On-chain investigations from the Prelisted team
Deep-dives into operational scam infrastructure, methodology notes, and IOC packages for the security ecosystem. Written for practitioners.
Inside a 12,000-Contract Honeypot Operation on Avalanche
One strange number in a database led to ~12,000 fake tokens, a hidden backdoor that survives renounced ownership, 10,000+ on-chain drains into a single collector wallet — and an operator still active today. A full on-chain forensic teardown, with IOCs.
Read the investigationPost 2 — Polygon: the same operator's parallel, earlier operation
The pilot chain. The calldata analysis that ties Polygon to Avalanche through one shared cross-chain collector wallet — the money trail the shared template alone couldn't prove.
Post 3 — The April 2026 meme-launchpad wave
The ecosystem context: how this operator's industrial deploy burst was briefly mistaken for legitimate launchpad activity.
Post 4 — Open-sourcing our safety layer
Cluster provenance, bytecode-backdoor detection, and behavioral confirmation — the anti-scam heuristics we're publishing for the ecosystem.