Forta Bots: Funding & Money Laundering Through Aztec Protocol
{"type": "project", "title": "Forta Bots: Funding & Money Laundering Through Aztec Protocol", "logoImg": "bafkreig2qp4nfb7tf2pjugznszykzpbk4eacrquglpxvooncwc252tungm", "website": "https://github.com/kovart/forta-aztec-money", "bannerImg": "bafybeia5wsphgkdzpbmulq5ygfo7xkydkahogkhqomwukpsrs2b4gcybyy", "createdAt": 1673815725545, "userGithub": "https://github.com/kovart", "credentials": {"twitter": {"type": ["VerifiableCredential"], "proof": {"jws": "eyJhbGciOiJFZERTQSIsImNyaXQiOlsiYjY0Il0sImI2NCI6ZmFsc2V9..PxpMIAXcWtcE_hbtdYpqPDu8XRNV66QtLWFqkNAI5a4udy5zF-G_pGjoQflEWmy21FrW4-A5N08S0kcw2sVkAw", "type": "Ed25519Signature2018", "created": "2023-01-15T20:32:27.043Z", "proofPurpose": "assertionMethod", "verificationMethod": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC#z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC"}, "issuer": "did:key:z6MkghvGHLobLEdj1bgRLhS4LPGJAvbMA1tn2zcRyqmYU5LC", "@context": ["https://www.w3.org/2018/credentials/v1"], "issuanceDate": "2023-01-15T20:32:27.042Z", "expirationDate": "2023-04-15T20:32:27.042Z", "credentialSubject": {"id": "did:pkh:eip155:1:0x7b736FE138775D1fCD2CFE4E1D6158BfF3a2F28e", "hash": "v0.0.0:It9lxqJk6UVkZ40xHR1g6QuLkkg+24NZle9CVuvu3/k=", "@context": [{"hash": "https://schema.org/Text", "provider": "https://schema.org/Text"}], "provider": "ClearTextTwitter#kovart_dev"}}}, "description": "Most attacks begin and end with the use of private services that allow funding or withdrawals without revealing the sender and recipient. \n\nThe most popular service among attackers of DeFi projects was the Tornado Cash mixer. However, after it was blocked by The US Department of Treasury, other projects will likely take over this niche. Aztec Protocol, which is a privacy-first zk-rollup on Ethereum, could be a potential such project. \n\nProject goal\n\nTo improve attack detection in the Forta Protocol ecosystem, develop two separate bots  to cover both the account funding stage before an attack and the money laundering stage that occurs after the attack is performed.\n\nFunded Account Interaction Bot\n\nThis bot detects when an account that was funded by Aztec Connect interacts with a contract.\n\nThe severity of these findings is low, as they do not indicate malicious activity. However, in the presence of other suspicious activity, they greatly increase the accuracy of attack detection.\n\nMoney Laundering Bot\n\nThis bot detects when numerous large transfers are made to Aztec Connect, potentially indicating post-hacking money laundering activity. All user transfers are summed up within a specified time and checked for exceeding the threshold. The severity of such findings is high.\n\nThese bots will work similarly to existing bots for Tornado Cash, and I'm sure they will be able to increase the accuracy as well as the number of detected attacks. \n\nAbout the Author\n\nI'm a Ukrainian developer, who has been developing bots for Forta Protocol since the beginning of the project. You may have seen me as a frequent contest winner as well as an active member of the community. At the moment I developed 19 bots, some of them are in the Forta Threat Detection Kit.", "logoImgData": {}, "bannerImgData": {}, "projectTwitter": "kovart_dev"}