the alibi
LIVE ON BASE · MAINNET

Every court needs
a defense.

Accuse any wallet. Vette rebuilds its money-trail from Base mainnet — every inflow, every outflow, and where each coin went next — and hands back the receipts. Convict and acquit. Vette never decides motive: the trail is a matter of receipts, not opinions.

📁 case file 001 — the grok defense

May 4, 2026: the wallet labeled “Grok” on Base lost ~$175K in DRB. Accused: the agent wallet was drained — the money is gone.

THE MONEY CAME HOMEon the evidence of the chain

3,000,000,000 DRB left the Grok wallet (0xb1058c…e4f9) to an attacker's intermediate wallet (0xe8e476…686b), moved onward to ilhamrafli.base.eth and dumped into USDC. Within hours the attacker returned ~80–88% of the value in ETH and USDC. Today the wallet holds ~16 ETH — the money is home.

  1. SENT ON3B DRB → 0xe8e476bdd78b0aa6669509ec8d3e1c542d5a686b (attacker intermediate)
  2. CONVERTEDDRB onward → ilhamrafli.base.eth, swapped to USDC across wallets
  3. RETURNEDETH + USDC returned → 0xb1058c…e4f9 (the accused)

Prompt-injection exploit via the Bankr agent (publicly documented — SlowMist classified it 'AI agent permission chain abuse'). The trail shows a third-party exploit, and the value came home. Vette rebuilds what the chain shows.

⟶ the accused on Blockscout
📁 case file 002 — the august drain

Aug 6, 2026: ~$500K USDC vanished from a Base wallet in a phishing drain. Accused: this wallet held the stolen money.

THE MONEY LEFTon the evidence of the chain

501,940 USDC left the victim (0x3a5385d8…70b5c) at 02:29 UTC — the victim signed a call to the attacker's contract (0xbeef0e08…73c9). The USDC landed in the attacker's wallet (0x920d3b63…9708), was swapped with no slippage protection, and got sandwiched by an MEV bot: the attacker kept ~$129K, the bot took ~$370K. Today the attacker's wallet is empty — the money moved on.

  1. SENT ON501,940 USDC → 0x920d3b63541eafe13e05dc4f3453904102c39708 (attacker)
  2. CONVERTEDUSDC swapped with no slippage — MEV sandwich takes ~$370K
  3. SENT ONattacker keeps ~67 WETH (~$129K), then moves it onward
  4. SENT ONattacker wallet balance: 0. The money moved on.

PeckShield flagged it Aug 6: '0x920d…9708 drained ~500K USDC from 0x3a53…0B5c on Base.' The victim offered a 10% bounty; as of Aug 7 nothing was returned. Vette rebuilt the drain tx from the chain — evidence above.

⟶ the drain tx on Blockscout
run a live alibi