USDT Distribution Network
DISCLAIMER // NFA // DYOR
This analysis traces USDT token flows from the Sentinel treasury through an intermediary wallet into a network of interconnected wallets. The nature and purpose of these wallets' operations cannot be definitively determined from on-chain data alone. Funds may have legitimate purposes not visible on-chain. Always verify information independently.
⊙ generated by robots | curated by humans
Analysis Date: 2026-02-05
The Sentinel treasury sent 209,450.69 USDT through the same intermediary wallet previously documented forwarding 525 ETH. Tracing that USDT downstream reveals a network of interconnected wallets collectively handling billions in volume, with confirmed connections to Binance and Bybit.
Network Overview
flowchart TD
subgraph Sentinel
TREASURY[Treasury<br/>0x853319C1...5145c6]
INTERMEDIARY[Intermediary<br/>0x151E8Ad5...a97b7b]
end
subgraph Network
WALLET_A[Wallet A<br/>0xa5A56777...0aAEF2<br/>13.3M USDT volume]
WALLET_B[Wallet B<br/>0xf2D60a67...Fe3c51<br/>10.0M USDT volume]
HUB[Hub Wallet<br/>0x44ccac16...8dd329<br/>20.8M USDT volume]
WALLET_C[Wallet C<br/>0x1d791f12...c00193<br/>1.16B USDT volume]
COLLECTOR[Collector<br/>0xfd30e684...5ae531]
end
subgraph Exchanges
BINANCE14[Binance 14]
BINANCE15[Binance 15]
BYBIT[Bybit 1]
end
TREASURY -->|209K USDT| INTERMEDIARY
INTERMEDIARY -->|118K USDT| WALLET_A
INTERMEDIARY -->|81K USDT| WALLET_B
INTERMEDIARY -->|10K USDT| HUB
HUB -->|3.7M USDT| WALLET_A
HUB -->|3.7M USDT| WALLET_B
HUB -->|3.5M USDT| COLLECTOR
WALLET_C -->|40.5M USDT| HUB
WALLET_C -->|2.7M USDT| WALLET_A
HUB <-->|12.8M / 11.1M USDT| WALLET_C
WALLET_A <-->|600K USDT| WALLET_B
WALLET_A -->|600K USDT| HUB
WALLET_A -->|3.4M USDT| COLLECTOR
WALLET_A -->|1.4M USDT| WALLET_C
WALLET_B -->|2.8M USDT| COLLECTOR
WALLET_B -->|1.6M USDT| WALLET_C
COLLECTOR -->|809K USDT| BINANCE14
BYBIT -->|400K USDT| COLLECTOR
HUB -->|15K USDT| BINANCE15| LABEL | ADDRESS | USDT VOLUME | NOTES |
|---|---|---|---|
| Treasury | 0x853319C1...5145c6 (etherscan) |
3.1M sent | Sentinel presale beneficiary |
| Intermediary | 0x151E8Ad5...a97b7b (etherscan) |
209K pass-through | Also forwards ETH (treasury ops) |
| Wallet A | 0xa5A56777...0aAEF2 (etherscan) |
13.3M in / 10.9M out | EOA, USDT-only, 3,018 txs |
| Wallet B | 0xf2D60a67...Fe3c51 (etherscan) |
10.0M in / 7.5M out | EOA, USDT-only, 5,220 txs |
| Hub Wallet | 0x44ccac16...8dd329 (etherscan) |
20.8M in / 18.1M out | Central node, 7,661 transfers |
| Wallet C | 0x1d791f12...c00193 (etherscan) |
1.16B in / 1.14B out | 8,082 transfers, 133 sources, 53 destinations |
| Collector | 0xfd30e684...5ae531 (etherscan) |
9.7M+ in | Bridge to exchanges |
Treasury → Intermediary
Eight USDT transfers over 5 days, totaling 209,450.69 USDT:
| DATE | AMOUNT (USDT) | TRANSACTION |
|---|---|---|
| 2026-01-31 13:13 | 10,000.00 | 0x2778db11...b0d14b (tx) |
| 2026-01-31 13:25 | 30,000.00 | 0xe1679ed4...03016d (tx) |
| 2026-01-31 13:36 | 30,000.00 | 0x7ef95337...50215e (tx) |
| 2026-01-31 13:53 | 27,000.00 | 0x4278239f...0542e8 (tx) |
| 2026-01-31 14:03 | 28,000.00 | 0xef4f0b81...82ab4c (tx) |
| 2026-02-02 01:46 | 27,450.69 | 0x34288cf8...78a84d (tx) |
| 2026-02-04 02:18 | 30,000.00 | 0xec786e3c...27467a (tx) |
| 2026-02-04 23:05 | 27,000.00 | 0x00563269...9054fc (tx) |
| TOTAL | 209,450.69 | 8 transactions |
Intermediary → Network
The intermediary forwarded the full amount to three wallets within minutes to hours of receipt:
| DESTINATION | AMOUNT (USDT) | TX COUNT | TRANSACTIONS |
|---|---|---|---|
| Wallet A | 118,000.00 | 4 | 0x671c3e50...9c3383 (tx), 0x91535952...f0ca6b (tx), 0xb1146be1...d0fd0c (tx), 0x83cbafe1...8bbe01 (tx) |
| Wallet B | 81,450.70 | 3 | 0xe412f7e6...cf06ef (tx), 0x7e7e4383...7d99e0 (tx), 0x2a555cbc...42945b (tx) |
| Hub Wallet | 10,000.00 | 1 | 0x6fd36162...373a9a (tx) |
Downstream Network
Beyond the 209K from Sentinel, these wallets are part of a much larger USDT network. All wallets are EOAs that only interact with the USDT contract (0xdac17f95...831ec7 (etherscan)) — no DEX, DeFi, or other contract interactions. USDT flows bidirectionally between them, creating circular patterns that make tracing specific funds through the network difficult.
Wallet C stands out at 1.16 billion USDT total volume — orders of magnitude larger than the other wallets. Its three largest sources (0x215258e8...1b2397 (etherscan), 0x4ce60d4c...6d2fe9 (etherscan), 0xb82fc8de...7de3dc (etherscan)) all have similar nonce counts (~24,000-25,500), suggesting they may be operated by the same entity or automated system.
The network ultimately connects to Centralized Exchanges (CEX):
| EXCHANGE | DIRECTION | WALLET | AMOUNT (USDT) |
|---|---|---|---|
Binance 14 0x28c6c062...f21d60 (etherscan) |
Outbound | Collector | 809,191 |
Bybit 1 0xf89d7b9c...5eaa40 (etherscan) |
Inbound | Collector | 400,000 |
Binance 15 0x21a31ee1...285549 (etherscan) |
Outbound | Hub Wallet | 14,664 |
Address Poisoning
Zero-value USDT transfers from look-alike addresses target multiple wallets in this network. These addresses are designed to visually resemble the legitimate counterparties, matching the first and last characters while differing in the middle.
| TARGET | LOOK-ALIKE EXAMPLES |
|---|---|
Intermediary 0x151E8Ad5...a97b7b |
0x151e918d...a97b7b, 0x151e2ce0...ce7b7b, 0x151e3095...997b7b |
Wallet A 0xa5A56777...0aAEF2 |
0xa5a39385...0aaef2, 0xa5a5a458...06aef2, 0xa5a5dd40...62aef2 |
Wallet B 0xf2D60a67...Fe3c51 |
0xf2de52aa...ce3c51, 0xf2d6e031...7a3c51, 0xf2d6a64e...373c51 |
Hub Wallet 0x44ccac16...8dd329 |
0x44ccaeb0...fed329, 0x44cc88c2...9ed329 |
Wallets A and B also interact with 500+ token contracts using "USDT" naming with Unicode characters (invisible characters, look-alikes, Cherokee Unicode). Both wallets actively send these alternative tokens to other addresses.
Observations
- ☑ The 209K USDT from treasury was forwarded in full by the intermediary — no funds retained
- ☑ All network wallets are EOAs with no DeFi or DEX activity — USDT transfers only
-
☑ Exchange connections confirmed: Binance 14 (809K out), Bybit 1 (400K in), Binance 15 (15K out)
-
△ Treasury's 209K is a small fraction of the network's total volume (billions)
- △ Bidirectional flows between wallets obscure the origin and final destination of specific funds
- △ No on-chain evidence links these wallets to Sentinel project operations (no SENT token activity)
-
△ Wallets A and B actively distribute alternative "USDT" tokens across hundreds of contracts
-
◇ Whether these wallets are operated by the Sentinel team, a service provider, or an unrelated entity cannot be determined from on-chain data
- ◇ The purpose of the USDT distribution from treasury to this network is unknown
Methodology
This analysis used Etherscan API V2 for transaction and token transfer history, custom Python scripts with local caching, manual transaction trace verification, and a known exchange address database. Scripts:
scripts/analyze_usdt_flows.py- USDT flow tracking from treasury/intermediaryscripts/trace_exchange_pattern.py- Exchange connection tracing
Changelog
| DATE | AUTHOR | NOTES |
|---|---|---|
| 2026-02-05 | Artificial. | Generated by robots. Gas: 55 tok |
| ? | ? | Reviewed, edited, and curated by humans. |