The Liquidator

Modus operandi

Launches a "community-owned" DeFi token with locked liquidity and a doxxed (fake) team. Once TVL peaks, deploys a hidden owner function to disable sells, drains the LP, and bridges proceeds across three chains within minutes. Liquidity locks are theater — the timelock contract is upgradeable.

Evidence collected

• 1On-chain trace links deployer wallet to 6 prior rugs under different tickers.
• 2Hidden mint() function found in unverified proxy implementation.
• 3KYC selfie on partner exchange matches across 3 "different" projects.
• 4Bridged funds to a Tornado-style mixer 41 days ago — exit point identified.

Crime timeline

1. 2024-02MoonVault launches

   Audited (by a fake auditor). Reaches $84M TVL in 5 weeks.

2. 2024-03The pull−$84,200,000

   Sells disabled, LP drained, contract self-destructed.

3. 2024-03Bridge & mix

   Funds bridged BSC→ETH→ARB, then into a mixer.

4. 2024-05Resurfaces

   Same wallet patterns spotted funding a new "presale".

Known associates