Official KMSPico Malware TheAlmightyRedditor - Revision history

Azoundria: Another 30 minutes complete. Additional sources merged in. Prevention completed.

2023-09-01T19:16:24Z

Another 30 minutes complete. Additional sources merged in. Prevention completed.

Azoundria at 21:37, 7 May 2023

2023-05-07T21:37:13Z

← Older revision		Revision as of 15:37, 7 May 2023
Line 1:		Line 1:
	{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/officialkmspicomalwarethealmightyredditor.php}}		{{Imported Case Study 2\|source=https://www.quadrigainitiative.com/casestudy/officialkmspicomalwarethealmightyredditor.php}}
	{{Unattributed Sources}}		{{Unattributed Sources}}

	[[File:Cryptbot.jpg\|thumb\|None]]The CryptBot is malware which can commonly be downloaded when pirating software, such as Windows license circumvention. Once downloaded, the software will report information from multiple programs including common cryptocurrency wallets. While multiple victims have lost funds, in this case it appears that $30k was lost. No funds appear to be recovered, though they have been extensively traced through multiple blockchains.		[[File:Cryptbot.jpg\|thumb\|None]]The CryptBot is malware which can commonly be downloaded when pirating software, such as Windows license circumvention. Once downloaded, the software will report information from multiple programs including common cryptocurrency wallets. While multiple victims have lost funds, in this case it appears that $30k was lost. No funds appear to be recovered, though they have been extensively traced through multiple blockchains.

	This is a global/international case not involving a specific country.		This is a global/international case not involving a specific country.<ref name="reddit-7894" /><ref name="trustpilot-7902" /><ref name="reddit-8318" /><ref name="reddit-8319" /><ref name="reddit-8320" /><ref name="reddit-8321" /><ref name="polygonscan-8322" /><ref name="polygonscan-8323" /><ref name="polygonscan-8324" /><ref name="polygonscan-8325" /><ref name="polygonscan-8326" /><ref name="bscscan-8327" /><ref name="bscscan-8328" /><ref name="bscscan-8329" />
	<ref name="reddit-7894" /><ref name="trustpilot-7902" /><ref name="reddit-8318" /><ref name="reddit-8319" /><ref name="reddit-8320" /><ref name="reddit-8321" /><ref name="polygonscan-8322" /><ref name="polygonscan-8323" /><ref name="polygonscan-8324" /><ref name="polygonscan-8325" /><ref name="polygonscan-8326" /><ref name="bscscan-8327" /><ref name="bscscan-8328" /><ref name="bscscan-8329" />

	== About None ==		== About None ==
Line 85:		Line 84:
	!Description		!Description
	\|-		\|-
	\|December 27th, 2021 6:20:25 AM		\|December 27th, 2021 6:20:25 AM MST
	\|Main Event		\|Main Event
	\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.		\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
Line 93:		Line 92:
	\|		\|
	\|}		\|}

			== Technical Details ==
			This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

	== Total Amount Lost ==		== Total Amount Lost ==
Line 112:		Line 114:
	== Ongoing Developments ==		== Ongoing Developments ==
	What parts of this case are still remaining to be concluded?		What parts of this case are still remaining to be concluded?
			== General Prevention Policies ==
			The majority of CryptBot installations happen due to downloading pirated software, and it's commonly detected by most anti-malware software. For the highest security, always store funds offline when not in use, and test any new wallet or environment with a small amount of funds prior to any large transfer or wallet setup.
			== Individual Prevention Policies ==
			{{Prevention:Individuals:Placeholder}}

			{{Prevention:Individuals:End}}

			== Platform Prevention Policies ==
			{{Prevention:Platforms:Placeholder}}

			{{Prevention:Platforms:End}}

			== Regulatory Prevention Policies ==
			{{Prevention:Regulators:Placeholder}}

	== Prevention ~~Policies ==~~		{{Prevention:Regulators:End}}
	The majority of CryptBot installations happen due to downloading pirated software, and it's commonly detected by most anti-malware software. For the highest security, always store funds offline when not in use, and test any new wallet or environment with a small amount of funds prior to any large transfer or wallet setup.

	== References ==		== References ==

Azoundria at 19:50, 28 February 2023

2023-02-28T19:50:21Z

Azoundria: Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/officialkmspicomalwarethealmightyredditor.php}} NoneThe CryptBot is malware which can commonly be downloaded when pirating software, such as Windows license circumvention. Once downloaded, the software will report information from multiple programs including common cryptocurrency wallets. While multiple victims have lost funds, in this case it appears that $30k was lost..."

2023-01-28T16:32:25Z

Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/officialkmspicomalwarethealmightyredditor.php}} thumb|NoneThe CryptBot is malware which can commonly be downloaded when pirating software, such as Windows license circumvention. Once downloaded, the software will report information from multiple programs including common cryptocurrency wallets. While multiple victims have lost funds, in this case it appears that $30k was lost..."

New page

{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/officialkmspicomalwarethealmightyredditor.php}}

[[File:Cryptbot.jpg|thumb|None]]The CryptBot is malware which can commonly be downloaded when pirating software, such as Windows license circumvention. Once downloaded, the software will report information from multiple programs including common cryptocurrency wallets. While multiple victims have lost funds, in this case it appears that $30k was lost. No funds appear to be recovered, though they have been extensively traced through multiple blockchains.

This is a global/international case not involving a specific country.

== About None ==
CryptBot is a "typical infostealer, capable of obtaining credentials for browsers, crypto currency wallets, browser cookies, credit cards, and creates screenshots of the infected system. All stolen data is bundled into a zip-file that is uploaded to the c2." "Cryptbot combines complex evasion techniques and a rather simple social-engineering based distribution strategy to produce an interesting method of attack that manages to stay relatively hidden in the current malware landscape."

"Cryptbot, an infostealer that takes victims’ cryptocurrency wallet and account credentials, was the most prolific malware family in the group, raking in almost half a million dollars in pilfered Bitcoin. Another prolific family is QuilClipper, a clipboard stealer or “clipper,” ranked eighth on the graph above. Clippers can be used to insert new text into the “clipboard” that holds text a user has copied, usually with the intent to paste elsewhere. Clippers typically use this functionality to detect when a user has copied a cryptocurrency address to which they intend to send funds — the clipper malware effectively hijacks the transaction by then substituting an address controlled by the hacker for the one copied by the user, thereby tricking the user into sending cryptocurrency to the hacker."

"Cryptbot is capable of collecting sensitive information from Atomic cryptocurrency wallet, Avast Secure web browser, Brave browser, Ledger Live cryptocurrency wallet, Opera Web Browser, Waves Client and Exchange cryptocurrency applications, Coinomi cryptocurrency wallet, Google Chrome web browser, Jaxx Liberty cryptocurrency wallet, Electron Cash cryptocurrency wallet, Electrum cryptocurrency wallet, Exodus cryptocurrency wallet, Monero cryptocurrency wallet, MultiBitHD cryptocurrency wallet, Mozilla Firefox web browser, CCleaner web browser, and Vivaldi web browser."

"CryptBot is an Infostealer that is being distributed through malicious websites disguised as software download pages. Because there are multiple malicious websites created and many of them appear on the top page when keywords such as cracks and serials of popular commercial software are entered in search engines, many users are subject to download the malware and run it. In addition, the sample uses the SFX packing, making difficult to distinguish between normal and malicious files, and changes occur multiple times a day."

"In this latest campaign, Cryptbot is delivered as a Trojan malware. Consistent with the ancient trojan horse, the info-stealer hides within legitimate software in order to be installed by its victims. Over its year of activity, it has been disguised as an installer of a free VPN application and as an installer of legitimate commercial software. Delivered either by itself or bundled with other malicious applications. For example, users looking for cracked versions of PhantomPDF editor, Adobe Illustrator or Malwarebytes AV have found themselves installing the info-stealer instead of their preferred programs. The sample we’ve encountered claimed to be an installer for the Glary Utilities suite that consists of several utilities for Windows optimization and cleanup."

"KMSPico is a tool used to activate the full features of Microsoft Windows and Office products without actually owning a license key. It takes advantage of Windows Key Management Services (KMS), a legitimate technology introduced to license Microsoft products in bulk across enterprise networks. Under normal circumstances, enterprises using legitimate KMS licensing install a KMS server in a central location and use Group Policy Objects (GPO) to configure clients to communicate with it. KMSPico, on the other hand, emulates a KMS server locally on the affected system to fraudulently activate the endpoint’s license."

"You don't have to buy a license directly from Microsoft. You can buy them resale for the amount I listed. My Pro key was $17. Just like you can buy keys for games from retailers other than Steam." "[Y]ou can easily find cheap activation keys for both office and windows (<10$). Yes, they usually come from grey market or whatever but just buy them with a temporary virtual payment card and activate your windows without installing some sh[ad]y software."

"Hey man! I think you DM’d me the other day but I accidentally ignored it. I am [a]ffected by the same hackers. Let’s team up here."

"This is true[.] I was hacked for 30k a few days ago from the same address[.]" "I got hacked from this same address recently[.] I downloaded malware from official-kmspico.com[.]"

"I just downloaded without scrolling down, I've been torrenting since 2008 and have never had an issue so negligence on my part, I didn't scroll through the site just downloaded! I'm dumb. I know."

"It seems to be some sort of network of scammers. I downloaded malware from official-kmspico.com so from a different source however the funds were transferred to this wallet. I think this is actually something larger than just one hacker/scammer. And based on the number of threads that pop up when you search for kmspico on Reddit I have a feeling they will be busted soon, especially with linked KYC. You can still doubt and think the guys moon farming that’s fine but I’m giving you plenty of reasons not to think that anymore."

"Downloaded" "[m]alware from official-kmspico.com" "then went to bed woke up and my [cryptocurrency] was gone, then did some research on kmspico like searching on Reddit kmspico and found a ton on other threads confirming." "Downloaded at 10pm woke up in the morning and all was gone." "Apparently the one from official-kmspico.com is known to contain malware. Reddit search kmspico and a lot of folks are saying that the normal kmspico has been around forever and should be fine."

"So far I have [c]ompletely reset my computer and now have an antivirus and firewall that is set to "ask" for new network requests, [r]eset my passwords, [and f]iled a police report." "I filed a police report today and am waiting for a detective to reach out to me, going to try to formulate my case from the get go here and ask to have it escalated to the FBI."

"The thief used anyswap to swap the MATIC for USDC on a different blockchain. It's an easy way to mask where it ended up. My guess, its on the ethereum blockchain right now...gotta find it." "Here is the next sequence of events for you. You stolen funds are now on the binance smart chain. Likely destined for the Cex for sale." "Thief used anyswap to convert it to USDC on Polygon -> BNB on Binance Smart Chain. Your funds are here and now mixed with the attackers tokens." "Followed the paper trail a bit, looks like the after receiving the tokens they were sent to a wallet that has interacted with WhiteBIT." "Bingo! Binance Hot Wallet." "And while I'm not as sure on this one, it would appear this is their Binance attached wallet. Others report it scamming as well. Looks like it's connected to their BSC scam wallets." "Looks like they've also interacted with KuCoin." "This is their KYC connected wallet. They regularly buy and sell eth using it and fund the scam wallets gas with it. It is connected to cryptodotcom."

"[T]he easiest way is to track back the original gas deposit, the very first transaction a wallet makes when started, and trace that back to the exchange they purchased from. Alternatively, I like to look for them cashing out, actually sending stolen coins to an exchange, but this usually takes longer as they get better and filtering through disguise wallets or using swaps that the smart contract within lets you send outside the source wallet, which obfuscates the transaction a few levels."

"Deadends come from scammers that obtain their initial "capital" scammer fuel to transact using mining wallets, however I almost never find this as miners generally trust the network concept long term and want to support it while the scammers only want easy in/out in fiat while doing best to cover their tracks as they move on to the next easy money scam. Everything is traceable though with enough patience."

"[T]he breakdown is as follows: You consolidated your Matic from various wallets into this one joint wallet over the past couple of weeks. [A]ll matic drained 3 days ago into [the attacker's] wallet."

"Swap over the Etherscan using the same wallet address and you'll find funded the first transaction of 0x365db, which first purchased Eth use Binance."

"Swap over to Binance Smart Chain and you'll find [an address which] funneled some BNB in from Kucoin and [another] wallet [which] funnels into two others, that connect back to Binance as well, one of which cashes out."

"Swap over to Avalanche and you'll find [a transaction] funneled some AVAX over from Binance, not only to the wallet that stole from you but SEVERAL others as well which all connect back to Binance if you hop a few more times deep."

"It would appear these particular scammers are part of a connected ring to the tune of millions of USD worth of funneled assets of Avax/BNB/ETH etc. The vast majority of the stolen assets are just sitting in a few dozen different wallets that have not connected to any exchanges yet unfortunately."

This is a global/international case not involving a specific country.

The background of the exchange platform, service, or individuals involved, as it would have been seen or understood at the time of the events.

Include:

* Known history of when and how the service was started.
* What problems does the company or service claim to solve?
* What marketing materials were used by the firm or business?
* Audits performed, and excerpts that may have been included.
* Business registration documents shown (fake or legitimate).
* How were people recruited to participate?
* Public warnings and announcements prior to the event.

Don't Include:
* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.
* Anything that wasn't reasonably knowable at the time of the event.
There could be more than one section here. If the same platform is involved with multiple incidents, then it can be linked to a main article page.

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
The specific events of the loss and how it came about. What actually happened to cause the loss and some of the events leading up to it.
{| class="wikitable"
|+Key Event Timeline - Official KMSPico Malware TheAlmightyRedditor
!Date
!Event
!Description
|-
|December 27th, 2021 6:20:25 AM
|Main Event
|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
|-
|
|
|
|}

== Total Amount Lost ==
The total amount lost has been estimated at $30,000 USD.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?

== Ultimate Outcome ==
What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?

== Total Amount Recovered ==
There do not appear to have been any funds recovered in this case.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?

== Prevention Policies ==
The majority of CryptBot installations happen due to downloading pirated software, and it's commonly detected by most anti-malware software. For the highest security, always store funds offline when not in use, and test any new wallet or environment with a small amount of funds prior to any large transfer or wallet setup.

== References ==
[https://www.reddit.com/r/CryptoCurrency/comments/rts1w2/got_compromised_and_lost_over_120k_in_crypto_ama/ Got compromised and lost over $120k in crypto; AMA : CryptoCurrency] (Jun 1)

[https://ca.trustpilot.com/review/official-kmspico.com https://ca.trustpilot.com/review/official-kmspico.com] (Jun 4)

[https://www.reddit.com/r/CryptoCurrency/comments/rts1w2/comment/hqvnk95/?utm_source=reddit&utm_medium=web2x&context=3 Got compromised and lost over $120k in crypto; AMA : CryptoCurrency] (Jul 3)

[https://www.reddit.com/r/CryptoCurrency/comments/rts1w2/comment/hqvm6by/?utm_source=reddit&utm_medium=web2x&context=3 Got compromised and lost over $120k in crypto; AMA : CryptoCurrency] (Jul 3)

[https://www.reddit.com/r/0xPolygon/comments/rioohh/polygon_added_to_ledger_live/ Polygon added to Ledger Live : 0xPolygon] (Jul 3)

[https://www.reddit.com/r/CryptoCurrency/comments/rs7r9p/10k_polygon_stolen_hoping_for_help_retry_post/ 10k polygon stolen, hoping for help - retry post : CryptoCurrency] (Jul 3)

[https://polygonscan.com/address/0x817592a56C48800119AB9F54C9957bCd51b5629F Address 0x817592a56C48800119AB9F54C9957bCd51b5629F | PolygonScan] (Jul 3)

[https://polygonscan.com/tx/0xd5ddb2d142966e3bd3e73b9fe1239c5aa54ccd0dd881cdec140b12310cd989a9 Polygon Transaction Hash (Txhash) Details | PolygonScan] (Jul 3)

[https://polygonscan.com/address/0x365db2b5722d13f431224066898b4cf8ca7adfe5 Address 0x365db2b5722d13f431224066898b4cf8ca7adfe5 | PolygonScan] (Jul 3)

[https://polygonscan.com/tx/0xac9d49f50302a0d1d747e0c8813daed2851d3bcb1ff4aee928938fa8eedb11b2 Polygon Transaction Hash (Txhash) Details | PolygonScan] (Jul 3)

[https://polygonscan.com/tx/0xfbe8595f1510160e2957df5080c771c42bc653df3946d952c67a4feb1b554ecb Polygon Transaction Hash (Txhash) Details | PolygonScan] (Jul 3)

[https://bscscan.com/tx/0xa9c2d34c22022bba783eaa914613e68e2a5814355028dc5f027a831ae50eb6fe https://bscscan.com/tx/0xa9c2d34c22022bba783eaa914613e68e2a5814355028dc5f027a831ae50eb6fe] (Jul 3)

[https://bscscan.com/address/0x365db2b5722d13f431224066898b4cf8ca7adfe5 https://bscscan.com/address/0x365db2b5722d13f431224066898b4cf8ca7adfe5] (Jul 3)

[https://bscscan.com/txs?a=0xd112524cbf6b18bee41588a47d59eb810f637a20 https://bscscan.com/txs?a=0xd112524cbf6b18bee41588a47d59eb810f637a20] (Jul 3)

← Older revision		Revision as of 13:50, 28 February 2023
Line 1:		Line 1:
	{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/officialkmspicomalwarethealmightyredditor.php}}		{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/officialkmspicomalwarethealmightyredditor.php}}
			{{Unattributed Sources}}

	[[File:Cryptbot.jpg\|thumb\|None]]The CryptBot is malware which can commonly be downloaded when pirating software, such as Windows license circumvention. Once downloaded, the software will report information from multiple programs including common cryptocurrency wallets. While multiple victims have lost funds, in this case it appears that $30k was lost. No funds appear to be recovered, though they have been extensively traced through multiple blockchains.		[[File:Cryptbot.jpg\|thumb\|None]]The CryptBot is malware which can commonly be downloaded when pirating software, such as Windows license circumvention. Once downloaded, the software will report information from multiple programs including common cryptocurrency wallets. While multiple victims have lost funds, in this case it appears that $30k was lost. No funds appear to be recovered, though they have been extensively traced through multiple blockchains.

	This is a global/international case not involving a specific country.		This is a global/international case not involving a specific country.
			<ref name="reddit-7894" /><ref name="trustpilot-7902" /><ref name="reddit-8318" /><ref name="reddit-8319" /><ref name="reddit-8320" /><ref name="reddit-8321" /><ref name="polygonscan-8322" /><ref name="polygonscan-8323" /><ref name="polygonscan-8324" /><ref name="polygonscan-8325" /><ref name="polygonscan-8326" /><ref name="bscscan-8327" /><ref name="bscscan-8328" /><ref name="bscscan-8329" />

	== About None ==		== About None ==
Line 115:		Line 117:

	== References ==		== References ==
	[https://www.reddit.com/r/CryptoCurrency/comments/rts1w2/got_compromised_and_lost_over_120k_in_crypto_ama/ Got compromised and lost over $120k in crypto; AMA : CryptoCurrency] (Jun 1)		<references><ref name="reddit-7894">[https://www.reddit.com/r/CryptoCurrency/comments/rts1w2/got_compromised_and_lost_over_120k_in_crypto_ama/ Got compromised and lost over $120k in crypto; AMA : CryptoCurrency] (Jun 1, 2022)</ref>

	[https://ca.trustpilot.com/review/official-kmspico.com https://ca.trustpilot.com/review/official-kmspico.com] (Jun 4)		<ref name="trustpilot-7902">[https://ca.trustpilot.com/review/official-kmspico.com https://ca.trustpilot.com/review/official-kmspico.com] (Jun 4, 2022)</ref>

	[https://www.reddit.com/r/CryptoCurrency/comments/rts1w2/comment/hqvnk95/?utm_source=reddit&utm_medium=web2x&context=3 Got compromised and lost over $120k in crypto; AMA : CryptoCurrency] (Jul 3)		<ref name="reddit-8318">[https://www.reddit.com/r/CryptoCurrency/comments/rts1w2/comment/hqvnk95/?utm_source=reddit&utm_medium=web2x&context=3 Got compromised and lost over $120k in crypto; AMA : CryptoCurrency] (Jul 3, 2022)</ref>

	[https://www.reddit.com/r/CryptoCurrency/comments/rts1w2/comment/hqvm6by/?utm_source=reddit&utm_medium=web2x&context=3 Got compromised and lost over $120k in crypto; AMA : CryptoCurrency] (Jul 3)		<ref name="reddit-8319">[https://www.reddit.com/r/CryptoCurrency/comments/rts1w2/comment/hqvm6by/?utm_source=reddit&utm_medium=web2x&context=3 Got compromised and lost over $120k in crypto; AMA : CryptoCurrency] (Jul 3, 2022)</ref>

	[https://www.reddit.com/r/0xPolygon/comments/rioohh/polygon_added_to_ledger_live/ Polygon added to Ledger Live : 0xPolygon] (Jul 3)		<ref name="reddit-8320">[https://www.reddit.com/r/0xPolygon/comments/rioohh/polygon_added_to_ledger_live/ Polygon added to Ledger Live : 0xPolygon] (Jul 3, 2022)</ref>

	[https://www.reddit.com/r/CryptoCurrency/comments/rs7r9p/10k_polygon_stolen_hoping_for_help_retry_post/ 10k polygon stolen, hoping for help - retry post : CryptoCurrency] (Jul 3)		<ref name="reddit-8321">[https://www.reddit.com/r/CryptoCurrency/comments/rs7r9p/10k_polygon_stolen_hoping_for_help_retry_post/ 10k polygon stolen, hoping for help - retry post : CryptoCurrency] (Jul 3, 2022)</ref>

	[https://polygonscan.com/address/0x817592a56C48800119AB9F54C9957bCd51b5629F Address 0x817592a56C48800119AB9F54C9957bCd51b5629F \| PolygonScan] (Jul 3)		<ref name="polygonscan-8322">[https://polygonscan.com/address/0x817592a56C48800119AB9F54C9957bCd51b5629F Address 0x817592a56C48800119AB9F54C9957bCd51b5629F \| PolygonScan] (Jul 3, 2022)</ref>

	[https://polygonscan.com/tx/0xd5ddb2d142966e3bd3e73b9fe1239c5aa54ccd0dd881cdec140b12310cd989a9 Polygon Transaction Hash (Txhash) Details \| PolygonScan] (Jul 3)		<ref name="polygonscan-8323">[https://polygonscan.com/tx/0xd5ddb2d142966e3bd3e73b9fe1239c5aa54ccd0dd881cdec140b12310cd989a9 Polygon Transaction Hash (Txhash) Details \| PolygonScan] (Jul 3, 2022)</ref>

	[https://polygonscan.com/address/0x365db2b5722d13f431224066898b4cf8ca7adfe5 Address 0x365db2b5722d13f431224066898b4cf8ca7adfe5 \| PolygonScan] (Jul 3)		<ref name="polygonscan-8324">[https://polygonscan.com/address/0x365db2b5722d13f431224066898b4cf8ca7adfe5 Address 0x365db2b5722d13f431224066898b4cf8ca7adfe5 \| PolygonScan] (Jul 3, 2022)</ref>

	[https://polygonscan.com/tx/0xac9d49f50302a0d1d747e0c8813daed2851d3bcb1ff4aee928938fa8eedb11b2 Polygon Transaction Hash (Txhash) Details \| PolygonScan] (Jul 3)		<ref name="polygonscan-8325">[https://polygonscan.com/tx/0xac9d49f50302a0d1d747e0c8813daed2851d3bcb1ff4aee928938fa8eedb11b2 Polygon Transaction Hash (Txhash) Details \| PolygonScan] (Jul 3, 2022)</ref>

	[https://polygonscan.com/tx/0xfbe8595f1510160e2957df5080c771c42bc653df3946d952c67a4feb1b554ecb Polygon Transaction Hash (Txhash) Details \| PolygonScan] (Jul 3)		<ref name="polygonscan-8326">[https://polygonscan.com/tx/0xfbe8595f1510160e2957df5080c771c42bc653df3946d952c67a4feb1b554ecb Polygon Transaction Hash (Txhash) Details \| PolygonScan] (Jul 3, 2022)</ref>

	[https://bscscan.com/tx/0xa9c2d34c22022bba783eaa914613e68e2a5814355028dc5f027a831ae50eb6fe https://bscscan.com/tx/0xa9c2d34c22022bba783eaa914613e68e2a5814355028dc5f027a831ae50eb6fe] (Jul 3)		<ref name="bscscan-8327">[https://bscscan.com/tx/0xa9c2d34c22022bba783eaa914613e68e2a5814355028dc5f027a831ae50eb6fe https://bscscan.com/tx/0xa9c2d34c22022bba783eaa914613e68e2a5814355028dc5f027a831ae50eb6fe] (Jul 3, 2022)</ref>

	[https://bscscan.com/address/0x365db2b5722d13f431224066898b4cf8ca7adfe5 https://bscscan.com/address/0x365db2b5722d13f431224066898b4cf8ca7adfe5] (Jul 3)		<ref name="bscscan-8328">[https://bscscan.com/address/0x365db2b5722d13f431224066898b4cf8ca7adfe5 https://bscscan.com/address/0x365db2b5722d13f431224066898b4cf8ca7adfe5] (Jul 3, 2022)</ref>

	[https://bscscan.com/txs?a=0xd112524cbf6b18bee41588a47d59eb810f637a20 https://bscscan.com/txs?a=0xd112524cbf6b18bee41588a47d59eb810f637a20] (Jul 3)		<ref name="bscscan-8329">[https://bscscan.com/txs?a=0xd112524cbf6b18bee41588a47d59eb810f637a20 https://bscscan.com/txs?a=0xd112524cbf6b18bee41588a47d59eb810f637a20] (Jul 3, 2022)</ref></references>