explorer/tx/2qpnLyVVbhCu9H7tSyXCtz4BaWspjEgNU3NDuPhMrkjvXnJxkjVgJbNqWiye8CQy6zQ1bQp6sS6ugDFWWhDYKknG
- - https://intel.arkm.com/explorer/tx/55Luwf6J61QFThkN7ohsjRN3wwRvd9qHDjaujDbY8Czhp1jnyzW9T61KyLFybxKJQYe5KhuNMb2k6FzUe1nMJdig
- - https://intel.arkm.com/explorer/tx/2LJwxX6GB6u1nKG4Am15tes9jJrJ5FFbCDBWc7wEHe1YfotnAy1JJ8gn2SrMzqAyh3me68n8NfawX1hEjCMPwh74
- - https://intel.arkm.com/explorer/tx/49SuiVBqpkDNntT4jtDt9tGP5wS516hozeYcHGQMgSGLJkWZN69TqiGXpA5MUx61WinG7ZVe98gbQ9VkitN4Mt6H
- - https://intel.arkm.com/explorer/tx/4hsKfnQ2ByqvVY4RKPbuSefV52zv3jfveLtz13nJ7AD3PxWCSURCkQyirZiD3GgvbTX195pCAF1d9WEeJRTomaJ3
- - https://intel.arkm.com/explorer/tx/4NFEKnnP8caLnVdX4AewS7Fp28nRKcHUMLhEd1psyAr8MspyvuJL6qLetzmbSQtNWa29wBgt33KibMJTvxnuGm9A
- - https://intel.arkm.com/explorer/tx/4WLxVoHyR1T1GTGheve1ozFwcHKUWATY9bPh6wd4feDNU1zq4MYo3BaWrtvcRHsK2MGrv327G2oZiG5iP7ggq8nB
- - https://intel.arkm.com/explorer/tx/2jJ4H2xFg7toATveRpzyhBLDpwi2L7SxUvgTyCq19ATmNbeGSphe8i77rbZiFUgkS5CG8S2QwQLLB6Y6ZhjnLLZK
- - https://intel.arkm.com/explorer/tx/3sFTSYJJhesWZRP1RTcdW2nwtADbKPRb6ZPgZye2ccHgWxX8gk8VagkZgxWArxV8WURJbfnhHntmX85hyZ58XgXe
- - https://intel.arkm.com/explorer/tx/5JtUsqLAsPRjzE64dhHiRPrmgSF1ZBUzP515Q6w768ezGrHXnZf1MiXUyNdHsJKuaKZE3rvYsSx4Zufxbuoq1a3k
- - https://intel.arkm.com/explorer/tx/431y3zifzyMBo3SjFq6LXFq9njp52C5LJ1wsc2mWKKP73iLawmhprsF3trx8PAWpW1fk1SzhWGb7znzvdqxSYQv9
- - https://intel.arkm.com/explorer/tx/4ZoubSe9LjkW8tqotA4CEpSLubQivoeUi5X9X7GrKcKM75waxwFeHgnkadaXSjYNF8j36yNq311bRsiJXTm9To9s
- - https://intel.arkm.com/explorer/tx/4ZoubSe9LjkW8tqotA4CEpSLubQivoeUi5X9X7GrKcKM75waxwFeHgnkadaXSjYNF8j36yNq311bRsiJXTm9To9s
- - https://intel.arkm.com/explorer/tx/3UKd6PrV49N2NNGZL3fwbeMgSpwakBBz5Ten33CMJ76GyiCuMFbSZAYJm5QsoftFcQEQ7NAgRz6gNbavQkPYAT5U
- - https://intel.arkm.com/explorer/tx/2nP1NpXELEatE4mKMGTTNYwkQpckSVQxjgChziX45nVTgfq6AijcvaK69JCy1nC2j5u1CGezJaDge11LKrbSmLe6
- - As well as other transactions. The total amount of transactions for the transfer of funds Cz1752J9CnTHHkLyC9ggdUedyFqAmNXt3qQBUSrxznsZ for E4vtjNHV9HB6vSDkjSboebkgwscni6VpqKcQhJkaWYzQ is 120 transactions.
- 3.1.2. E4vtjNHV9HB6vSDkjSboebkgwscni6VpqKcQhJkaWYzQ for Cz1752J9CnTHHkLyC9ggdUedyFqAmNXt3qQBUSrxznsZ:
- - https://intel.arkm.com/explorer/tx/5F3zfL3MH2KywSe4ZYBPedjxvb3W2nZTueeXG23s7qxyESiWyVt5daCss57C4DH11SW56U4qAY4nufRSMJVeicjZ
- - https://intel.arkm.com/explorer/tx/5LSVSCSc7jLMEoFijpLw5biytx8TxAifnvTdLKKpLLwqSaLmeZLx4KvVY5U9eiaJYtPxfZYRmSQ9W4jpGhMqs86S
- - https://intel.arkm.com/explorer/tx/42WTSpJkEn7gT7m3TYyBWrE8aCNgyi3GhCHD8ZGC34hreEuMh7NtcPU7DQbkmDtWqhh1iFnVTFJsoMCKHMNmwnQn
- - https://intel.arkm.com/explorer/tx/63GAmTsMo8EmQ8cD57nR2Vk7ogAzJvtECXrERAdd5ojFbfEyeT6hwX9Py9kwGpg9kg26WQZPLrFhhRR5mmAFKzHN
- - https://intel.arkm.com/explorer/tx/qmRA7vreRPpY3bAg2HAoL2cbWAoeGqVQbC2HcaYjMNkwTTdoq7iCARkSMe7sweDAtrbBecei7SLdA7kNaNBeK6L
- - https://intel.arkm.com/explorer/tx/3ExaXbCzTrVkRpy5reyGR9FMA8XjxupBwZPSfUyFguVAfqaZgwToo83VW1Z36PLpjedQTY6RV2D5GAUGfTFSamgC
- - https://intel.arkm.com/explorer/tx/Vi6PhNK8ytQkuNsDTz5ntBi7pA8qasUzrmKytvcpxW8jbrQHJUtEKUKfNQUnUepcERAeJ2CEc1PZ2qb1ebP89up
- Thus, we see a very large quantitative interaction between the private address Cz1752J9CnTHHkLyC9ggdUedyFqAmNXt3qQBUSrxznsZ ("dbljerker") and the private address E4vtjNHV9HB6vSDkjSboebkgwscni6VpqKcQhJkaWYzQ, which indicates that both of these addresses belong to the same person. The fact that the address E4vtjNHV9HB6vSDkjSboebkgwscni6VpqKcQhJkaWYzQ received funds sent to it by Cz1752J9CnTHHkLyC9ggdUedyFqAmNXt3qQBUSrxznsZ at the very beginning of its activity only further confirms this.
- 3.2. Solana address E4vtjNHV9HB6vSDkjSboebkgwscni6VpqKcQhJkaWYzQ sent funds to address 0x111111f26ab123764Da895e1627bf9Ba0b000a97 (bluebnb.bnb). This connection between these addresses can be found when analyzing the exchange transaction using ChangeNOW.
- This exchange transaction took place four months ago (02:46:31 Jul 16, 2025 UTC) in transaction https://solscan.io/tx/3VW7Nq5nNUMrL26o6xFbXU5rRNbHobgZSYGdQphvpZH1FC1oqZTzNcYo41N8yV1KavGcqEqa8jW5A1mykk8ptbpP, in which the Solana address E4vtjNHV9HB6vSDkjSboebkgwscni6VpqKcQhJkaWYzQ made a deposit of 2. 2 SOL to the ChangeNOW deposit address ATUKxdVyiujSBbfkVMEn5ZjoNkC88S36QZBbFZ9efP1a, which at the time of this exchange transaction was equivalent to $382.01.
- The withdrawal from ChangeNOW took place in a transaction (Jul-16-2025 02:47:08 AM UTC) https://bscscan.com/tx/0x47a1b15b89e98fa036f23e753d28941599b76325e2403d40118e1cd43e754e7e as a result of which the address 0x111111f26ab123764Da895e1627bf9Ba0b000a97 (bluebnb.bnb) received 0.5112713 BNB from ChangeNOW, which at the time of this transaction was equivalent to $362.49.
- Considering the time of the exchange operation (about 1.5 minutes), as well as the fact that the dollar difference between the SOL sent for exchange and the BNB received is only a small percentage, which is equivalent to the ChangeNOW commission, it can be concluded that in this exchange transaction, the recipient of the funds is the address 0x111111f26ab123764Da895e1627bf9Ba0b000a97 (bluebnb.bnb).
- As I mentioned earlier (point #1 of my report), this address 0x111111f26ab123764Da895e1627bf9Ba0b000a97 (bluebnb.bnb) received the initial Gas funding from the address 0x2347bA6939476B0BE50f4E8Ba7C2419555555225 (book.bnb), which also received funds from ChangeNOW through an ETH/BNB exchange transaction carried out by the address 0x8Ad6aC7d1A042831A6e5bda61D9Abd245DF246d0, whose owner is being sought by Arkh.
- 3.3. The address Cz1752J9CnTHHkLyC9ggdUedyFqAmNXt3qQBUSrxznsZ ("dbljerker") also directly carried out exchanges using ChangeNOW services. At the same time, the main recipients of funds in such exchanges were addresses closely associated with Aaron Shames.
- 3.1. Address Cz1752J9CnTHHkLyC9ggdUedyFqAmNXt3qQBUSrxznsZ ("dbljerker"), (11:45:10 Jul 02, 2025 UTC) made a deposit of 27 SOL (at the time of the transaction, this was equivalent to $4,215.45) to the ChangeNOW deposit address 4eHoymo69exXXngNX4jKFG9sfqXN5nKnEc9rhxqW1sXB. This deposit was made in transaction https://solscan.io/tx/2gxFyTG2N47SXgbxZifXhMHjE4LrrtfWWhZwP29yjeHEkf4BqRGU5toDGLWtc4zAnzAQ8AaAg8tkMiqaXZzT2DJU.
- The withdrawal from ChangeNOW occurred in transaction https://etherscan.io/tx/0x6bef6a2985210cd494c0aa15575855f552f2c8811ab1fd717fbd079245c5ba12 (Jul-02-2025 11:45:59 AM UTC), resulting in the recipient of 1.61668545 ETH (equivalent to $4,157.03 at the time of the transaction) being the address 0xAf81b842Cc0cf44e354Cf19480c3864185d9EC1C. This exchange took only 50 seconds, and the difference between the dollar equivalent at the time of exchange corresponds to the ChangeNOW commission.
- This address, 0xAf81b842Cc0cf44e354Cf19480c3864185d9EC1C, is directly linked to the address 0x0D8e060CA2D847553ec14394ee6B304623E0d1d6, which, according to https://intel.arkm.com/explorer/address/0x0D8e060CA2D847553ec14394ee6B304623E0d1d6, officially belongs to Aaron Shames. This connection between the address 0xAf81b842Cc0cf44e354Cf19480c3864185d9EC1C and the address 0x0D8e060CA2D847553ec14394ee6B304623E0d1d6 is observed in the following transactions:
- - https://intel.arkm.com/explorer/tx/0x70ee13d03c011297a6fe8869da4faed3cc54876fc00fb5017e1085ee47e69dc6
- - https://intel.arkm.com/explorer/tx/0x434fc166f4cdd4b786e463e437e5b5c3315bc40dd46fec49c162d2a7618234e1
- 3.2. Address Cz1752J9CnTHHkLyC9ggdUedyFqAmNXt3qQBUSrxznsZ ("dbljerker"), (16:44:47 Oct 01, 2025 UTC) made a deposit of 20 SOL (equivalent to $4,439.63 at the time of the transaction) to the ChangeNOW deposit address HPDeLwe4MDsJWV8anwnFe4MMRPu3ueyUvZ1kbraVgRKr. This deposit was made in transaction https://solscan.io/tx/43YydGFCuRBXQfuryvMk7huo9oeMe5LyDz7yGCYe1j6Yf6ffg6JUzqHRLB9vsMGfqXHMcZrWUVVdobtHdSkLKWX5
- The withdrawal from ChangeNOW took place in transaction https://etherscan.io/tx/0xa20afd9b4a5046f67572276a46551165b7258ae5c77b33a4c71d15197095612e (Oct-01-2025 04:45:35 PM UTC), resulting in the recipient of 1.00325793 ETH (equivalent to $4,364.70 at the time of the transaction) being the address 0x2347bA6939476B0BE50f4E8Ba7C2419555555225 (bookbnb.eth). This exchange took only 1 minute, and the difference between the dollar equivalent at the time of exchange corresponds to the ChangeNOW commission.
- As I mentioned earlier (point #1 of this report), the address 0x2347bA6939476B0BE50f4E8Ba7C2419555555225 (book.bnb) is the official developer of the MintStakeShare project contract, founded by Mr. Aaron Shames and closely associated with the address 0x111111f26ab123764Da895e1627bf9Ba0b000a97 (bluebnb.bnb), which created the contract for the https://www.bluebnb.xyz/ project, founded by Mr. Aaron Shame.
- 3.3. Address Cz1752J9CnTHHkLyC9ggdUedyFqAmNXt3qQBUSrxznsZ ("dbljerker"), (07:18:30 Jul 02, 2025 UTC) made a deposit of 11.8 SOL (equivalent to $1,796.12 at the time of the transaction) to the ChangeNOW deposit address B3NzqwktRFjAynucz6CJjwFBzTM62Qm2CTeYeAvcYunc. This deposit was made in transaction https://solscan.io/tx/4wHTZGvRppPjJDt9vMH9YT9ssKe7Q48dq2aSfceSQ3prpw8dnwhn7zfgsa2vq8tnZruyoi4pJabDNJ5CZC4GqszC.
- The withdrawal from ChangeNOW occurred in transaction https://bscscan.com/tx/0x6c7228b63dde648dc6fc0ee0bac8c8fa9d9bce70e13ba26323c55a0b7f224345 (Jul-02-2025 07:25:55 AM UTC), resulting in the recipient of 2.64792196 BNB (equivalent to $1,747.81 at the time of the transaction) being the address 0x99cD808A0D1fb8Dbfc295cd8a8B22bA62cC42980. This exchange took 7 minutes, and the difference between the dollar equivalent at the time of exchange corresponds to the ChangeNOW commission.
- The address 0x99cD808A0D1fb8Dbfc295cd8a8B22bA62cC42980 is associated with the address 0x49707808908f0C2450B3F2672E012eDBf49eD808 (ashames.eth), which, according to https://intel.arkm.com/explorer/address/0x49707808908f0C2450B3F2672E012eDBf49eD808, officially belongs to Mr. Aaron Shame. The linking transaction between address 0x99cD808A0D1fb8Dbfc295cd8a8B22bA62cC42980 and address 0x49707808908f0C2450B3F2672E012eDBf49eD808 (ashames.eth) is the transaction https://bscscan.com/tx/0x4105a7dec2fe6cd8bb85b62841cae21379213d0abf08967e4c5a3fb50109b35e
- Circumstantial proof.
- Similarly, we can observe an outgoing transaction to the address 0x8Ad6aC7d1A042831A6e5bda61D9Abd245DF246d0: https://basescan.org/tx/0xf9c12dd3523542356fd523f56531ef1fceec576eec8b810c52c7082b38905a62. In this transaction, the address 0x8Ad6aC7d1A042831A6e5bda61D9Abd245DF246d0 transferred 3,000 USDC to the address 0x79199bba2593bf4D3C8c1b39E32a666AF9C22Def. According to https://intel.arkm.com/explorer/address/0x79199bba2593bf4D3C8c1b39E32a666AF9C22Def, the address 0x79199bba2593bf4D3C8c1b39E32a666AF9C22Def belongs to "DarcyDonavan" on OpenSea. This "DarcyDonavan" on OpenSea is a film and television actress as seen in Anchorman, Modern Family, etc. Recording artist, producer, and founder of the StarDawgs project, named Darcy Donavan (she owns the personal website https://direct.me/darcydonavan). Darcy Donavan owns the Twitter account https://x.com/darcydonavan, and as proof that Darcy Donavan owns the address 0x79199bba2593bf4D3C8c1b39E32a666AF9C22Def, she mentioned it in her tweets: https://x.com/darcydonavan/status/1487544759681892352, https://x.com/darcydonavan/status/1497297534275895297, https://x.com/darcydonavan/status/1499515423376621569. On the Twitter account https://x.com/AaronShames, which belongs to Aaron Shames, we see his interest in Darcy Donavan - he retweets tweets posted by Darcy Donavan. Mr. Aaron Shames retweets Darcy Donavan's tweets frequently, which means that he is a fan of Darcy Donavan. This is probably the reason why the address 0x8Ad6aC7d1A042831A6e5bda61D9Abd245DF246d0 transferred 3,000 USDC to Darcy Donavan.
- Similarly, on the Twitter account https://x.com/AaronShames, which belongs to Aaron Shames, we see his interest in the Aborean Finance (AboreanFi) project. Mr. Aaron Shames' interest in the Aborean Finance project is clearly evident in his numerous retweets of tweets from the official Aborean Finance Twitter account https://x.com/AboreanFi. The Arkm addresses 0x4d8971D9932C1c0c16079722b3D93893F16Bb065 and 0x8Ad6aC7d1A042831A6e5bda61D9Abd245DF246d0 are linked to the activity and deployments of smart contracts in the Abstract chain, for the identification of which Arkm has announced this reward. In addition, the personal GitHub page https://github.com/cryptoaaron?tab=following, which belongs to Aaron Shames, has 14 followers, including https://github.com/Aborean-Finance, which belongs to the Aborean Finance project.
- Another small piece of circumstantial evidence is that Aaron Shames retweets three people who follow https://x.com/AboreanFi. The fact is that the official Aborean Finance account https://x.com/AboreanFi only follows three users. Aborian Finance has not shown any interest in other Twitter accounts. All three Twitter users that Aborean Finance has shown interest in are now in the sights of Mr. Aaron Shames, who retweets the tweets of these three users.
- Final conclusion.
- Based on direct evidence, we see a connection between the address we are looking for, 0x8Ad6aC7d1A042831A6e5bda61D9Abd245DF246d0, and several related addresses on the Solana blockchain, following several exchange transactions carried out using the ChangeNOW service. This connection is not a one-off and is of a periodic nature. These interconnected addresses on the Solana blockchain also carried out exchange transactions on the ChangeNOW service, as a result of which the final recipients of the funds were addresses associated with Mr. Aaron Shames and his projects. In addition, we found two cases where one of the Solana addresses that received funds from the address 0x8Ad6aC7d1A042831A6e5bda61D9Abd245DF246d0, through an exchange transaction on the ChangeNOW service, also made an exchange transaction on this service, and the recipient of these funds, after passing through ChangeNOW, was Mr. Aaron Shames himself.
- Similarly, as circumstantial evidence, we can observe that the address 0x8Ad6aC7d1A042831A6e5bda61D9Abd245DF246d0 sent funds to actress Darcy Donavan, whose fan is Mr. Aaron Shames, as well as Mr. Aaron Shames' excessive interest in the AboreanFi platform.
- The sum of direct and circumstantial evidence indicates that the wanted address 0x8Ad6aC7d1A042831A6e5bda61D9Abd245DF246d0 also belongs to Aaron Shames as the creator of smart contracts in the Abstract chain, for which a reward has been announced on the Arkh platform.
Advertisement
Comments
-
- a reward for what exactly? need more details hacker
Add Comment
Please, Sign In to add comment