Verdict on 0xe6ec…c961 eth-mainnet

CredScore sees a 5.3-year-old wallet with 309 transfers. DEX-routed pass-through pattern and Source return flow detected warrant manual review before this case is treated as routine. Observed entity context: USDT Token, tether.

Transfers observed: 309

Wallet age: 5.3 years (1929 days)

Last activity: 485 days ago

Unique counterparties: 103

Sanctions exposure count: 0

Mixer-like interactions: 0

Bridge-like interactions: 0

1. DEX-routed pass-through patternhighWhy this driver?
   • Single inbound source supplied 57% of inbound value
   • DEX + aggregator routing share: 28% of activity
   • Flow directionality: heavily one-sided (balance score 0.00)

   A dominant share of the wallet's inbound value came from a single source, was routed through DEX or aggregator swap activity, and was drained from the wallet rather than retained. This is the laundering fingerprint observed on documented social-engineering theft cases: a large victim transfer arrives, gets fragmented into many DEX swaps to convert and obscure the asset trail, and the wallet is emptied. It is also consistent with one-shot legitimate behavior (an ICO recipient or grant payee cashing out via DEX), so it warrants review until the funding-source provenance is established.

2. Source return flow detectedmediumWhy this driver?
   • Circular loop count: 1
   • Source return count: 2
   • Linked recirculating counterparties: 1
   • Rapid round-trip count: 1

   Observed sources later reappear as return destinations, which reduces legibility and suggests recirculating flow rather than clean one-direction settlement.

3. Review-sensitive fan-out distribution patternmediumWhy this driver?
   • Transfers observed: 309
   • Unique counterparties: 103
   • Top counterparty share: 41%

   A review-sensitive fan-out distribution pattern was detected. The structural heuristics indicate this wallet distributes funds to multiple distinct recipients in a compressed fashion that raises review priority when combined with other signals.

• Established history. Wallet age: 5.3y (observed)Why?
• Observable activity present. Transfers observed: 309Why?
• Material protocol interaction context. DEX-related interaction share: 27%Why?

• 0x098b716b8aaf21512996dc57eb0615e2383e2f96 ↗0x098b716b8aaf21512996dc57eb0615e2383e2f96 · Lazarus Group (DPRK) · OFAC_SDN
  Axie Infinity Ronin Bridge hack proceeds

• Fresh activity could change this classification because the current signal is not recent.
• Off-chain context would be particularly valuable here, the detected structural patterns raise interpretive ambiguity that on-chain data alone cannot resolve.