Wu said that according to Cyvers CTO @Meir_Dv, an unknown address: 0x1d…7ac9 created a contract: 0x45…CeA9 on the Base network on May 24, and the Certik test address: 0x5a…285C also used the same signature hash 0xa04a4c3b of the unknown address: 0x1d…7ac9, which questioned Certik's claim that the vulnerability was discovered on June 5. Further investigation found that the contract: 0x45…CeA9 deployed on Base was suspected to be testing OKX and Coinbase for similar vulnerabilities as Kraken.