Fontes Situation Evidence Archive

June 7, 2026Confidential

Follow the Money

On-chain analysis of where the ZINU fee extractions actually went. All of this data comes from public blockchain records — every transaction is permanently recorded and verifiable by anyone.

The Zombie Inu ($ZINU) smart contract contains two special functions (ManualSwap and ManualSend) that allow the project's operators to extract money from the contract at any time. These functions have been used 58,806 times since the contract was deployed, sending ETH (Ethereum cryptocurrency) to two specific wallet addresses that were hardcoded into the contract from the very beginning. The person who wrote the contract chose these two addresses before the project even launched — every fee collected from investors would automatically flow to them.

We traced where that money went. The total estimated extraction is approximately $288,000. Here is the complete fund flow.

Step 1: The ZINU Contract Collects Fees

ZINU Token Contract

0xc50ef449171a51fbeafd7c562b064b6471c36caa

Every time someone buys or sells ZINU tokens, a percentage is taken as a fee. The contract's ManualSwap function converts accumulated ZINU tokens into ETH (real cryptocurrency with cash value), and ManualSend splits that ETH equally between two wallet addresses. This has happened 58,806 times over 4+ years and is still happening today.

Step 2: Two Fee Wallets Receive the Money

Fee Wallet #1

0x2c6fd9269c28de1ca4a3c46e7d47447effaab8c1

~19,568 deposits received from the ZINU contract
~155 outbound transactions sending ETH elsewhere
Current balance: ~$65 (nearly empty — the money has been moved out)

Fee Wallet #2

0xb3962f88ae49761618e4e2bacac22d6be55c4be6

~19,500 deposits received from the ZINU contract
~226 outbound transactions sending ETH elsewhere
Current balance: ~$69 (nearly empty — the money has been moved out)

These two wallets are controlled by the same person. We know this because: (1) Wallet #1 sent 76+ ETH directly to Wallet #2, (2) both wallets use the same intermediary addresses to move money, and (3) both wallets sent small payments back to the ZINU Deployer address. The person who deployed the ZINU contract — and hardcoded these two wallets into the code — was funded by a Coinbase account.

Step 3: Where the Money Actually Went

The money left these two wallets through a combination of direct exchange deposits and single-use "intermediary" wallets. An intermediary wallet is a fresh address that receives exactly one deposit, then immediately forwards it to an exchange — it's a simple attempt to create one degree of separation, but it does not actually hide anything because the transactions are all recorded on the blockchain.

The operator did NOT use any real privacy tools — no Tornado Cash (a crypto mixing service), no privacy chains, no sophisticated laundering. Just fresh wallets as a one-hop buffer. A blockchain forensics firm would trace this in hours.

Exchange Destinations (Where the Cash-Out Happened)

These are cryptocurrency exchanges — platforms where crypto can be converted to real dollars. Exchanges require identity verification (called "KYC" — Know Your Customer), meaning they have the operator's name, address, and ID on file.

Exchange Amount Deposited Can We Get the Identity? Details
Coinbase ~115+ ETH
(~$185,000+)
Yes — US company, full identity verification, responds to legal subpoenas The primary cash-out destination. Money flowed to 7+ different Coinbase deposit addresses, both directly and through intermediary wallets. This is also the exchange that originally funded the ZINU deployer wallet — meaning the same Coinbase account likely created the project AND received the extracted fees.
Gate.io ~42 ETH
(~$68,000+)
Partial — offshore exchange but cooperates with law enforcement 27.2 ETH routed through an intermediary wallet, then forwarded to Gate.io the same day. Additional deposits of ~15 ETH.
Binance ~20 ETH
(~$33,000+)
Yes — requires identity verification 12 ETH directly from Fee Wallet #1, ~7.8 ETH from Fee Wallet #2. Deposits concentrated in November 2021.
BitMart ~15.6 ETH
(~$25,000+)
Partial — offshore but has KYC Single deposit of 15.56 ETH on November 23, 2021.
Uniswap (converted to USDC stablecoin) ~33.6 ETH
(~$55,000+)
On-chain trail continues — need to trace where the USDC went ETH was swapped to USDC (a dollar-pegged stablecoin) on Uniswap, a decentralized exchange. Confirmed swaps include 14,000 USDC (Jul 2022) and 8,000 USDC (Sep 2022). The USDC likely moved to an exchange afterward.
BitPay ~2.7 ETH
(~$4,400+)
Yes — US payment processor BitPay is used to pay merchants with cryptocurrency (like buying things online with crypto). These appear to be personal purchases made with extracted funds.

Total confirmed exchange deposits: ~229 ETH ($370,000+ at deposit-time prices)

The dollar values above are estimates based on ETH prices at the time of each deposit. The actual dollar amounts received depend on when the operator sold the ETH on each exchange. The November 2021 deposits were made when ETH was near its all-time high of ~$4,800, so those deposits were worth significantly more per ETH than later ones.

The November 2021 Cash-Out

The most intense period of fund movement was the week of November 21, 2021 — right at the peak of the cryptocurrency bull market, when 1 ETH was worth approximately $4,200–$4,800. During this single week, Fee Wallet #2 dispersed 260+ ETH across approximately 20 different addresses. At peak prices, this could represent over $1 million in value being moved in one week.

Notable transfers during this period:

  • 65 ETH (~$280,000) to a single wallet
  • 59.3 ETH (~$255,000) to another wallet
  • 57.156 ETH (~$245,000) to another wallet
  • 15.56 ETH directly to BitMart exchange
  • ~7.8 ETH directly to Binance
  • Multiple transfers of 5–20 ETH each to various addresses

This was clearly a planned extraction — cashing out at peak market prices. The question is who did it and whether Ernie was that person, or whether it was someone else on the team (like Dale the developer, who would have had the technical ability to deploy the contract and set these wallet addresses).

The Coinbase Connection

Why This Matters

There is a single thread connecting everything:

  • The ZINU deployer wallet (the address that created the contract) was funded by Coinbase
  • The FRENZ deployer wallet (the address that created the FRENZ token) was also funded by Coinbase (specifically "Coinbase 27")
  • The two fee wallets route most of their extracted funds back to Coinbase through intermediary wallets
  • The fee wallets also sent small payments back to the ZINU deployer address

One Coinbase subpoena could potentially identify the person who:

  1. Created the ZINU contract and hardcoded the fee extraction wallets
  2. Created the FRENZ token on Base chain
  3. Received ~$185,000+ in extracted investor fees
  4. Potentially the same person behind both projects

If these Coinbase accounts belong to the same person, it proves one individual controlled the entire operation from contract deployment to fund extraction. If they belong to different people, it shows who had the actual financial control (which may or may not be Ernie).

What This Means for Ernie

The on-chain evidence raises a critical question: who controlled these wallets?

Ernie's title was CMO (Chief Marketing Officer) — a marketing role, not a technical or financial one. The person who deployed the ZINU contract and set up the fee extraction would need to be a developer with Solidity (smart contract programming) skills. That points more toward Dale Houk (the lead developer, alias "zinudev") than toward Ernie.

However, Ernie's behavior raises questions:

  • He borrowed money from Brian for rent while the fee wallets were receiving thousands in ETH — was he really broke, or hiding funds?
  • He "holds ZINU hostage — he kept the domain" (per Brian) — suggesting more control than a typical CMO
  • He has two Splendor validators that @SPLITweb3 claims are "exactly valued at what's owed"
  • He promised repayment from Splendor proceeds, suggesting he expected to have access to project funds
  • In the phone call, he says Todor and Ralph directed him to work with "Nick" for OTC deals — suggesting he was involved in fund movement

The Coinbase subpoena would resolve this definitively. If the Coinbase account behind the deployer and fee wallets belongs to Ernie, he was the financial operator, not just the marketing guy. If it belongs to Dale or someone else, Ernie may have been a mid-level participant who didn't control the actual money flows.

Complete Wallet Address Reference

All addresses mentioned in this analysis, for reference and further investigation.

AddressRoleKey Detail
0xc50ef449171a51fbeafd7c562b064b6471c36caa ZINU V1 token contract The contract that collects and distributes fees
0x885f5fd87e62ed2ebd0b0bb1c295c4c43edee5b5 ZINU Deployer Created both V1 and V2 contracts. Funded by Coinbase.
0x2c6fd9269c28de1ca4a3c46e7d47447effaab8c1 Fee Wallet #1 ~19,568 fee deposits received. 155 outbound transactions.
0xb3962f88ae49761618e4e2bacac22d6be55c4be6 Fee Wallet #2 ~19,500 fee deposits received. 226 outbound transactions.
0xde3cd55079d549cbcfb3c152d595a0bd63817dce FRENZ Deployer (Base chain) Created the FRENZ token. Funded by Coinbase 27.
0xBA5D25086C7F7d7E65ad390d7c71c4c1792ec580 $MINE presale wallet Collected ~7.6 ETH from presale investors. Now drained.
0x4aa924A3...C97A87 Shared intermediary Used by BOTH fee wallets to route funds to Coinbase. Confirms same operator.
0x969ec6CC... Shared consolidation address Received 26.6 ETH from Wallet #1 and 36.2 ETH from Wallet #2.