Ethereum
ZachXBT-Named Pig-Butchering Wallet0xea9fccb3ea820f080f38e9c49fc1a201066010c7
Analyzed by the CredScore behavioral risk engine on . Engine version 1.0.0.
Score
35/100
0 clean · 100 max risk
Tier
High risk
CredScore banding
Decision
Escalate
Recommended analyst disposition
Confidence
84%
High — strong signal
Escalate for deeper review
Ask about this wallet
Try
Deterministic. Every answer is a lookup on a specific field on the verdict payload — no LLM, no hallucinations. Sources shown per answer.
CredScore Copilot
LLM-assisted investigation on this verdict. BYOK — your key stays in your browser, never touches our servers.
Bring your own Anthropic (Claude) or OpenAI key. Click Configure key to add one — it's stored only in your browser and used to call the provider directly from this page. Zero CredScore-side cost, zero PII on our servers.
Score trajectory (2 analyses)
55 → 55
Flat
Deduped by day. Y axis inverted so top = clean (100), bottom = maximum risk (0). Each dot is a re-analysis event.
Summary
CredScore sees a 5.1-year-old wallet with 182 transfers. Hack / exploit proceeds attribution and DEX-routed pass-through pattern are severe enough to require escalation before any further interaction.
Wallet snapshot at analysis time
Transfers observed
182
Wallet age
5.1 years
1852 days
Last activity
73 days ago
Unique counterparties
84
Sanctions exposure
0
Mixer-like interactions
0
Bridge-like interactions
0
Primary risk drivers (3)
Hack / exploit proceeds attribution
high- This wallet is labeled as proceeds from a documented hack or exploit.
The wallet is labeled as proceeds from a documented hack or exploit, which is a hard escalation signal for compliance review.
DEX-routed pass-through pattern
high- Single inbound source supplied 75% of inbound value
- DEX + aggregator routing share: 53% of activity
- Flow directionality: heavily one-sided (balance score 0.01)
A dominant share of the wallet's inbound value came from a single source, was routed through DEX or aggregator swap activity, and was drained from the wallet rather than retained. This is the laundering fingerprint observed on documented social-engineering theft cases: a large victim transfer arrives, gets fragmented into many DEX swaps to convert and obscure the asset trail, and the wallet is emptied. It is also consistent with one-shot legitimate behavior (an ICO recipient or grant payee cashing out via DEX), so it warrants review until the funding-source provenance is established.
Rapid outflow pattern
medium- Rapid outbound events observed: 90
Rapid outflow behavior can indicate routing, distribution, or non-routine operational flow that deserves review.
Offsetting factors considered
- Established history. Wallet age: 5.1y (observed)
- Observable activity present. Transfers observed: 182
- Moderately distributed counterparties. Unique counterparties observed: 84
Other high risk verdicts on Ethereum
This verdict is a forensic snapshot as of the analysis timestamp above. Subsequent on-chain activity is not reflected until the wallet is re-analyzed. CredScore’s output is decision support based on public on-chain activity and does not constitute a final compliance determination.