C-Chain by the numbers

All figures come from the population series computed over the block archive, 2023-04 to 2026-10-25. An outer transaction is one in which an EntryPoint emitted a UserOperationEvent (wrapper transactions included). Counts of accounts are counts of addresses, not people.

Monthly UserOperations per version

UserOperations per month, by EntryPoint version

• v0.6
• v0.7
• v0.8
• v0.9

v0.8 and v0.9 are real but tiny next to v0.7; see the per-version small multiples on the versions page.

Show the data as a table

UserOperations per month, by EntryPoint version

Month	v0.6	v0.7	v0.8	v0.9	Total
2023-04	102	0	0	0	102
2023-05	189	0	0	0	189
2023-06	275	0	0	0	275
2023-07	353	0	0	0	353
2023-08	53,643	0	0	0	53,643
2023-09	157,637	0	0	0	157,637
2023-10	97,148	0	0	0	97,148
2023-11	62,127	0	0	0	62,127
2023-12	33,307	0	0	0	33,307
2024-01	44,897	0	0	0	44,897
2024-02	37,454	0	0	0	37,454
2024-03	36,028	0	0	0	36,028
2024-04	29,918	5	0	0	29,923
2024-05	30,566	12	0	0	30,578
2024-06	26,327	57	0	0	26,384
2024-07	16,912	147	0	0	17,059
2024-08	13,188	3,974	0	0	17,162
2024-09	17,919	228	0	0	18,147
2024-10	15,411	315	0	0	15,726
2024-11	11,799	314	0	0	12,113
2024-12	16,584	15,356	0	0	31,940
2025-01	17,291	9,431	0	0	26,722
2025-02	55,709	8,366	0	0	64,075
2025-03	65,152	1,905	0	0	67,057
2025-04	50,964	4,618	12	0	55,594
2025-05	46,129	36,030	7	0	82,166
2025-06	58,226	71,657	0	0	129,883
2025-07	63,631	8,127	0	0	71,758
2025-08	61,371	12,237	0	0	73,608
2025-09	53,281	7,907	4	0	61,192
2025-10	44,956	103,643	238	0	148,837
2025-11	22,250	296,740	62	0	319,052
2025-12	30,027	145,166	10	0	175,203
2026-01	73,389	500,726	21	0	574,136
2026-02	28,316	966,453	6	0	994,775
2026-03	46,293	1,040,423	8	0	1,086,724
2026-04	62,735	1,065,029	38	2	1,127,804
2026-05	31,617	487,832	19	694	520,162
2026-06	29,819	8,966	2	1,823	40,610
2026-07	30,819	10,233	1	1,817	42,870
2026-08	33,982	12,653	440	1,808	48,883
2026-09	28,735	24,998	52	1,707	55,492
2026-10	16,746	24,271	7	1,485	42,509

The 2026 v0.7 burst

v0.7 UserOperations per day, 2025-10-01 to 2026-10-25

109 days in 2026 had at least 50,000 v0.7 EntryPoint logs, from 2026-01-09 to 2026-05-12; activity then fell off sharply from 2026-05-13. What it was: Pixelmon players logging in →

Show the data as a table

v0.7 UserOperations per day, 2025-10-01 to 2026-10-25

Day	v0.7 UserOps
2025-10-01	248
2025-10-02	642
2025-10-03	7,586
2025-10-04	775
2025-10-05	633
2025-10-06	3,235
2025-10-07	2,054
2025-10-08	1,819
2025-10-09	1,394
2025-10-10	489
2025-10-11	579
2025-10-12	4,761
2025-10-13	1,351
2025-10-14	918
2025-10-15	962
2025-10-16	767
2025-10-17	4,368
2025-10-18	1,635
2025-10-19	671
2025-10-20	28,875
2025-10-21	18,074
2025-10-22	7,757
2025-10-23	2,523
2025-10-24	290
2025-10-25	410
2025-10-26	304
2025-10-27	513
2025-10-28	482
2025-10-29	753
2025-10-30	6,178
2025-10-31	2,597
2025-11-01	419
2025-11-02	207
2025-11-03	3,866
2025-11-04	1,660
2025-11-05	11,411
2025-11-06	15,118
2025-11-07	10,852
2025-11-08	12,330
2025-11-09	11,134
2025-11-10	9,941
2025-11-11	9,885
2025-11-12	10,451
2025-11-13	10,707
2025-11-14	11,486
2025-11-15	9,635
2025-11-16	1,406
2025-11-17	7,079
2025-11-18	11,527
2025-11-19	13,846
2025-11-20	16,117
2025-11-21	16,460
2025-11-22	15,325
2025-11-23	14,362
2025-11-24	12,263
2025-11-25	14,179
2025-11-26	10,120
2025-11-27	10,576
2025-11-28	10,173
2025-11-29	9,095
2025-11-30	5,110
2025-12-01	4,771
2025-12-02	4,088
2025-12-03	3,214
2025-12-04	2,922
2025-12-05	2,639
2025-12-06	944
2025-12-07	1,212
2025-12-08	1,979
2025-12-09	7,389
2025-12-10	10,169
2025-12-11	11,192
2025-12-12	7,204
2025-12-13	8,246
2025-12-14	8,549
2025-12-15	5,357
2025-12-16	3,488
2025-12-17	4,348
2025-12-18	7,659
2025-12-19	6,221
2025-12-20	6,138
2025-12-21	2,921
2025-12-22	3,094
2025-12-23	2,017
2025-12-24	1,799
2025-12-25	2,068
2025-12-26	3,492
2025-12-27	3,428
2025-12-28	3,842
2025-12-29	4,513
2025-12-30	5,105
2025-12-31	5,158
2026-01-01	5,161
2026-01-02	1,300
2026-01-03	1,406
2026-01-04	1,186
2026-01-05	4,704
2026-01-06	11,391
2026-01-07	1,817
2026-01-08	4,746
2026-01-09	24,260
2026-01-10	35,563
2026-01-11	33,354
2026-01-12	2,788
2026-01-13	1,947
2026-01-14	2,182
2026-01-15	2,219
2026-01-16	2,118
2026-01-17	1,411
2026-01-18	1,021
2026-01-19	1,221
2026-01-20	1,289
2026-01-21	7,233
2026-01-22	25,917
2026-01-23	34,935
2026-01-24	38,320
2026-01-25	34,789
2026-01-26	40,812
2026-01-27	33,410
2026-01-28	27,197
2026-01-29	44,413
2026-01-30	43,899
2026-01-31	28,717
2026-02-01	32,775
2026-02-02	29,980
2026-02-03	37,387
2026-02-04	33,807
2026-02-05	42,038
2026-02-06	35,576
2026-02-07	35,275
2026-02-08	40,780
2026-02-09	40,083
2026-02-10	47,224
2026-02-11	34,982
2026-02-12	36,006
2026-02-13	35,021
2026-02-14	43,506
2026-02-15	37,493
2026-02-16	40,043
2026-02-17	34,103
2026-02-18	36,867
2026-02-19	36,697
2026-02-20	37,655
2026-02-21	20,882
2026-02-22	25,761
2026-02-23	26,191
2026-02-24	24,726
2026-02-25	29,562
2026-02-26	27,572
2026-02-27	30,910
2026-02-28	33,551
2026-03-01	37,212
2026-03-02	34,149
2026-03-03	35,564
2026-03-04	35,303
2026-03-05	34,581
2026-03-06	26,973
2026-03-07	24,558
2026-03-08	24,537
2026-03-09	24,608
2026-03-10	34,329
2026-03-11	33,964
2026-03-12	28,522
2026-03-13	33,516
2026-03-14	29,375
2026-03-15	33,326
2026-03-16	38,008
2026-03-17	41,749
2026-03-18	46,645
2026-03-19	40,530
2026-03-20	35,549
2026-03-21	34,951
2026-03-22	33,206
2026-03-23	31,920
2026-03-24	32,115
2026-03-25	32,737
2026-03-26	31,885
2026-03-27	33,507
2026-03-28	38,304
2026-03-29	34,973
2026-03-30	32,615
2026-03-31	31,212
2026-04-01	18,626
2026-04-02	34,536
2026-04-03	30,518
2026-04-04	31,694
2026-04-05	32,787
2026-04-06	35,643
2026-04-07	34,291
2026-04-08	33,546
2026-04-09	34,910
2026-04-10	35,132
2026-04-11	34,442
2026-04-12	34,893
2026-04-13	35,536
2026-04-14	35,569
2026-04-15	37,211
2026-04-16	37,134
2026-04-17	36,821
2026-04-18	37,275
2026-04-19	38,216
2026-04-20	38,220
2026-04-21	40,843
2026-04-22	40,265
2026-04-23	39,424
2026-04-24	39,778
2026-04-25	39,849
2026-04-26	40,556
2026-04-27	40,227
2026-04-28	40,367
2026-04-29	40,782
2026-04-30	15,938
2026-05-01	460
2026-05-02	19,097
2026-05-03	73,641
2026-05-04	41,816
2026-05-05	42,684
2026-05-06	42,483
2026-05-07	42,089
2026-05-08	41,206
2026-05-09	40,081
2026-05-10	38,863
2026-05-11	36,543
2026-05-12	32,824
2026-05-13	22,611
2026-05-14	6,969
2026-05-15	335
2026-05-16	285
2026-05-17	327
2026-05-18	394
2026-05-19	402
2026-05-20	341
2026-05-21	330
2026-05-22	371
2026-05-23	303
2026-05-24	316
2026-05-25	348
2026-05-26	483
2026-05-27	514
2026-05-28	470
2026-05-29	455
2026-05-30	388
2026-05-31	403
2026-06-01	482
2026-06-02	486
2026-06-03	346
2026-06-04	246
2026-06-05	247
2026-06-06	224
2026-06-07	225
2026-06-08	275
2026-06-09	370
2026-06-10	243
2026-06-11	260
2026-06-12	278
2026-06-13	236
2026-06-14	231
2026-06-15	303
2026-06-16	403
2026-06-17	297
2026-06-18	266
2026-06-19	259
2026-06-20	213
2026-06-21	229
2026-06-22	368
2026-06-23	537
2026-06-24	285
2026-06-25	281
2026-06-26	247
2026-06-27	270
2026-06-28	220
2026-06-29	331
2026-06-30	308
2026-07-01	320
2026-07-02	320
2026-07-03	237
2026-07-04	226
2026-07-05	218
2026-07-06	331
2026-07-07	310
2026-07-08	317
2026-07-09	271
2026-07-10	312
2026-07-11	224
2026-07-12	227
2026-07-13	353
2026-07-14	276
2026-07-15	252
2026-07-16	330
2026-07-17	350
2026-07-18	244
2026-07-19	253
2026-07-20	355
2026-07-21	579
2026-07-22	821
2026-07-23	498
2026-07-24	363
2026-07-25	253
2026-07-26	265
2026-07-27	321
2026-07-28	317
2026-07-29	330
2026-07-30	390
2026-07-31	370
2026-08-01	355
2026-08-02	248
2026-08-03	416
2026-08-04	346
2026-08-05	366
2026-08-06	366
2026-08-07	316
2026-08-08	262
2026-08-09	241
2026-08-10	436
2026-08-11	490
2026-08-12	434
2026-08-13	433
2026-08-14	439
2026-08-15	405
2026-08-16	524
2026-08-17	914
2026-08-18	1,046
2026-08-19	373
2026-08-20	409
2026-08-21	261
2026-08-22	283
2026-08-23	388
2026-08-24	430
2026-08-25	337
2026-08-26	352
2026-08-27	317
2026-08-28	347
2026-08-29	338
2026-08-30	396
2026-08-31	385
2026-09-01	767
2026-09-02	485
2026-09-03	418
2026-09-04	358
2026-09-05	282
2026-09-06	298
2026-09-07	402
2026-09-08	348
2026-09-09	327
2026-09-10	321
2026-09-11	601
2026-09-12	469
2026-09-13	268
2026-09-14	295
2026-09-15	318
2026-09-16	287
2026-09-17	4,616
2026-09-18	3,286
2026-09-19	948
2026-09-20	1,291
2026-09-21	1,613
2026-09-22	1,009
2026-09-23	1,380
2026-09-24	1,218
2026-09-25	1,037
2026-09-26	465
2026-09-27	395
2026-09-28	432
2026-09-29	471
2026-09-30	593
2026-10-01	371
2026-10-02	596
2026-10-03	303
2026-10-04	1,013
2026-10-05	4,496
2026-10-06	3,622
2026-10-07	1,390
2026-10-08	1,180
2026-10-09	621
2026-10-10	419
2026-10-11	380
2026-10-12	989
2026-10-13	884
2026-10-14	596
2026-10-15	568
2026-10-16	582
2026-10-17	805
2026-10-18	600
2026-10-19	545
2026-10-20	1,280
2026-10-21	641
2026-10-22	539
2026-10-23	606
2026-10-24	656
2026-10-25	589

The reported 73k–83k EntryPoint logs per day is confirmed. Median v0.7 EntryPoint logs per day were:

• February 2026: 80,104
• March 2026: 73,347
• April 2026: 74,896

The burst is wider than February–April:

• 109 days had at least 50k v0.7 logs, from 2026-01-09 to 2026-05-12.
• After the May 3 peak, it ran at about 80k logs per day until May 12, then stopped abruptly: 45,956 logs on May 13, 14,243 on May 14 and 682 on May 15.
• Since June 2026, v0.7 has run at about 450–1,000 logs per day.

v0.7 by month, January–May 2026:

What it was: almost entirely Pixelmon game players. A ProofOfActivity contract (0x945258b8…8faa evidence level: cluster) logged 3.66M signed player activities from 723,138 smart accounts, the largest type being DAILY_LOGIN. Those operations were 70–94% of v0.7 UserOps each month from January to May, and the players were 93–99.7% of v0.7 senders. The logging switched off on May 13–14. The Pixelmon attribution is a strong inference (cluster plus self-description). The full account, with its evidence, is in What happened.

What dominates the burst:

• Paymaster: the Pimlico singleton paymaster v0.7 0x77777777…834c evidence level: primary source sponsored 82.6% (January), 89.8% (February), 96.4% (March), 98.5% (April) and 98.8% (May) of v0.7 UserOps. The second paymaster is 0xbd0334ac…17db evidence level: hint, labelled at hint level as an unattributed paymaster with a third-party "thirdweb" label: 16.3% in January, falling to 1.0% in April.
• Factory: thirdweb AccountFactory v0.7 0x4be0ddfe…dceb evidence level: primary source made 99.0–99.8% of deployments each month.
• Bundlers: about 200 bundler EOAs were active each month, and none had more than about 1.1% of outers after January.
• About 100 of them have addresses starting 0x4337. That subset handled 82% of outers in January, 90% in February, 96% in March and 99% in April–May.
• Registry labels for these are hint level only: "Unattributed bundler #n", and some carry a third-party "Pimlico" label.
• Senders: activity is very dispersed. No single account had more than 0.8% of UserOps in any month. The top senders are the known monitoring-style clusters: account A 0x9be1b9b8…eba37 evidence level: cluster and Safe account B 0xe96e4060…c1f evidence level: cluster.
• Fees: each UserOp became much cheaper during the burst. February cost 508 AVAX for 966k UserOps; April cost 15.4 AVAX for 1.07M. These are receipt fees, so this reflects lower effective gas prices, not a change in operation counts.
• Failed outers: these spiked in March–April (42k and 46k per month, about 4% of handleOps attempts), but the failed txs cost little in total (0.29 and 0.18 AVAX).

Fees

Receipt fees per month (AVAX), by version

• v0.6
• v0.7
• v0.8
• v0.9

Fees are the outer receipt fee (gas used × effective gas price), counted once per transaction. They fell as gas prices fell, not because activity did.

Show the data as a table

Receipt fees per month (AVAX), by version

Month	v0.6 (AVAX)	v0.7 (AVAX)	v0.8 (AVAX)	v0.9 (AVAX)	Total
2023-04	3.7	0.0	0.0	0.0	3.7
2023-05	3.0	0.0	0.0	0.0	3.0
2023-06	4.7	0.0	0.0	0.0	4.7
2023-07	8.5	0.0	0.0	0.0	8.5
2023-08	631.6	0.0	0.0	0.0	631.6
2023-09	1,487.9	0.0	0.0	0.0	1,487.9
2023-10	882.6	0.0	0.0	0.0	882.6
2023-11	748.6	0.0	0.0	0.0	748.6
2023-12	730.2	0.0	0.0	0.0	730.2
2024-01	402.4	0.0	0.0	0.0	402.4
2024-02	322.3	0.0	0.0	0.0	322.3
2024-03	327.7	0.0	0.0	0.0	327.7
2024-04	268.3	0.0	0.0	0.0	268.3
2024-05	267.2	0.1	0.0	0.0	267.3
2024-06	220.6	0.4	0.0	0.0	221.1
2024-07	122.7	1.6	0.0	0.0	124.2
2024-08	95.9	38.3	0.0	0.0	134.2
2024-09	118.1	2.1	0.0	0.0	120.2
2024-10	106.7	3.0	0.0	0.0	109.7
2024-11	89.3	3.6	0.0	0.0	92.9
2024-12	48.8	54.0	0.0	0.0	102.8
2025-01	7.4	2.2	0.0	0.0	9.6
2025-02	37.8	3.8	0.0	0.0	41.6
2025-03	46.2	1.0	0.0	0.0	47.2
2025-04	26.6	1.9	0.0	0.0	28.5
2025-05	40.8	47.9	0.0	0.0	88.7
2025-06	84.7	50.4	0.0	0.0	135.1
2025-07	47.5	8.3	0.0	0.0	55.7
2025-08	42.3	7.9	0.0	0.0	50.2
2025-09	46.3	5.7	0.0	0.0	52.1
2025-10	38.6	61.2	0.0	0.0	99.8
2025-11	12.9	115.2	0.0	0.0	128.2
2025-12	13.8	73.3	0.0	0.0	87.1
2026-01	35.0	385.6	0.0	0.0	420.6
2026-02	15.5	508.1	0.0	0.0	523.7
2026-03	8.3	70.4	0.0	0.0	78.7
2026-04	10.8	15.4	0.0	0.0	26.3
2026-05	8.1	3.0	0.0	0.0	11.1
2026-06	6.1	0.6	0.0	0.0	6.7
2026-07	5.5	0.5	0.0	0.0	6.0
2026-08	6.5	0.8	7.7	0.1	15.0
2026-09	14.4	8.8	0.0	0.3	23.6
2026-10	33.0	30.9	0.0	1.3	65.2

Failed outer handleOps

Failed outer handleOps per month, by version

• v0.6
• v0.7
• v0.8
• v0.9

A failed outer transaction emits no events, but the bundler still pays its fee.

Show the data as a table

Failed outer handleOps per month, by version

Month	v0.6	v0.7	v0.8	v0.9	Total
2023-04	4	0	0	0	4
2023-05	4	0	0	0	4
2023-06	14	0	0	0	14
2023-07	0	0	0	0	0
2023-08	3,654	0	0	0	3,654
2023-09	438	0	0	0	438
2023-10	492	0	0	0	492
2023-11	245	0	0	0	245
2023-12	118	0	0	0	118
2024-01	109	0	0	0	109
2024-02	746	0	0	0	746
2024-03	267	0	0	0	267
2024-04	69	0	0	0	69
2024-05	267	0	0	0	267
2024-06	312	0	0	0	312
2024-07	12	0	0	0	12
2024-08	2	6	0	0	8
2024-09	1	0	0	0	1
2024-10	45	0	0	0	45
2024-11	167	0	0	0	167
2024-12	65	33	0	0	98
2025-01	83	63	0	0	146
2025-02	611	133	0	0	744
2025-03	608	25	0	0	633
2025-04	617	36	0	0	653
2025-05	972	1,164	0	0	2,136
2025-06	3,364	2,668	0	0	6,032
2025-07	1,232	135	0	0	1,367
2025-08	1,895	1,043	0	0	2,938
2025-09	910	167	0	0	1,077
2025-10	610	2,104	0	0	2,714
2025-11	144	1,678	1	0	1,823
2025-12	77	932	0	0	1,009
2026-01	121	1,968	0	0	2,089
2026-02	52	1,429	0	0	1,481
2026-03	2,738	42,332	0	0	45,070
2026-04	6,073	45,724	0	0	51,797
2026-05	627	11,287	1	0	11,915
2026-06	485	215	0	0	700
2026-07	201	127	0	1	329
2026-08	409	190	0	0	599
2026-09	263	224	1	2	490
2026-10	69	106	184	0	359

Concentration

Concentration: share held by the top 1, 3 and 5 actors

• Top-1 share
• Top-3 share
• Top-5 share

Groups with a single actor are omitted. Bundler share is by outer transactions, paymaster share by UserOperations, factory share by deployments. Who the top actors are →

Show the data as a table

Concentration: share held by the top 1, 3 and 5 actors

Group	Actors	Top-1	Top-3	Top-5
v0.6 bundlers	889	15.9%	26.5%	32.6%
v0.7 bundlers	274	1.7%	5.0%	7.7%
v0.8 bundlers	25	53.8%	68.5%	76.6%
v0.9 bundlers	6	96.5%	99.4%	99.9%
v0.6 paymasters	61	40.0%	70.0%	91.5%
v0.7 paymasters	24	80.9%	99.0%	99.7%
v0.8 paymasters	6	48.6%	96.7%	99.9%
v0.6 factories	60	35.4%	80.9%	87.3%
v0.7 factories	35	97.2%	99.7%	99.8%
v0.8 factories	6	30.8%	76.9%	92.3%
v0.9 factories	11	27.4%	52.0%	72.6%

Concentration (whole range)

Shares are by outer txs for bundlers, by UserOps for paymasters and by deployments for factories.

The top actors behind these shares:

• v0.6 bundler top-1: 0xba9cfe6a…207b evidence level: hint, an unattributed bundler evidence level: hint.
• v0.6 paymasters: Biconomy Verifying Paymaster v1 0x000031dd…55d4 evidence level: primary source has the 40.0%. It is followed by 0x3f383d23…6223 evidence level: cluster (shares owner with a 0xGasless factory) and the Pimlico v0.6 singleton evidence level: primary source.
• v0.6 factories: led by the 0xGasless factory V2_0_0, the thirdweb v0.6 AccountFactory and the ZeroDev Kernel v0.2.x factory, all evidence level: primary source.
• v0.7: the Pimlico singleton paymaster has 3.90M UserOps and the thirdweb AccountFactory has 762,912 deployments, both evidence level: primary source. Both are driven mainly by the 2026 burst.

So v0.7 sponsorship and account creation are highly concentrated, while v0.7 bundling is spread across many EOAs.

One day up close: 2026-10-18

Whole observed EntryPoint traffic for UTC day 2026-10-18: 1,396 outer transactions, 1,397 UserOperations, 2.429945061704446240 AVAX in receipt fees. All outers succeeded; one op failed.

"364 accounts" means 364 addresses, not 364 people. The largest v0.7 account alone sent 165 ops.

The archetypes, each with a real example

Collateral withdrawals (v0.6, the biggest single target). Coordinator 0x5bbb435ec20154f016ee96041c3fdfe46354603a evidence level: hint received 432 withdrawAsset(...) legs in 431 outers. Of these, 343 USDt and 75 USDC singleton withdrawals are already approved transfers, and all request _directTransfer = true. Example 0x8782850a1ebb1358b89bb0e2f1e7c0b1f2713d64a615be24f0e986931bb006db: account 0x11042755…65f2 requests 2,200,000 base units (2.2 USDt) of 0x9702230a…a8c7 evidence level: primary source, Pimlico-sponsored, submitted by 0x4337005d…98b6 evidence level: hint. Known: request shape, assets and matching token records. Unknown: the application behind the coordinator. Signify/Rain is a clue, not a binding. 10 native-asset requests are not proven AVAX payments.

Fan-club passes, almost certainly Fan3 (v0.7). 161 approved safeTransferFrom calls move token id 0 out of three ERC1155 collections: Sara Landry's "The Afters Pass" (88, 0x4c4dbecc300eff89b88c5ce2923056a44000201a evidence level: cluster), Say Now's "Saylor City Pass" (64, 0x69e461a41f672237afe483dd0055dd171b44133e evidence level: cluster) and Max Richter's "Sleep Pass" (9, 0x82b6d5d249f24448807f1e865e9e31d1b6e6d8a2 evidence level: cluster). Each token's own metadata says what it is: "The Afters; the Sara Landry fan club Pass.", "The limited edition membership pass for Saylor City, brought to you by Say Now.", a limited-edition pass for the album Sleep. These are the product the fans were getting: a free-to-claim membership pass that unlocks ticket pre-sales and member perks.

Why Fan3: all three are thirdweb TokenERC1155 clones with one owner(), 0x37688ab18ac82307233f22aebb58a15ce613b025 evidence level: cluster. That key owns 15 such "Collectibles" contracts, each issuing a "Pass" (Pitbull, Tinie Tempah, Jessie Ware, Ronan Keating, Newcastle United FC, Truman Brewery and others), and sends their mintTo calls. One of them, 0x5c3a8db8e43d725463883b2a7b2ab0f0f99c19c4 evidence level: cluster, issues Pitbull's "Bald-E's Pass", which Avalanche's announcement names as Fan3's launch pass. Say Now's pass links to saynow.fan3.io ("Powered by fan3"), whose app is built on the thirdweb SDK. Fan3's FAQ describes exactly this: passes are NFTs, free to claim, sign-in by Google or email, so fans get a smart account and a sponsored claim rather than a wallet of their own. Evidence: an archived copy of the source (getters at block 98,441,238, plus the IPFS metadata).

Example 0x18f586af63e7812d57e167fccaf8fc0b31b3da2c6c2e7cef102a09bd2638264e: account 0x8efb14b8…4d10 sends 1 Max Richter Sleep Pass (token id 0) to 0x51a0b2d4…4c88, sponsored by paymaster 0x5fa66dfe…a4ab evidence level: hint, submitted by 0x744d6e01…5dd1 evidence level: hint. Strong inference, not primary source: Fan3 operates these collections (it publishes no contract addresses). Unknown: who the individual fans are, and how involved each artist is beyond the branded pass.

Signed daily-result registry (v0.7). 175 ops call 0x1e781cbd on 0xfb315bbe8c1ae254b6ea88afe2d38139c3148a3f evidence level: self-description. Each carries (F0 day, F1, F2, F3 deadline, signature), where the signature is an EIP-712 attestation (domain Avax-dle) from one signer, 0x359ad9b2c381e1e1cc373551a12bf6033842ae74 evidence level: cluster. 100 accounts took part; 75 were deployed that evening by factory 0x863b8e15d37abf33d5177108f6a07d541a698d25 evidence level: hint, sponsored by paymaster 0x25ff7720…df9, bundled by 0x28738746aaafd124f8796d916dc5d9f07d8d7b7b evidence level: hint. Example with deployment: 0x4ee9e9e25a46be48a5e2ca2306b0c047b75a86668e018e3a9e211ba28b7c98fa (account 0x2485c0de…dcdf). Proven: a signer-attested per-participant daily record with streak-like state; the contract moves no tokens. Unknown: the public app, and what F1/F2 mean. "-dle" is a clue, not proof of a word game.

Scheduled probe accounts (v0.6 + v0.7). Account 0x34551da0a1c30149667f0fc189d7724995f71119 evidence level: cluster (v0.6) and 0x9be1b9b87d189df444f4f8a66f1a50398bceba37 evidence level: cluster (v0.7) each sent 120 ops: an empty, zero-value call to address 0. Every one of the 96 quarter-hour slots is covered, each op has a fresh nonce key with sequence 0, and all 240 signatures recover to 0x8fd379246834eac74b8419ffda202cf8051f7a03 evidence level: cluster. Examples: 0x205b550f8cf4462ca048872d6b5df61b1e841d5b2f050657e11f7affd6339049 explained → (v0.6, Pimlico v0.6 paymaster) and 0xb5124fb1689d02f6fad461d3487e57afc0a321e02447b4fe613f486d4b9a4788 (v0.7, Pimlico v0.7). Strong evidence: one coordinated scheduled workload. Inference only: that it is infrastructure monitoring, and who runs it.

Safe self-calls via the Candide module (v0.6, v0.7, v0.9). Three Safes send empty zero-value calls to themselves: 0x58aa5729…696b evidence level: cluster (v0.6, 18 ops), 0xe96e4060…6c1f evidence level: cluster (v0.7, 65), 0xa1fdd9daed9004f685b6900d5463f72d13dfccca evidence level: cluster (v0.9, 64, nonces 8516→8579). All 147 signatures recover to 0x0f88ef66eea497e7bc54b3b7a871b138a1f0bc9f evidence level: cluster under each version's own SafeOp schema (v0.6 uses a legacy uint256 layout; the later schema gives wrong results). All are submitted by 0x3cfdc212769c890907bce93d3d8c2c53de6a7a89 evidence level: cluster. The v0.9 module 0x22939e839e3c0f479b713eaf95e0df128554aead evidence level: primary source matches Candide's published constant. Examples: 0x1edcd542859e091aeaa7b9fc069255cf6f42f7ad0e34db22dc6729cc58f15448 explained → (v0.9), 0x572444e6ec6583f42b063199be809fc69d5959ab8a49f92461766a5598bde63a (v0.7, self-paid), 0x43bf538a3cba3a503b3a63cbdbd66a6c2f25e79efdb2e987eb730d75ed890b7c (v0.6). Consistent with Candide's documented live monitoring. Not proven: no public source binds these exact accounts. This is the only v0.9 traffic on Oct 18.

LI.FI routes (v0.6 + v0.7). LI.FI's diamond 0x1231deb6f5749ef6ce6943a275a1d3e7486f4eae evidence level: primary source (bound to LI.FI's official deployments file) appears in 20 outers. Example 0x6af4bb5b034d8462aae51e42c34df6f47cf13e2295b39730de88a3f41a43ec45 explained → (v0.7): swapTokensMultipleV3NativeToERC20 with integrator string "bitpanda" and two inner swap descriptors, from account 0xc4d96305…8035. A v0.6 example: 0x4d47531659364b9e64140f25a11d8b1198cd03603e721e7919d628f2a78910cd (approve + LI.FI call 0x5fd9ae2e, a facet not yet decoded). Known: the requested route. Unknown: full realized route, and destination arrival.

Small mints and app calls (v0.6). 49 fungible mints of exactly 10^18 across ten ERC-20s with names like EtherArcade, and 39 NFT mints across eleven collections. Each one has a matching zero-from Transfer. Example 0x3b818a650700d009dc5f9ec2cb65acd97759e9add434c30694b63b99ae43ad5d: mint(account, 1e18) on 0x89994c4282d18efc56fe74c3a5cdb76b39780d22 evidence level: self-description ("EtherArcade"/ERCA). Plus postMessage, setStatus, addContact… calls with timestamped strings. Not established: that these are games, real projects or bots.

Cross-chain sends. The walk-through transaction (Relay deposit after a Kernel deployment) and the failed CCTP op above are examples. On Oct 18, ten v0.7 operations (this one included) share the shape "deploy a Kernel account via the ZeroDev meta factory, Pimlico-sponsored, then approve → Relay depositErc20 → approve(0)".

---

Caveats

• The beneficiary is not in parquet (it is calldata), so "beneficiary differs from bundler" is not measured.
• Distinct counts are per period and are not additive across months. All-range distinct senders come from a separate full scan.
• Bundler, paymaster and factory actor counts come from the complete per-month actor lists.