Another day in crypto with wild allegations. Today, it's that a North Korea-linked address invested in WLFI. I do a some DPRK crypto research myself, so I decided to take a look at their findings. They're bad and an innocent user is out $100k because of it🧵

Here's a link to the report so you can follow along. 14 pages of the report are dedicated to Lazarus Group. 5 of them to a user named @shryder1337.

Allegedly, Shryder1337, via his shryder.eth address, "transacted" with Lazarus Group. Specifically with the Ronin Exploiter address. The report even links to some of the transactions, so let’s take a closer look:

What’s happening here is that someone (with no reason to believe they’re North Korean) created a shitcoin called Dream Cash and set the Lazarus address as the owner. When you claim the token, it transfers tokens from the owner address to the claimant.

A feature of permissionless blockchains is that anyone can deploy weird contracts that do stuff like this. Someone also sent claims to @VitalikButerin’s address. Contrary to accountable[.]us’s analysis, this does not mean Dr. Buterin transacted with North Korea.

Shryder seems to find Lazarus Group jokes funny, so he claimed a bunch of times. To an inexperienced blockchain analyst (whoever accountable[.]us used), this might look like Shryder was “transacting” with Lazarus. But that’s not what happened.

It took like 30 seconds to find shryder's dox using @OSINTindustries. Not sharing it — it’s not interesting — but I’ve looked at a lot of DPRK personas, and this ain’t one of them. TL/DR: someone wrote 14 pages about Lazarus based on a funky shitcoin token transfer.

The worst part of this all (other than my Senator disseminating disinfo), is Shryder wasn't just falsely accused of being a DPRK hacker; it appears his big bag WLFI tokens (~$95k) got frozen as a result of this false positive. Disclosure: I don't hold any Trump fam tokens