Claims

Qualified triples from the transcripts. Origin, speaker, and evidence stay attached. These are not independently verified facts.

Pump.fun robbery INVOLVES Raydium

The attack exploited the process that graduated Pump.fun tokens to Raydium and funded their liquidity there.

Explicit Confidence 99% · Jack Rhysider EP 152 Details

“when enough people buy it, it then gets graduated to Raydium”

Jack Rhysider · offsets 34983–35043

Solana February 2023 outage INVOLVES Solana recursive transactions

The February 2023 Solana outage involved recursive transactions that repeatedly called other transactions or themselves.

Explicit Confidence 98% · Jarett Dunn EP 152 Details

“you could do recursive transactions”

Jarett Dunn · offsets 11182–11217

Pump.fun robbery INVOLVES Pump.fun

The robbery targeted Pump.fun and its token-graduation process.

Explicit Confidence 99% · Jack Rhysider EP 152 Details

“the elaborate and wild robbery of Pump.fun”

Jack Rhysider · offsets 45778–45820

Pump.fun robbery INVOLVES Liquidity redirection

The incident involved redirecting liquidity funds away from Raydium to other Solana addresses.

Explicit Confidence 99% · Jack Rhysider EP 152 Details

“redirecting the Solana that was supposed to go to the DEX”

Jack Rhysider · offsets 36204–36261

Solana February 2023 outage INVOLVES Geyser plugin

Jarett says validators could optionally run the Geyser plugin and its associated threads.

Explicit Confidence 95% · Jarett Dunn EP 152 Details

“they can optionally do this Geyser plug in and get additional money by running these threads”

Jarett Dunn · offsets 11019–11111

Jarett Dunn USES Automated transaction attack

Jarett wrote and executed an automated program that attacked thousands of Pump.fun meme coins.

Explicit Confidence 99% · Jack Rhysider EP 152 Details

“he wrote a little program to try to do it to not just one or ten or twenty, but thousands, tens of thousands”

Jack Rhysider · offsets 35700–35808

Jarett Dunn USES Liquidity redirection

Jarett used liquidity redirection to send Solana intended for Raydium to addresses he selected or controlled.

Explicit Confidence 99% · Jack Rhysider EP 152 Details

“redirecting the Solana that was supposed to go to the DEX to somewhere else he controlled”

Jack Rhysider · offsets 36204–36293

Jarett Dunn USES Flash-loan exploitation

Jarett used flash loans as part of the robbery, repeatedly borrowing funds to buy and then sell Pump.fun tokens.

Explicit Confidence 99% · Jack Rhysider EP 152 Details

“His program was working flawlessly. He was taking out flash loans”

Jack Rhysider · offsets 42250–42315

Jarett Dunn USES Solana recursive transactions

Jarett says he queued recursive transactions, including transactions that called themselves immediately.

Explicit Confidence 99% · Jarett Dunn EP 152 Details

“I was queuing as many recursive transactions as I possibly could”

Jarett Dunn · offsets 10910–10974

Pump.fun USES Solana

Pump.fun is described as a platform for creating and trading meme coins on the Solana network.

Explicit Confidence 99% · Jack Rhysider EP 152 Details

“make a meme coin on the Solana network”

Jack Rhysider · offsets 14373–14411

Facebook AFFECTS Image metadata

Jack says Facebook removes image metadata from uploaded photos, including potentially identifying information such as camera details and GPS coordinates.

Explicit Confidence 99% · Jack Rhysider EP 153 Details

“Facebook learned pretty quickly to scrub all the metadata out of photos to avoid stalking.”

Jack Rhysider · offsets 41777–41867

Ricardo Estrada Zamora ASSOCIATED_WITH Constru-Bikes

Bryan identifies Constru-Bikes as the name of the business associated with the Facebook page used by Ricky Zamora.

Explicit Confidence 97% · Bryan Hance EP 153 Details

“It’s just the name of this guy’s business, which is called Constru-Bikes.”

Bryan Hance · offsets 27800–28600

Stolen Bicycle Registry DEVELOPED_BY Bryan Hance

Bryan says he started the Stolen Bicycle Registry as a free database for stolen bicycles.

Explicit Confidence 99% · Bryan Hance EP 153 Details

“So, I started this site called Stolen Bicycle Registry.”

Bryan Hance · offsets 6706–6761

Bike Index DEVELOPED_BY Bryan Hance

Bryan says he and Seth joined forces and iteratively built Bike Index into a better system.

Explicit Confidence 98% · Bryan Hance EP 153 Details

“So, we joined forces, and it was just — from day one after that, it was just, pew, just success, success, success, and we just iteratively built it into a much better system.”

Bryan Hance · offsets 10904–11078

Bike Index DEVELOPED_BY Seth Herr

Bryan says Seth Herr joined him in building the system that became Bike Index.

Explicit Confidence 96% · Bryan Hance EP 153 Details

“So, we joined forces, and it was just — from day one after that, it was just, pew, just success, success, success, and we just iteratively built it into a much better system.”

Bryan Hance · offsets 10904–11078

Ricardo Estrada Zamora USES Facebook

Bryan says Ricky Zamora used a Facebook page to advertise and sell bicycles, including bicycles believed to be stolen.

Explicit Confidence 99% · Jack Rhysider EP 153 Details

“He continues to sell stolen bikes on Facebook.”

Jack Rhysider · offsets 60131–60177

Bryan Hance USES Bing Maps

Bryan says investigators used Bing Maps to compare the suspected San Jose staging location with visual details in the bicycle photographs.

Explicit Confidence 98% · Bryan Hance EP 153 Details

“Then we went to Bing Maps, Google Maps, and we’re looking at this metal, shitty corrugated siding.”

Bryan Hance · offsets 50436–50534

Bryan Hance USES VPN

The investigation used a VPN connection into Mexico to view listings that had been region-locked.

Explicit Confidence 98% · Jack Rhysider EP 153 Details

“someone got the idea to use a VPN, connect into Mexico, and see if they can still see the listings.”

Jack Rhysider · offsets 32476–32575

Bryan Hance USES Visual geolocation

Bryan and the investigators inferred whether bicycle photographs were taken in the United States or Mexico from visual details in the images and surroundings.

Explicit Confidence 97% · Bryan Hance EP 153 Details

“We would see a place that just looked like an American setting.”

Bryan Hance · offsets 34700–34760

Bryan Hance USES Facebook

Bryan and the investigation team examined the seller’s Facebook page and listings to identify stolen bicycles and associated people.

Explicit Confidence 98% · Bryan Hance EP 153 Details

“We’re looking at this guy, and we’re looking at his web page, and it’s tons and tons and tons of bikes.”

Bryan Hance · offsets 27500–27605

Bryan Hance USES OSINT

Bryan describes using open-source intelligence to identify the seller, his contacts, locations, and supply chain.

Explicit Confidence 99% · Bryan Hance EP 153 Details

“I refer to this guy as the OSINT pinata, ‘cause the minute you poke at him, literally everything falls out.”

Bryan Hance · offsets 43892–43999

Ricardo Estrada Zamora USES Region locking

Bryan says the seller region-locked the Facebook page so that only people in Mexico could view it.

Explicit Confidence 99% · Bryan Hance EP 153 Details

“He region-locked it to Mexico.”

Bryan Hance · offsets 32329–32359

Bryan Hance USES Instagram

Bryan says investigators examined the seller’s Instagram account and obtained access by posing as someone else.

Explicit Confidence 96% · Jack Rhysider EP 153 Details

“One of the guys was able to sneak into his Instagram by pretending to be somebody else.”

Jack Rhysider · offsets 29200–29700

Bryan Hance USES Google Maps

Bryan says investigators used Google Maps to compare the suspected San Jose staging location with visual details in the bicycle photographs.

Explicit Confidence 98% · Bryan Hance EP 153 Details

“Then we went to Bing Maps, Google Maps, and we’re looking at this metal, shitty corrugated siding.”

Bryan Hance · offsets 50436–50534

Bryan Hance USES Facebook Marketplace

Bryan says Bike Index investigators and victims use Facebook Marketplace listings to identify and report suspected stolen bicycles.

Explicit Confidence 92% · Bryan Hance EP 153 Details

“OfferUp, Facebook Marketplace, and then there’s a whole sort of crappy constellation of knock-offs of OfferUp”

Bryan Hance · offsets 21572–21681