Case 9: The @ecoworld conspiracy - identifying 4,766 + 1 cheating accounts

Sherlock Holmes Header Follow The Money

Accusation:

It is not really an accusation this time, it is more of a known fact that @ecoworld has abused the reward pool. Many users have approached me about this, well, not this incident specifically, but more on that after we get to the conclusion.

In order to bring more awareness for the severity and extend of ill-intended reward farming on this platform, I am looking into an old file today. Also, it's @ecoworld's 1-year anniversary on steemit today, what a great moment to reflect on their history.

Some of the things I will present, may be well known to many of you, but, I hope I may be able to connect some dots that have not been visible to some of you until now.

I'll also show some big numbers, because I know those are impressive, right?

The Findings:

Let's start with what is common knowledge about our birthday boy.

@ecoworld's history

Despite the old age, the account had only posted three times in it's early days, after that it remained completely inactive until July, 5th of this year. On that day, they started a major comment-farming operation. Quite simply, they were posting numbered comments under their old posts, self voting them with an army of fake accounts. The first one to notice this, only two days into the operation, was nobody other than the legendary @ionlysaymeep.

ionlysaymeep discovers ecoworld

Unfortunately his "meep" wasn't heard by anyone, so @ecoworld could continue doing their thing, continually growing, upvoting comments for up to $7.90 each:

high paying comments by ecoworld

It would take another 10 days before @neoxian and @someguy123 stepped in and started flagging down the post rewards:

finally some flags on ecoworld

With enough flagging, continually reverting the rewards to zero, this money grab was eventually stopped. The culprit wasn't going to keep wasting their voting power just to see all rewards flagged away.

As the operation was only stopped after running fine for 12 days, @ecoworld was able to collect 364.690 vested SP and 401.334 SBD to-date. They have exchanged all their SBD to STEEM, which they vested for Voting Power and are now currently in the process of powering down 701.490 SP. This doesn't sound like too much, but be patient, I have some bigger numbers for you later on.

The Importance of Flagging

I want to take this opportunity to make an intermission for an important statement about something that I see being debated quite frequently.

Flagging is not just a tool for hostility or censorship, no, those downvotes are an important defense mechanism for the steem-economy. If flagging was not an option, a scheme like this would continue indefinitely and grow exponentially, taking money out of the reward pool that would otherwise go to legitimate authors!

Also, those who do the flagging, they are giving up the returns they would be able to gain from their upvotes in order to protect the communal reward pool! So please, a legitimately used downvote is something good, important, and healthy for this platform!

Of course, downvotes can be abused, but, if there's one thing we can learn from @ecoworld, so can upvotes!

Get over it, yes, flag-wars are ugly and childish, but flagging is not the problem here, the problem is abuse of power, and it happens with upvotes, just like it happens with downvotes!

On with the conspiracy.

@ecoworld was not alone, a little later @aleksphoto made the stage.

Just a day after @ecoworld's operation had been stopped, on July, 18th, @aleksphoto started preparing the exact same thing @ecoworld had done. @aleksphoto was never stopped by force, they waited until shortly before post payout, kept selfvoting for a day and stopped the operation immediatly after a single voting streak on July, 25th. @aleksphoto is currently powering down 340.123 SP.

This coup was being well coordinated. Our next players entered the stage right immediatly. E.g.: @yantarik started it's prep-work on July, 20th, the voting started 6 days later. This time, it did not go unnoticed, though! After just 6 hours of voting from the bots, @blueorgy, @ausbitbank, @nextgencrypto and @followbtcnews stepped up to again nullify all the ill-gotten pending rewards. If you want to know more, @ausbitbank had posted a PSA about the situation back then.

Am I boring you already? I know, all this is well known and documented! Where's the conspiracy promised in that clickbait-title?

Follow the Money!

This should really be called the @dart conspiracy, but that didn't sound as good and it would have given the conclusion away.

If you look at the wallets of our aforementioned comment farmers, you'll see they are powering down, but you might wonder, why does the STEEM never show up in their wallets?

We are able to see a bit more about those withdrawals on steemd.com than on steemit.com:

an ecoworld withdrawal as displayed on steemd.com

There's a little know feature called "withdrawal-routes". It is possible to set up an account in such a way, that when it powers down, all the STEEM gets credited to another account directly. This is why the farmers' harvest seems to disappear. All their money is going directly to @dart!

The Bottom Line

Let's see those big numbers I've promised you earlier!

@ecoworld certainly isn't alone, it may be the biggest account in this operation, but there are in total 4,766 active withdrawal routes, all pointing to @dart.

dart's withdrawal routes

And while the money collected by a single farmer, even by the biggest one, didn't look that impressive, @dart's bottom line is indeed worth raising an eyebrow.

Dart's wallet currently holds 11,850.794 STEEM, and looking through their transfer ledger, a whopping 67,608.546 STEEM have already been extracted, mostly through poloniex.

total damage so far: 79,459.340 STEEM !!

and some 5.748 SBD just to be precise.

That's only the sum in @dart's hands up to now. The army of accounts hasn't even completed powering down, yet! The total damage will continue to rise!

The Present Situation

and what can we do about this?

The large scale comment farming has stopped, it was too easily detected. The majority of the bot accounts have started voting on random posts, this is why I have been approached about this multiple times, people do get a bit concerned when a hundred small random accounts start voting on their post. So this self-rewarding comment-farm largely seems to have turned into a curation-farm? Yes, for the most part. Hey, at least you can get lucky and see some random upvotes.

The network still does vote on itself in some minor cases, they have resorted to a maximum of 200 votes on a single comment and usually the reward per comment stays below the $1-line. @sadkitten is doing an amazing job at recognizing these self-reward attempts and countering them. But @sadkitten is just one kitty against many thousand rats.

The platform needs urgent support on this front! Stopping an operation like this with only human intervention is a battle we cannot win! Support @sadkitten and the @spaminators or build your own initiative if you have the capacities.

This is a decentralized community economy, and we must protect it as such!


I will dedicate more of my time to look deeper into this tangled web.

I have identified some leads and I am already on the tail of another few thousand bots.

But for now, I wanted to leave you with this, for awareness, and with hope to create more engagement!

yours,
Sherlock

-> CASE 9 APPENDIX: list of accounts and transaction ledger <-

P.S.: Writing this post took a little longer, so my birthday present to @ecoworld is a few hours late, I hope you will forgive this factual innacuracy.


Flagging is Important!

The reward pool needs to be protected from scammers and abuse!

The community must fight against spammers and scams!

please share your thoughts

H2
H3
H4
3 columns
2 columns
1 column
109 Comments