Hipshot — Hyperliquid Cluster Attribution

April 15, 2026 · Identity resolution across a 209-address Hyperliquid wallet cluster using ENS, Farcaster, and Hypurr NFT cross-reference

Wallets in cluster 209 unique addresses

Hypurr NFT holders 30 early HyperEVM supporters

ENS names found 13 via reverse lookup

Identities confirmed 6 via Farcaster + ENS

How We Identified Them

The input was a flat CSV of 209 Hyperliquid-linked wallet addresses, pre-tagged with Hypurr NFT ownership. No names, no handles — just addresses and one boolean. Three sequential lookups produced the identity layer.

Step 1 — Hypurr NFT as a priority filter

The Hypurr NFT collection (4,600 NFTs) was distributed exclusively to early HyperEVM supporters. Floor price settled at $55–69K at launch, implying holders are serious participants — not casual wallets. 30 of 209 addresses hold one. These were the first cohort to investigate because Hypurr holders tend to be public-facing: they paid for access and are incentivised to signal it.

Why Hypurr NFT holders leak identity more readily

NFT ownership at $55–69K floor is a status signal. Holders post about it. The collection is specific enough that community lists, Twitter threads, and Discord servers exist that map NFT token IDs to public handles. Even without direct lookup, Hypurr holders have self-identified in public Hyperliquid community contexts far more than anonymous traders.

Step 2 — ENS reverse lookup on all 209 addresses

ENS reverse records map an Ethereum address back to a human-readable name. We queried api.ensideas.com/ens/resolve/{address} for each of the 209 addresses. 13 returned names. ENS records also optionally store social handles — Twitter, Telegram, GitHub — though in this cluster none had those fields set. The names themselves are often sufficient: machibigbrother.eth, rjgrant.eth, and dirtycat.eth are all searchable handles.

Step 3 — Farcaster bulk address lookup

Farcaster requires wallet verification to create an account — every Farcaster profile is linked to one or more verified ETH addresses. The Neynar API exposes a bulk-by-address endpoint that maps up to 100 addresses per call to Farcaster profiles. Running all 209 addresses returned 6 matches with full profile data: username, display name, bio, follower count, and — critically — verified_accounts, which lists linked Twitter/X handles where the user has cross-verified.

Why Farcaster is the most reliable pivot for crypto Twitter identity

Farcaster's on-chain registration model means the ETH address → Farcaster profile link is cryptographically verified, not self-reported. Unlike ENS social records (which are optional and rarely filled), Farcaster profiles exist to be public. The verified_accounts field goes further: when a user cross-verifies their Twitter/X account on Farcaster, it produces a signed attestation that both accounts belong to the same person. @whitesocks256 was identified this way — the Twitter handle came directly from the Farcaster verified_accounts field on wallet 0x79155b…

What the three steps cost

ENS reverse lookup: free, ~0.15s per address, no API key. Farcaster bulk lookup: free tier via Neynar docs key, 100 addresses per call, two calls for 209 addresses. Total wall-clock time: under 90 seconds for the full cluster. This is a fully reproducible pipeline on any address list.

The pipeline does not touch Twitter's API. Twitter has no on-chain anchor — the ETH → Twitter link only surfaces when the user has set it in ENS records or cross-verified on Farcaster. Addresses with no ENS and no Farcaster presence are opaque to this method. 15 of 16 unresolved addresses in this cluster fall into that category.

Confirmed Identities

Six wallets resolved to public identities. Four via Farcaster profile match, one via Farcaster + verified Twitter cross-link, one via ENS + Farcaster.

Address	ENS	Identity	Handle	How identified	Hypurr
0x3280…3469	—	Trevor McFedries	@trevor · @whatdotcd	Farcaster bulk lookup — FWB + Brud founder	●
0x7915…c07b6	—	whitesocks	@whitesocks256	Farcaster verified_accounts → Twitter link · Monad / Ritual / thru dev	●
0x020c…5872	machibigbrother.eth	Machi Big Brother	@machibigbrother1	ENS reverse lookup + Farcaster profile match	—
0xb4a9…f1f7	—	Max E	@rugmaxi	Farcaster bulk lookup	●
0xdd7a…8830	rjgrant.eth	RJ Grant	@baznocap	ENS + Farcaster — building Nodefy.xyz	—
0x36fb…f86	—	Peter Jennings	@peterjennings	Farcaster bulk lookup — markets + crypto	—

ENS-named, identity unresolved

13 addresses have ENS names but no Farcaster match and no Twitter record set in their ENS profile. These handles are the next lookup targets — search directly on X/Twitter and Telegram.

Address	ENS name	Hypurr	Explorer
0x8607…8d5	wanyekest69.eth	●	ES →
0xa183…482	🍜🍜🍜🍜🍜.eth	●	ES →
0xbe4e…75e	binanceokex.eth	●	ES →
0x0e0b…57e	dirtycat.eth	●	ES →
0x6859…1e	bergspyder.eth	—	ES →
0x5bcb…800	cocteau.eth	—	ES →
0x1523…b6c	condorloco.eth	—	ES →
0x3b88…4a7	hapdog.eth	—	ES →
0x418a…888	58bro.eth	—	ES →
0x0ddf…902	pension-usdt.eth	—	ES →
0xc672…7ab	sellhalfandhold….eth	—	ES →

Cluster Explorer

All 209 wallets. Filter by Hypurr NFT ownership, ENS presence, or confirmed identity. Copy individual addresses, rows, or the full filtered set.

Showing 209 of 209 wallets

Address	ENS	Identity / Handle	Hypurr	Links

Identity data sourced from ENS reverse lookup (ensideas.com) and Farcaster bulk address lookup (Neynar API). Hypurr NFT status from source dataset. Individual address investigation archived separately. For informational and research purposes only.