Who's really behind a wallet or a token: who funded it, where the money goes, through mixers, bridges and swaps. Free check: https://xitter.cf/t.co/9HLJgolm8v
Blockchain
Joined September 2026
- Tweets202
- Following22
- Followers108
- Likes254
Pinned Tweet
We looked into @0xMarko77's 20 SOL lost on @Higgspad
It's not a drainer. He paid twice for one launch, the launch went out with no dev buy, and the SOL is still in Higgspad's wallet.
He's not the only one 🧵
Thanks @skrootimburg for flagging it
Every wallet has a story. Iris reads it.
Paste an address and see who's behind it, how risky it is, and the evidence for every label.
Then follow the money:
→ through mixers, CoinJoins and swap services
→ across bridges, onto the next chain
→ hop by hop, on one investigation board
10 chains. 640,000+ labeled addresses.
iriscan.app
Iris now has a referral program.
Share your link → anyone who signs up through it gets 100 free credits (100 wallet checks).
You get 25% of whatever they pay, for 12 months, in USDC on Solana.
Your link: iriscan.app → Account → Referrals
5/
4. The bank
Most launches lose a little (45 of 55 sampled, about 0.38 SOL each). A few hit: toothpaste made +26.66 SOL in 6 seconds. 20,543 launches later:
Two wallets hold 1.34M USDC + 4,144 SOL. 27,845 USDC went to Coinbase, 459 SOL to Robinhood Chain.
6/
We read every transaction of those two wallets: the launcher sent them 1.4M USDC and 8,887 SOL. Money from anyone else: under $50K.
We don't know who runs it. Every payment, trade and balance is linked:
Board: iriscan.app/explorer/grok5fq…
Report: iriscan.app/case/grok5fqu-20…
The Iris Telegram group is open:
- Paste any token, Iris checks it live in the chat
- Who funded the dev, the bundle, the insiders
- See what others are checking before you ape
Free, open to everyone -> t.me/iris_intel
Got rugged or drained? Drop it below 👇
Reply with the token CA or the wallet, and what happened.
Iris picks one this week and traces where the money went: bridges, swaps, mixers. Full public board, free.
Know someone who got rugged or drained? Tag them.
145 Telegram chats added Iris in 36 hours: 43 groups and 102 DMs.
616 bot checks in the last 24 hours alone.
Drop a CA in your group and Iris shows who funded the dev, the bundles and the insiders.
Add it: t.me/iris_tracker_bot?startg…
Robinhood Chain tokens are live on Iris.
Paste any CA and see in seconds:
- Who funded the dev, and if they already sold
- Bundled wallets sniping the launch
- Insiders and linked wallet clusters
- Where the money went, through bridges and swaps
Free, no account -> iriscan.app
Iris is now on Telegram:
- Paste any token, see who funded the dev
- Bundles and Proxima launches flagged before you ape
- Free, in your group or in DMs, already in 18 groups
Add it -> t.me/iris_tracker_bot?startg…
We also have a telegram group: t.me/iris_intel
This is what we built Iris for. Thanks @ashxonchain for the trace.
If anyone affected needs help following the rest, through Wormhole or an exchange, our DMs are open. Free.
I tracked the stolen funds from realist's two wallets with @iris_intel_app
Total $753K is stolen from two wallets, $718K USDC that stolen was sent indirectly to a wallet drainer that already drained 53,279 victim wallets for over $2.7M funds that shows as @hitbtc hot wallet.
Iris just submitted to @colosseum
- Paste any token: see who funded the dev and if the launch was bundled, before you ape
- Got drained? Follow your funds through mixers, bridges and swaps, wallet by wallet
- Free, no account, results in seconds
-> iriscan.app
Iris retweeted
7 free tools to see who's really behind a memecoin
paste the CA before you buy. takes 2 minutes
1.) iris → who funded the dev, bundles, Proxima launches. follows the money even through mixers and bridges. 10 free scans, no account
iriscan.app
2.) rugcheck → open the insiders tab, not just the score. that's who's sitting on the supply
3.) bubblemaps → are the top holders connected to each other
4.) trench.bot → bundle risk: wallets that bought in sync and share a funder
5.) gmgn → the dev's past tokens and how they ended
6.) solscan → "funded by" on the dev wallet. one click back to the source
7.) dexscreener → top traders tab. who's already up big and can dump on you
none of them need your wallet. if a "checker" asks you to connect or sign, close it
bookmark this
Great work. Shielded pools didn't fail here, the pattern did: exact lot sizes and short round-trips.
Iris runs the same amount-and-timing matching on Tornado Cash, Railgun and Solana privacy pools, for stolen funds only.
How it works: iriscan.app/methodology
Ledger theft, day two. Since yesterday the thief has pushed ether through Tornado Cash three times, and each time on into Zcash's shielded pool. We followed every lot out the far side. Here is how, step by step.
1. THE SAME BUILD, THREE TIMES
An ether wallet pays a fresh splitter. The splitter pays four fresh wallets. The four drop it into Tornado Cash's 100, 10 and 1 ETH pools. Minutes, every time.
Run 1, yesterday 15:17: 1,254 ETH. Run 2, today 09:42: 1,291 ETH. Run 3, today 11:56: 450 ETH from 0xfa4EaBB840A33C156E600311433AE261CBfCb0e2, in the pools by 12:15.
2. OUT OF TORNADO CASH
The mixer breaks the link between a deposit and a withdrawal. We do not need the link. Our tooling fingerprints the withdrawal transactions themselves: how each one is constructed, who constructs it, and when.
Yesterday's 65 withdrawals (1,084 ETH) and today's 96 (1,726 ETH) all carry the same signature. The six other withdrawals from those pools in today's windows do not. Run 3 came out from 12:18 into 0x0d697aa182801566d87adc86e68e95fd3b2f5f82 (213 ETH) and 0x676b16cc18542f37d202a1a79ac05463395496a4 (122 ETH), and 195 ETH of it was inside a cross-chain swap service by 12:38. Forty-two minutes, end to end.
3. INTO ZCASH, AND OUT AGAIN
The swap service turns the ether into shielded ZEC, where sender, amount and recipient vanish. But the service's own shielding of each lot is public, and from it we derive a value signature for that lot's exit, then scan every transparent exit from the pool. 108 of 108 exits across both days match their lot to the zatoshi. Not one other exit from the pool does.
First lot today: in at 10:18:18, out at 11:06:16 in block 3512847 (8d26a9b095d4d28373527f7a6eb81a3be7f906d1e2190960c0512ff64f369418 and 738c6d1261e79766e4dd16bdbd38dced91b8e3a86ce41dcda83eda1f19208fbf), straight into a ZEC to USDC order.
Today so far: 20 lots ordered (2,379 ZEC, $2.9m), 14 out, 5 inside the pool, 1 still settling. Every exit feeds a ZEC to USDC order paying two wallets born at 11:11, 22 of the 28 paid by 12:43:
0x816D5Ee17DB1495d1409F135b98FF3edc5F3cDf8: 940,561 USDC
0xBA736A4b616e79867B6d586293966b552883f3F3: 852,258 USDC
1.79m USDC, unspent. @Circle can freeze it.
(1/2) 🧵⤵️
