Dark | Light
[GUEST ACCESS MODE: Data is scrambled or limited to provide examples. Make requests using your API key to unlock full data. Check https://lunarcrush.ai/auth for authentication information.]

# ![@MRShimamoto Avatar](https://lunarcrush.com/gi/w:26/cr:twitter::1743038682817343488.png) @MRShimamoto Shima ๅณถใ€‚

Shima ๅณถใ€‚ posts on X about $shib, bounty, kucoin, red the most. They currently have XXX followers and XX posts still getting attention that total XXXXX engagements in the last XX hours.

### Engagements: XXXXX [#](/creator/twitter::1743038682817343488/interactions)
![Engagements Line Chart](https://lunarcrush.com/gi/w:600/cr:twitter::1743038682817343488/c:line/m:interactions.svg)

- X Week XXXXXX -XX%
- X Month XXXXXXX +261%
- X Months XXXXXXX +4,831%
- X Year XXXXXXX +1,044%

### Mentions: X [#](/creator/twitter::1743038682817343488/posts_active)
![Mentions Line Chart](https://lunarcrush.com/gi/w:600/cr:twitter::1743038682817343488/c:line/m:posts_active.svg)

- X Week XX no change
- X Month XX +400%
- X Months XX +420%
- X Year XX +58%

### Followers: XXX [#](/creator/twitter::1743038682817343488/followers)
![Followers Line Chart](https://lunarcrush.com/gi/w:600/cr:twitter::1743038682817343488/c:line/m:followers.svg)

- X Week XXX +8.40%
- X Month XXX +31%
- X Months XXX +94%
- X Year XXX +97%

### CreatorRank: XXXXXXXXX [#](/creator/twitter::1743038682817343488/influencer_rank)
![CreatorRank Line Chart](https://lunarcrush.com/gi/w:600/cr:twitter::1743038682817343488/c:line/m:influencer_rank.svg)

### Social Influence

**Social category influence**
[cryptocurrencies](/list/cryptocurrencies)  [exchanges](/list/exchanges)  #2433

**Social topic influence**
[$shib](/topic/$shib) #81, [bounty](/topic/bounty) #327, [kucoin](/topic/kucoin) #51, [red](/topic/red), [link](/topic/link), [deposit](/topic/deposit), [at a](/topic/at-a), [see the](/topic/see-the), [for all](/topic/for-all), [secret](/topic/secret)

**Top accounts mentioned or mentioned by**
[@mazrael_shib](/creator/undefined) [@k9finance](/creator/undefined) [@shibariumnet](/creator/undefined) [@mr_lightspeed](/creator/undefined) [@shibtoken](/creator/undefined) [@kucoincom](/creator/undefined) [@lupacchinonick](/creator/undefined) [@unificationund](/creator/undefined) [@metasleuth](/creator/undefined) [@thedarkshib](/creator/undefined) [@jolt_yourday](/creator/undefined) [@justdosi](/creator/undefined) [@queen1crypto](/creator/undefined) [@theyabgu](/creator/undefined) [@ethtoronto](/creator/undefined) [@buzzdefi0x](/creator/undefined) [@sama](/creator/undefined) [@0xdefiturtle](/creator/undefined) [@rugggrat](/creator/undefined) [@alfonso43203353](/creator/undefined)

**Top assets mentioned**
[Shiba Inu (SHIB)](/topic/$shib)
### Top Social Posts
Top posts by engagements in the last XX hours

"Before I get to the juicy stuff here are the receipts ๐Ÿงพ ๐Ÿ”— MetaSleuth dashboard (full graph): ๐Ÿ‘†๐Ÿ‘†๐Ÿ‘† Open this to follow along with the rest of this thread. --- ๐Ÿ”— Key mistake transaction (0.0874 ETH transfer): Tx: --- ๐Ÿ”— Shibarium Bridge Hack: Tx 1: Tx 2:"  
[X Link](https://x.com/MRShimamoto/status/1995582574115303507)  2025-12-01T19:55Z XXX followers, 6786 engagements


"Shibarium Bridge hacker foolishly chose not to accept the K9 bounty - its finally time to share the investigation weve been working on๐Ÿ”Ž this is juicy ๐Ÿคค The hacker made one stupid mistake and it completely unravelled their Tornado Cash laundering. ๐Ÿ’ฐ๐ŸŒช๐Ÿ’ต That one mistake let me link: ๐Ÿ”— The original hack wallets ๐Ÿ”— Tornado withdrawal wallets ๐Ÿ”— And dozens of KuCoin deposit accounts likely used by money mules ๐Ÿ‘ฎ๐Ÿšจ๐Ÿš“ When I first noticed this transfer I couldn't believe what I was seeing. Jackpot ๐ŸŽฐ I spent days tracing the blockchain: 1000s of transactions; XXX of interest XXX wallets XXX ETH"  
[X Link](https://x.com/MRShimamoto/status/1995582570650902587)  2025-12-01T19:55Z XXX followers, 138.2K engagements


"One very interesting anomaly ๐Ÿ‘‡ While the hacker was dumping the stolen tokens from the X orange wallets they never sold the LEASH. Instead all of the LEASH was consolidated into 0x0db3 ๐Ÿค”Thats weird behavior for a pure smash-and-grab. Its circumstantial evidence that the Shibarium bridge hack might be linked to the earlier LEASH Rebase Exploiter (a separate exploit a few weeks before this bridge hack). Not proof by itself but the pattern is suspicious"  
[X Link](https://x.com/MRShimamoto/status/1995582582881472943)  2025-12-01T19:55Z XXX followers, 3942 engagements


"Next step: Tornado Cash ๐ŸŒช From the X orange dumping wallets we see XXX ETH total being sent into Tornado Cash (red addresses): XXX ETH sent into the Tornado XX ETH pool XX ETH sent into the Tornado X ETH pool This is the classic clean break stage โ›“๐Ÿ’ฅwhere the hacker hoped to disconnect the hacked funds from the later withdrawal wallets. That should have been the end of the trail but then came the mistake. XX days after the hack - maybe the hacker thought we stopped paying attention - came the XXXXXX ETH transfer to one of the secret wallets that unravelled their entire money laundering scheme"  
[X Link](https://x.com/MRShimamoto/status/1995582587625152700)  2025-12-01T19:55Z XXX followers, 3589 engagements


"From there I worked backwards from 0x4476. ๐Ÿ”Ž๐ŸŒช๐Ÿ•ธ Tracing the funding into 0x4476 and related wallets reveals: A web of addresses withdrawing from Tornado Cash Funds bouncing around a few hops at a time Clear clustering that ties multiple Tornado withdrawal wallets together Because 0x4476 is now provably contaminated by hacker funds (via that XXXXXX ETH) this whole web becomes suspect and can be treated as part of the laundering graph"  
[X Link](https://x.com/MRShimamoto/status/1995582595531505683)  2025-12-01T19:55Z XXX followers, 2753 engagements


"๐Ÿ‘€When you zoom out you can see the full Tornado intermediaries KuCoin laundering web: Tornado Cash addresses in red ๐ŸŒช Intermediary + funnel wallets ๐Ÿ•ธ KuCoin deposit addresses in green ๐Ÿ’ฐ I ended up with XX unique KuCoin ETH deposit addresses likely used as endpoints for these laundered funds. Its unlikely the hackers themselves KYCd at KuCoin. Much more likely: these are money mules cashing out stolen crypto to fiat for a cut. ๐Ÿ’ต๐Ÿซ If any of them are in North America or Europe. I would be nervous about a knock on the door form the FBI or Interpol. ๐Ÿ‘ฎ๐Ÿšจ๐Ÿš“"  
[X Link](https://x.com/MRShimamoto/status/1995582604389876070)  2025-12-01T19:55Z XXX followers, 3416 engagements


"Heres the critical blunder. ๐Ÿคฏ One of the Tornado depositors does something incredibly dumb: it sends XXXXXX ETH to one of the secret Tornado withdrawal wallets. 0x45b5 (light orange left) 0x4476 (light orange right) ๐Ÿคฆโ™‚ It was in preparation for the second bounty offering to the hacker. I was looking for all addresses linked to the hacker to send on-chain messages and NFTs I couldnt believe it when I saw this new wallet link Jackpot That tiny XXXXXX ETH transfer was the key thread that let me unravel the entire web of Tornado post-mixer addresses and KuCoin deposit addresses - all"  
[X Link](https://x.com/MRShimamoto/status/1995582592444498382)  2025-12-01T19:55Z XXX followers, 3062 engagements


"๐ŸšจBreaking News๐Ÿšจ XX ETH bounty for Shibarium Bridge Hacker - final offer. I don't think they deserve it. Let's see if they foolishly miss their last chance to profit from K9. ๐Ÿ’ธ #ShibArmy please spread the news"  
[X Link](https://x.com/MRShimamoto/status/1986948233525174412)  2025-11-08T00:05Z XXX followers, 68.7K engagements


"๐ŸšจCall to action for victims & law enforcement๐Ÿšจ We already shared this mapping with the @ShibariumNet team. We also attempted to work with @kucoincom but they been stonewalling us thus far. If you lost funds in the Shibarium bridge hack and want to pursue this: You can file your own report in your home country I am willing to share the full @MetaSleuth graph address list and methodology with investigators Im also willing to meet virtually with law enforcement to walk them through the flows and help prove your prior bridge deposits Useful reporting portals:  USA: FBI (@FBI) Internet Crime"  
[X Link](https://x.com/MRShimamoto/status/1995582607887868342)  2025-12-01T19:55Z XXX followers, 16.6K engagements

[GUEST ACCESS MODE: Data is scrambled or limited to provide examples. Make requests using your API key to unlock full data. Check https://lunarcrush.ai/auth for authentication information.]

@MRShimamoto Avatar @MRShimamoto Shima ๅณถใ€‚

Shima ๅณถใ€‚ posts on X about $shib, bounty, kucoin, red the most. They currently have XXX followers and XX posts still getting attention that total XXXXX engagements in the last XX hours.

Engagements: XXXXX #

Engagements Line Chart

  • X Week XXXXXX -XX%
  • X Month XXXXXXX +261%
  • X Months XXXXXXX +4,831%
  • X Year XXXXXXX +1,044%

Mentions: X #

Mentions Line Chart

  • X Week XX no change
  • X Month XX +400%
  • X Months XX +420%
  • X Year XX +58%

Followers: XXX #

Followers Line Chart

  • X Week XXX +8.40%
  • X Month XXX +31%
  • X Months XXX +94%
  • X Year XXX +97%

CreatorRank: XXXXXXXXX #

CreatorRank Line Chart

Social Influence

Social category influence cryptocurrencies exchanges #2433

Social topic influence $shib #81, bounty #327, kucoin #51, red, link, deposit, at a, see the, for all, secret

Top accounts mentioned or mentioned by @mazrael_shib @k9finance @shibariumnet @mr_lightspeed @shibtoken @kucoincom @lupacchinonick @unificationund @metasleuth @thedarkshib @jolt_yourday @justdosi @queen1crypto @theyabgu @ethtoronto @buzzdefi0x @sama @0xdefiturtle @rugggrat @alfonso43203353

Top assets mentioned Shiba Inu (SHIB)

Top Social Posts

Top posts by engagements in the last XX hours

"Before I get to the juicy stuff here are the receipts ๐Ÿงพ ๐Ÿ”— MetaSleuth dashboard (full graph): ๐Ÿ‘†๐Ÿ‘†๐Ÿ‘† Open this to follow along with the rest of this thread. --- ๐Ÿ”— Key mistake transaction (0.0874 ETH transfer): Tx: --- ๐Ÿ”— Shibarium Bridge Hack: Tx 1: Tx 2:"
X Link 2025-12-01T19:55Z XXX followers, 6786 engagements

"Shibarium Bridge hacker foolishly chose not to accept the K9 bounty - its finally time to share the investigation weve been working on๐Ÿ”Ž this is juicy ๐Ÿคค The hacker made one stupid mistake and it completely unravelled their Tornado Cash laundering. ๐Ÿ’ฐ๐ŸŒช๐Ÿ’ต That one mistake let me link: ๐Ÿ”— The original hack wallets ๐Ÿ”— Tornado withdrawal wallets ๐Ÿ”— And dozens of KuCoin deposit accounts likely used by money mules ๐Ÿ‘ฎ๐Ÿšจ๐Ÿš“ When I first noticed this transfer I couldn't believe what I was seeing. Jackpot ๐ŸŽฐ I spent days tracing the blockchain: 1000s of transactions; XXX of interest XXX wallets XXX ETH"
X Link 2025-12-01T19:55Z XXX followers, 138.2K engagements

"One very interesting anomaly ๐Ÿ‘‡ While the hacker was dumping the stolen tokens from the X orange wallets they never sold the LEASH. Instead all of the LEASH was consolidated into 0x0db3 ๐Ÿค”Thats weird behavior for a pure smash-and-grab. Its circumstantial evidence that the Shibarium bridge hack might be linked to the earlier LEASH Rebase Exploiter (a separate exploit a few weeks before this bridge hack). Not proof by itself but the pattern is suspicious"
X Link 2025-12-01T19:55Z XXX followers, 3942 engagements

"Next step: Tornado Cash ๐ŸŒช From the X orange dumping wallets we see XXX ETH total being sent into Tornado Cash (red addresses): XXX ETH sent into the Tornado XX ETH pool XX ETH sent into the Tornado X ETH pool This is the classic clean break stage โ›“๐Ÿ’ฅwhere the hacker hoped to disconnect the hacked funds from the later withdrawal wallets. That should have been the end of the trail but then came the mistake. XX days after the hack - maybe the hacker thought we stopped paying attention - came the XXXXXX ETH transfer to one of the secret wallets that unravelled their entire money laundering scheme"
X Link 2025-12-01T19:55Z XXX followers, 3589 engagements

"From there I worked backwards from 0x4476. ๐Ÿ”Ž๐ŸŒช๐Ÿ•ธ Tracing the funding into 0x4476 and related wallets reveals: A web of addresses withdrawing from Tornado Cash Funds bouncing around a few hops at a time Clear clustering that ties multiple Tornado withdrawal wallets together Because 0x4476 is now provably contaminated by hacker funds (via that XXXXXX ETH) this whole web becomes suspect and can be treated as part of the laundering graph"
X Link 2025-12-01T19:55Z XXX followers, 2753 engagements

"๐Ÿ‘€When you zoom out you can see the full Tornado intermediaries KuCoin laundering web: Tornado Cash addresses in red ๐ŸŒช Intermediary + funnel wallets ๐Ÿ•ธ KuCoin deposit addresses in green ๐Ÿ’ฐ I ended up with XX unique KuCoin ETH deposit addresses likely used as endpoints for these laundered funds. Its unlikely the hackers themselves KYCd at KuCoin. Much more likely: these are money mules cashing out stolen crypto to fiat for a cut. ๐Ÿ’ต๐Ÿซ If any of them are in North America or Europe. I would be nervous about a knock on the door form the FBI or Interpol. ๐Ÿ‘ฎ๐Ÿšจ๐Ÿš“"
X Link 2025-12-01T19:55Z XXX followers, 3416 engagements

"Heres the critical blunder. ๐Ÿคฏ One of the Tornado depositors does something incredibly dumb: it sends XXXXXX ETH to one of the secret Tornado withdrawal wallets. 0x45b5 (light orange left) 0x4476 (light orange right) ๐Ÿคฆโ™‚ It was in preparation for the second bounty offering to the hacker. I was looking for all addresses linked to the hacker to send on-chain messages and NFTs I couldnt believe it when I saw this new wallet link Jackpot That tiny XXXXXX ETH transfer was the key thread that let me unravel the entire web of Tornado post-mixer addresses and KuCoin deposit addresses - all"
X Link 2025-12-01T19:55Z XXX followers, 3062 engagements

"๐ŸšจBreaking News๐Ÿšจ XX ETH bounty for Shibarium Bridge Hacker - final offer. I don't think they deserve it. Let's see if they foolishly miss their last chance to profit from K9. ๐Ÿ’ธ #ShibArmy please spread the news"
X Link 2025-11-08T00:05Z XXX followers, 68.7K engagements

"๐ŸšจCall to action for victims & law enforcement๐Ÿšจ We already shared this mapping with the @ShibariumNet team. We also attempted to work with @kucoincom but they been stonewalling us thus far. If you lost funds in the Shibarium bridge hack and want to pursue this: You can file your own report in your home country I am willing to share the full @MetaSleuth graph address list and methodology with investigators Im also willing to meet virtually with law enforcement to walk them through the flows and help prove your prior bridge deposits Useful reporting portals: USA: FBI (@FBI) Internet Crime"
X Link 2025-12-01T19:55Z XXX followers, 16.6K engagements

@MRShimamoto
/creator/twitter::MRShimamoto