velvet here, again. Couple of days ago I wrote about ssss_sa being a serial stealer and making $1300 off of it (not even counting the airdrop, oh well). When talking with some internet friends I mentioned my suspicion of sssscrap being an alt account of ssss_sa, and I found that several others shared the same suspicion. So let’s go, yeah?

Let's pick up where I left off last time, with ssss_sa

If you open the network tab and filter by “graphql” you will see Zora’s queries to retrieve information. And inside the query for the profile we will see:

We can see the wallet associated with the account ssss_sa, let’s also get the wallet address of sssscrap while we are at it.

Let’s put these addresses to Basescan and see what shows up. I will start from sssscrap because it will make this process easier.

As we enter basescan, it greets us with the information that this account is funded by “violet7rip.base.eth”. The funder in this case is the account sending the first money entering the account, the source of the initial funds. And if we open the transactions tab we can confirm this.

And yep, violet7rip in fact, funded this account. Well before explaining if this is conclusive or not, let me move on to ssss_sa.

If we now check the ssss_sa, it is not funded by an account associated with this person

I believe the address 0x08.. is actually connected to these cluster of accounts, however the explanation of it is a bit convoluted so I will refrain from doing that.

However, if you look a little further up, you'll see that the second incoming transaction to the account, which is significantly larger than the initial funding, came from an address starting with 0xaCB. Sound familiar? That’s the address associated with the Zora account sssscrap!!!

Let’s see how many times this has occurred.

With this, we can confirm that it was not a one off thing.

Now let me now introduce to you something a little more subtle, the naming of the coins in these accounts:

The naming is, well; similar. But they do have their own mannerisms, sssscrap uses dots at the beginning while it is mostly at the end in ssss_sa, though the owner didn’t pay much heed into any other aspect, both accounts often use one-word descriptions of the art/images they stole and just post it.

Oh, and the total amount earned by the ssscrap account is around $1,560, compared to about $1,300 for ssss_sa, in case you haven’t read the first post.

ssss_sa, a serial stealer.

velvet here, long story short, I had been skeptical of this creator on Zora for a while, and today, with the help of Zora's API, I scraped all of their posts to check how many were "stolen." By "stolen" I mean where they posted a media 1/1 to Zora that had already been posted elsewhere before.

https://paragraph.com

Considering the name similarity, similarity of the posts, the fundings shown by the transactions, and similar naming schemes; I believe it is pretty conclusive that these are all the same people. Though I must admit, it is not 100%, but definitely >99%

If you are wondering about how many posts sssscrap stole, I will not bother count it this time. But if you want to check them out; let me give all the links (148) to the google lens of sssscrap’s posts.

So yeah, this content and art thief made $2800+ (god knows how much with the Zora airdrops, wouldn’t be surprised if it reached up to $10000, I don't want to check as I don't want to get mad.)

Please don’t steal, velvet out. (links below)