A six-question prompt for Grok Bot to trace on-chain laundering
The author shares a prompt for Grok Bot or web-browsing Claude that scores an address on six behavioral yes/no checks across three hops, demoed on Lazarus Bybit funds.
6 yes-or-no questions exposed North Korea's $1.46B laundering in 108 seconds. Your AI agent can ask them too. The tracer checked Lazarus, the North Korean group behind the Bybit hack, for habits, not secrets: - Does a huge payment leave again within an hour? - Are round sums split across fresh wallets in minutes? - Is one route built twice? - Do the amounts land on exact powers of two? - Do "separate" branches spend in a single block? - Does the money only move at one hour of the day? Lazarus answered yes to all six, and the stolen Bybit funds got traced across 3 chains. The prompt I'd hand Grok Bot or Claude with web browsing: "Open [address] on a block explorer (Etherscan for ETH, http://mempool.space for BTC). Follow outgoing transfers 3 hops deep. For each check answer yes or no and link the transactions. 1) a huge payment that leaves again within an hour 2) round sums split across fresh wallets in minutes 3) one hop route repeated 4) values that are exact powers of two in satoshis 5) separate branches spending in the same block 6) activity clustered at one hour of day in UTC. End with a score out of 6." Keep it for the day someone you know gets drained.
This post quotes another post: x.com/zostaff/status/2114009982148464914