Verify a decision

{"actor":"system:backfill","investigation_id":"32b31fba-7f61-4e95-a00a-d95ad768d7a5","kind":"publish","page_slug":"0x7c0db2791af5f7f71a125531b0902917ea0c2bc9","published_at":"2026-09-12T13:12:01.877Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"0x7C0dB2791af5f7F71a125531b0902917EA0C2bC9","sections":[{"content":"The address 0x7C0dB2791af5f7F71a125531b0902917EA0C2bC9 is a verified Safe proxy smart contract deployed on Ethereum mainnet using the Safe Singleton 1.3.0 implementation (Safe, formerly Gnosis Safe), as identified by Etherscan. It was created on May 2, 2024 by the address 0xC6B8888454BE7E59649331a073E8a6Fb4eFB9C67. The contract had recorded 78 total transactions as of mid-July 2026. Safe multisig contracts are legitimate and widely used by institutions, DAOs, and sophisticated individuals for secure, multi-signature-controlled asset management. Etherscan lists no fraud, phishing, or other adverse labels on this address.","heading":"Address Type and Contract Identity","severity":"low","sources":[{"credibility":2,"name":"Etherscan: Address 0x7C0dB2791af5f7F71a125531b0902917EA0C2bC9","type":"on_chain","url":"https://etherscan.io/address/0x7C0dB2791af5f7F71a125531b0902917EA0C2bC9"}]},{"content":"As of the most recent on-chain data reviewed (July 2026), the address holds approximately $9,565 in assets across 32 tokens, with roughly 99.98% of the portfolio concentrated in stETH (Lido Staked Ether), valued at approximately $9,563. A small USDC balance of under $2 is also present. The near-total concentration in stETH is consistent with a staking-focused treasury or personal vault rather than active trading.","heading":"Current Holdings and Token Activity","severity":"low","sources":[{"credibility":2,"name":"Etherscan: Token Holdings — 0x7C0dB2791af5f7F71a125531b0902917EA0C2bC9","type":"on_chain","url":"https://etherscan.io/address/0x7C0dB2791af5f7F71a125531b0902917EA0C2bC9#tokentxns"}]},{"content":"On-chain data shows two notable large transfers originating from this address. On July 31, 2025, approximately 21,000 ETH (valued at roughly $53.2 million at the time) was transferred to address 0xDc02d60466ccEe119e634Bcfa614EdA7a2921814, an externally owned account (EOA) that carried no exchange or protocol label on Etherscan and whose current balance is near zero, suggesting the funds were further dispersed. On December 1, 2025, approximately 2,125.74 stETH (valued at approximately $5.4 million) was transferred to the Lido stETH token contract. These transfers are of institutional scale. The destination of the July 2025 ETH transfer — an unlabeled EOA that subsequently emptied — warrants note, though no public report has linked it to illicit activity. The absence of a public identity for the wallet's beneficial owner means these flows cannot be attributed to a known legitimate or illegitimate party.","heading":"Large Historical Outflows","severity":"medium","sources":[{"credibility":2,"name":"Etherscan: Token Transactions — 0x7C0dB2791af5f7F71a125531b0902917EA0C2bC9","type":"on_chain","url":"https://etherscan.io/address/0x7C0dB2791af5f7F71a125531b0902917EA0C2bC9#tokentxns"},{"credibility":2,"name":"Etherscan: Address 0xDc02d60466ccEe119e634Bcfa614EdA7a2921814","type":"on_chain","url":"https://etherscan.io/address/0xDc02d60466ccEe119e634Bcfa614EdA7a2921814"}]},{"content":"The contract was reportedly funded by address 0x03cd6FeA7CaCA26618391CA9bf4236a27AaBB522, itself also a Safe smart account with approximately 50 transactions. The funder address had a historical transaction volume involving movements of several thousand ETH and frequent interactions with 0xC6B8888454BE7E59649331a073E8a6Fb4eFB9C67, which also appears as a counterparty to the subject address. Neither the creator nor the funder address carries any adverse labels on Etherscan. The network of Safe wallets sharing counterparties suggests coordinated treasury management rather than retail activity, but no identified beneficial owner has been matched to these addresses through open-source research.","heading":"Funding Source and Creator Address","severity":"low","sources":[{"credibility":2,"name":"Etherscan: Address 0x03cd6FeA7CaCA26618391CA9bf4236a27AaBB522","type":"on_chain","url":"https://etherscan.io/address/0x03cd6FeA7CaCA26618391CA9bf4236a27AaBB522"},{"credibility":2,"name":"Etherscan: Address 0xC6B8888454BE7E59649331a073E8a6Fb4eFB9C67","type":"on_chain","url":"https://etherscan.io/address/0xC6B8888454BE7E59649331a073E8a6Fb4eFB9C67"}]},{"content":"No reports were located on ChainAbuse for this address. No Etherscan labels identifying it as a phishing, scam, exploit, or drainer address were found. A search of open web sources including Google, Twitter/X mentions, Reddit, and Telegram produced no community abuse reports tied to this specific address. No OFAC Specially Designated Nationals (SDN) list match was found via public search. The address does not appear in any known drainer or exploit attribution list reviewed during this investigation.","heading":"Abuse Reports and Sanctions Screening","severity":"low","sources":[{"credibility":2,"name":"ChainAbuse: Address Lookup","type":"community_report","url":"https://chainabuse.com/address/0x7C0dB2791af5f7F71a125531b0902917EA0C2bC9"},{"credibility":1,"name":"OFAC Sanctions Search","type":"regulatory","url":"https://sanctionslist.ofac.treas.gov/Home/SdnList"}]},{"content":"The primary risk factors for this address are the absence of a publicly identified owner and the unusually large historical ETH outflow to an unlabeled, now-emptied EOA. Neither factor is evidence of fraud or illicit activity on its own; institutional treasuries, protocol foundations, and high-net-worth individuals routinely use Safe multisigs and move funds through intermediate wallets. However, absent any public identity claim or exchange labeling for the downstream recipient, counterparty risk cannot be fully assessed. The trust score assigned here reflects the absence of adverse labels or reports balanced against the inability to verify the wallet's beneficial ownership.","heading":"Risk Assessment and Limitations","severity":"medium","sources":[{"credibility":2,"name":"Etherscan: Address 0x7C0dB2791af5f7F71a125531b0902917EA0C2bC9","type":"on_chain","url":"https://etherscan.io/address/0x7C0dB2791af5f7F71a125531b0902917EA0C2bC9"}]}],"sources_used":[{"credibility":2,"name":"Etherscan: Address 0x7C0dB2791af5f7F71a125531b0902917EA0C2bC9","type":"on_chain","url":"https://etherscan.io/address/0x7C0dB2791af5f7F71a125531b0902917EA0C2bC9"},{"credibility":2,"name":"Etherscan: Token Transactions — 0x7C0dB2791af5f7F71a125531b0902917EA0C2bC9","type":"on_chain","url":"https://etherscan.io/address/0x7C0dB2791af5f7F71a125531b0902917EA0C2bC9#tokentxns"},{"credibility":2,"name":"Etherscan: Address 0xC6B8888454BE7E59649331a073E8a6Fb4eFB9C67 (contract creator)","type":"on_chain","url":"https://etherscan.io/address/0xC6B8888454BE7E59649331a073E8a6Fb4eFB9C67"},{"credibility":2,"name":"Etherscan: Address 0x03cd6FeA7CaCA26618391CA9bf4236a27AaBB522 (funder)","type":"on_chain","url":"https://etherscan.io/address/0x03cd6FeA7CaCA26618391CA9bf4236a27AaBB522"},{"credibility":2,"name":"Etherscan: Address 0xDc02d60466ccEe119e634Bcfa614EdA7a2921814 (ETH outflow recipient)","type":"on_chain","url":"https://etherscan.io/address/0xDc02d60466ccEe119e634Bcfa614EdA7a2921814"},{"credibility":2,"name":"ChainAbuse: Address Lookup","type":"community_report","url":"https://chainabuse.com/address/0x7C0dB2791af5f7F71a125531b0902917EA0C2bC9"},{"credibility":1,"name":"OFAC SDN List Search","type":"regulatory","url":"https://sanctionslist.ofac.treas.gov/Home/SdnList"}],"summary":"0x7C0dB2791af5f7F71a125531b0902917EA0C2bC9 is an Ethereum address identified on Etherscan as a Safe (formerly Gnosis Safe) Smart Account proxy, created in May 2024. The address has no scam, phishing, or OFAC sanctions labels on any major blockchain intelligence platform reviewed, though it has been involved in very large ETH and stETH transfers that are consistent with sophisticated or institutional-scale operations. No verified reports of fraud or abuse were located; risk factors are limited to the unusual scale of outflows and the absence of a publicly identified owner.","timeline":[{"date":"2024-05-02","event":"Safe proxy contract deployed on Ethereum mainnet by address 0xC6B8888454BE7E59649331a073E8a6Fb4eFB9C67; funded by 0x03cd6FeA7CaCA26618391CA9bf4236a27AaBB522.","source":"Etherscan","source_url":"https://etherscan.io/address/0x7C0dB2791af5f7F71a125531b0902917EA0C2bC9"},{"date":"2025-07-31","event":"Approximately 21,000 ETH (~$53.2 million) transferred from the address to unlabeled EOA 0xDc02d60466ccEe119e634Bcfa614EdA7a2921814, which subsequently emptied.","source":"Etherscan token transaction history","source_url":"https://etherscan.io/address/0x7C0dB2791af5f7F71a125531b0902917EA0C2bC9#tokentxns"},{"date":"2025-12-01","event":"Approximately 2,125.74 stETH (~$5.4 million) submitted to the Lido stETH contract.","source":"Etherscan token transaction history","source_url":"https://etherscan.io/address/0x7C0dB2791af5f7F71a125531b0902917EA0C2bC9#tokentxns"},{"date":"2026-07-14","event":"Most recent recorded transaction activity on the address, consisting of an Exec Transaction call.","source":"Etherscan","source_url":"https://etherscan.io/address/0x7C0dB2791af5f7F71a125531b0902917EA0C2bC9"}]},"v":1}