"Sybil account #1"
https://app.ethos.network/activity/slash/320/running-two-high-rep-sybil-accounts
Opening a slash on Fay for having a second account Corey https://app.ethos.network/profile/0x8ba5908a107Ed29C898b00B498FCce0d88299175.
Now normally having two accounts tied to one person is hard to prove as the obvious defence is that these two people are family members or close friends.
However in this case, I hope to put together a slash to shows these two accounts are run by the same person.
Part 1: The onchain connections
##

Confirmed Cluster Members
### Core Cluster (High Confidence: 90-95%)
| # | Address | ENS/Label | Portfolio Value | Relationship Evidence |
|---|---------|-----------|----------------|----------------------|
| 1 | **[0x8ba590](https://app.nansen.ai/profiler?address=0x8ba5908a107ed29c898b00b498fcce0d88299175)** | **0xhmd.eth** (Target) | $1.1K | Primary wallet | - This is Corey’s account https://app.ethos.network/profile/0x8ba5908a107Ed29C898b00B498FCce0d88299175
| 2 | **[0xa8c46b](https://app.nansen.ai/profiler?address=0xa8c46b0772276876246c18f7a18a58e993e775ba)** | **hmd7ai.eth** | $2.2K | First funded by target on 6 chains; Shared multisig signer |
| 3 | **[0x721641](https://app.nansen.ai/profiler?address=0x72164114e4e66102f68439da7b3d1318b8b00405)** | **levi86.eth** | $30 | Shared CEX deposits; Direct transfers | - This is Fay’s account https://app.ethos.network/profile/0x72164114e4E66102F68439Da7B3d1318B8B00405
| 4 | **[0x921ba2](https://app.nansen.ai/profiler?address=0x921ba2ae1f5d08a9aafe2b16c417e37a105cd34e)** | **hamid86.eth** | $42 | Shared CEX deposits; Direct transfers |
| 5 | **[0xf8deda](https://app.nansen.ai/profiler?address=0xf8dedac36490543fee0f3e60a1e64b81534dc16f)** | No ENS | $9.2K | Funded target on zkSync; Large bidirectional flows; Deployed "hamid86 meme" & "Levi Meme" contracts |
### 1. **Naming Pattern Analysis**

**Highly Suspicious Naming Convention:**
- 0xhmd.eth
- hmd7ai.eth
- hamid86.eth
- hamid--akhlaghi.x (old Unstoppable domain)
- levi86.eth
All names suggest Iranian origin (Hamid, Mohammad) with similar numbering schemes (86, 7ai, 05).
### 2. **Special Address Relationships**

**First Funder Analysis:**
- **hmd7ai.eth** was first funded by **0xhmd.eth** on 6 different chains:
- Arbitrum (Feb 24, 2024)
- Base (Jan 22, 2024)
- Ethereum (Nov 20, 2022)
- Optimism (Jan 9, 2023)
- Polygon (Dec 11, 2021)
- Unichain (Jul 5, 2025)
- **0xf8deda** first funded **0xhmd.eth** on zkSync (Jun 17, 2024)
**Shared Multisig Control:**
- Both **0xhmd.eth** and **hmd7ai.eth** are signers of the same Gnosis Safe multisig: **[0xd921a1](https://app.nansen.ai/profiler?address=0xd921a11b5e7b840271055a210f82fc5334c78de4)** on Ethereum
### 3. **Bidirectional Fund Flows**

**Between 0xhmd.eth and hmd7ai.eth:**
- Sent: $4.5K | Received: $5.1K
- Direct transfers of U tokens ($1.3K) and PROVE ($70.6) from target to hmd7ai.eth
**Between 0xhmd.eth and 0xf8deda:**
- Multiple large bidirectional flows totaling over $40K:
- ZK tokens: $25K received, $7.2K sent
- OP tokens: $5.8K received, $2.5K sent
- DEGEN/VVV: $3.2K received, $567 sent
- ARB: $897 received, $3K sent
**Within Extended Cluster:**
- levi86.eth → 0xhmd.eth: LINEA $171.1
- hamid86.eth → levi86.eth: LINEA $244.1, ETH $39.9
- hamid86.eth → 0xhmd.eth: ETH $78.3
### 4. **Shared CEX Deposit Addresses**

**MEXC Deposit ([0xa2348d](https://app.nansen.ai/profiler?address=0xa2348d28d7a5aabe9c8c5ea4d1e519fc3f46ca77)):**
- **0xhmd.eth**: $4K deposited (H, RED, ARKM tokens)
- **0xf8deda**: $1K deposited (USDC)
- **levi86.eth**: $916.9 deposited (SKATE)
- **hamid86.eth**: $605 deposited (USDT)
- **hmd7ai.eth**: $108.3 deposited (SAHARA)
Part 2: Naming mistake
What’s important to note here is that all connected accounts besides Fay’s account contains a variation of the name “Hamid” - 0xhmd.eth - hmd7ai.eth - hamid86.eth which shows these wallets are likely owned by someone named Hamid. For wallet 0xf8deda, it doesn’t have an ENS but it deployed "hamid86 meme" & "Levi Meme" contracts.
Also if you go to Corey’s wallet on Arkham https://intel.arkm.com/explorer/address/0x8ba5908a107Ed29C898b00B498FCce0d88299175 you can see his name on it is hamid__akhlaghi which is his Open Sea name. On Corey’s Ethos profile, his discord and telegram name is @Hmd7ai
Fay’s wallet doesn’t have any variation of the name Hamid, however when you go to his Ethos profile his discord name is @hmdyuck which shows the same naming pattern as the other wallets.
Part 3: Friends and Family?
Ok so that is just one slip up. What if they are family members or friends in real life?
Here is Fay’s review of Corey: https://app.ethos.network/activity/review/287669/a-crypto-goblin - No mention of family relationship
- No mention of close personal friendship
- Generic praise focused on X/Twitter posts
Here is Corey’s review of Fay: https://app.ethos.network/activity/review/281996/my-old-friend-in-crypto - Describes as "old friend in crypto" (vague, non-specific)
- No mention of real-life friendship or family ties
- Generic praise focused on X/Twitter posts
If these were real family members or close friends, I would expect more personal details, shared experiences, or acknowledgment of their relationship. These reviews are very generic.
Part 4: X Connections Smoking Gun
When I looked up the hmd7ai.eth wallet, it led me to a Twitter account @Hmd7ai7 (https://x.com/Hmd7ai7). This account basically exists just to repost Corey and Fay's tweets
https://x.com/MrNeverPullsOut/status/1989897148616303044
Part 5: Conclusion
Look, any one of these things alone might be explainable. Maybe they're cousins and that's why the names are similar. Maybe they're roommates sharing a CEX account. But when you put it all together:
The shared MEXC deposit address means all 5 wallets are controlled by one exchange account. The "hmd" naming everywhere including Fay's discord mistake directly ties both accounts to "Hamid." The generic reviews that avoid saying anything specific. The dedicated twitter bot just amplifying both accounts.
This isn't two people. This is one person running multiple Ethos accounts to farm reputation and boost credibility.