Comprehensive Scam Analysis Report

The @DaoKwonDo account presents a paradoxical profile that combines long-term platform presence with recent verification status changes. Created on June 10, 2011, the account has accumulated over 14 years of activity on Twitter, predating the cryptocurrency boom and establishing temporal legitimacy. However, the account currently holds only blue verification status (Twitter Blue subscription) rather than traditional legacy verification, which is significant given the account's claimed influence and connections within the cryptocurrency space.

The account's follower composition reveals a sophisticated network that includes legitimate high-profile entities. Analysis shows connections to Gary Vaynerchuk (3,040,826 followers), OpenSea (2,296,346 followers), CZ Binance (10,467,420 followers), and Bored Ape Yacht Club (1,045,241 followers). Among the 137,599 total followers, 3,770 are classified as influencers, 680 as projects, and 24 as venture capital entities. This distribution suggests either genuine industry connections or strategic following patterns designed to create legitimacy through association.

The account's activity metrics demonstrate exceptionally high engagement levels with 91,399 total tweets and 254,956 favorites accumulated over its lifetime. This translates to approximately 17 tweets per day on average since account creation, indicating either dedicated personal management or potential automation. The account follows 5,788 accounts while maintaining a follower-to-following ratio of approximately 24:1, which falls within normal ranges for influencer accounts but does not definitively indicate organic growth.

The profile description identifies the operator as "Hooked On Phonics 📚 Angel Investor👼 @mosciun" with a Bitunix referral link, positioning the account as an angel investor in the crypto space. The @mosciun reference connects to an NFT project that has been subject to community criticism and allegations of abandonment. The inclusion of an exchange referral link in the profile is a common monetization strategy among crypto influencers but also raises questions about potential conflicts of interest in project promotions.

Multiple independent sources have documented serious allegations of fraudulent activity involving @DaoKwonDo across several cryptocurrency projects. The most comprehensive evidence comes from investigative reports published by the Cyber Strategy Institute, a blockchain security research organization, which identified @DaoKwonDo as part of a coordinated scam network operating alongside accounts @barkmeta and @GodsBurnt. These allegations are corroborated by numerous community reports, victim testimonials, and on-chain analysis.

The primary evidence centers on leaked audio recordings allegedly capturing conversations between the three operators discussing strategies to deceive investors through coordinated Twitter Spaces promotions. According to the Cyber Strategy Institute's January 1, 2025 report titled "New Year Fomo ATHs Scammers Hacks Phishing Insights," these recordings document the group "boasting about locking investor funds in the $POX scam project." The use of Twitter Spaces as a manipulation tool is particularly concerning, as these live audio conversations create urgency and social proof while leaving minimal permanent evidence compared to written communications.

The MoneyGlitch incident represents the most financially significant documented scam. Multiple community members, including @cryptofavs and @TheDonSerge, reported on June 18-19, 2024, that the trio raised approximately $1 million through presales for a Doginals-based project before abandoning participants. @cryptofavs stated: "The triad of #doginals scammers blocked me (@barkmeta @DaoKwonDo and @GodsBurnt), just as they've blocked several others from #MoneyGlitch scam where they raised $1M and deceived all participants." The blocking of critical voices is a common pattern in scam operations designed to control narrative and prevent warning dissemination.

Additional allegations involve the $FIREWORKS token, which was identified as an expected rug pull by Legion scammers, and the $SHIRO token, described as a "slow rug pull" where former promoters including @DaoKwonDo remained conspicuously silent as the project collapsed. The slow rug pull methodology is particularly insidious, as it involves gradual value extraction rather than immediate abandonment, making it harder for victims to recognize the scam in progress and potentially exposing them to greater losses over time.

A separate analysis from ChainThink identified @DaoKwonDo's involvement in token presale scams alongside another influencer known as "Shillin Villian," launching tokens such as $COPE and $POGE. The pattern across these allegations is consistent: high-profile promotion through social media, presale fundraising, and subsequent project abandonment or value collapse. The repetitive nature of these allegations across multiple projects and timeframes suggests systematic rather than isolated fraudulent activity.

Analysis of @DaoKwonDo's recent activity reveals sophisticated engagement patterns that combine legitimate crypto commentary with aggressive project promotion and scam detection theater. Over the 30-day period from October 10 to November 9, 2025, the account posted approximately 40 analyzed tweets with peak activity on October 9 (20+ tweets) and November 8-9 (15+ tweets). This high-frequency posting pattern maintains constant visibility in followers' feeds while creating an impression of active market participation and insider knowledge.

Content analysis shows 40% of recent activity focused on promoting the Aster token/DEX project, with claims of "$2M daily revenue and potential 50B+ valuation." These extraordinary claims lack verifiable evidence and represent classic pump tactics designed to create FOMO (fear of missing out) among followers. Simultaneously, 25% of content involved systematic criticism of Zcash, labeling it a "fake privacy coin" and alleging "organized pump and dump scheme targeting investors." This attack pattern serves dual purposes: positioning @DaoKwonDo as a scam detector while potentially manipulating sentiment against competing privacy-focused projects.

The account frequently shares content about detecting fake engagement and bot followers, ironically positioning itself as an authority on authenticity. On November 6, 2025, @DaoKwonDo posted: "shares methods to detect fake followers using TweetScout, warning about influencer schemes and providing quality thresholds." This meta-commentary on scam detection creates cognitive dissonance that may serve as psychological defense against criticism—followers may reason that a scammer would not openly discuss scam detection methods, despite this being a documented manipulation tactic.

Community responses to the account's posts reveal polarized sentiment. Analysis of 25 mentions shows 40% positive sentiment, 36% negative sentiment, and 24% neutral sentiment, with 9 distinct scam accusations from different users. This near-even split between positive and negative responses is characteristic of controversial influencer accounts where some followers remain loyal despite allegations while others actively warn against the account. The presence of sustained negative sentiment from multiple independent sources strengthens the credibility of scam allegations.

Particularly concerning are community questions about the authenticity of wealth displays. User @Dullakaz posted on November 6, 2025, questioning luxury items displayed by @DaoKwonDo, "suggesting items may be from Alibaba and calling iPhone fake." These displays of wealth serve to establish credibility and attract followers seeking financial success, but if fabricated, represent deliberate deception designed to manipulate follower perception and trust. The gap between displayed wealth and actual on-chain holdings (detailed in the next section) supports these authenticity concerns.

On-chain analysis of the Ethereum address associated with @DaoKwonDo (booksi.eth: 0x39880cB9a885B9F2353352C4edAEb4A8B1c6541e) reveals a significant disconnect between the wealth displayed on social media and actual cryptocurrency holdings. As of the analysis date, the wallet's total holdings amount to approximately $22.19 USD across multiple tokens, with the largest position being $8.18 in EMAX token (28,736,925,440 tokens). This modest portfolio stands in stark contrast to the luxury items, high-value trades, and successful investment claims frequently posted on the Twitter account.

The wallet's transaction history shows primary activity concentrated in 2023, with recent transactions limited to small-value swaps involving Network Token and Wrapped Ether. The wallet holds 0.001071 ETH (approximately $3.61), 5 USDT ($5.00), 3.24 USDC ($3.24), and 990,000,000 POODLE tokens ($2.16). The presence of numerous low-value meme tokens and the absence of substantial stablecoin reserves or blue-chip cryptocurrency holdings suggests either the use of multiple wallets not publicly disclosed, or a significant gap between claimed and actual financial success.

Arkham Intelligence tags the address as "Key Opinion Leader," "Individual," "Contract Deployer," and "Uniswap V3 Pool Deployer," indicating some level of DeFi participation and smart contract interaction. The contract deployer tag is particularly relevant, as it confirms technical capability to create tokens—a necessary skill for executing token-based scams. However, the limited recent activity and low portfolio value raise questions about whether this wallet represents the account operator's primary holdings or serves as a public-facing address while substantial assets are held elsewhere.

The discrepancy between on-chain holdings and social media presentation is a significant red flag. Legitimate successful traders and investors typically demonstrate verifiable on-chain success that aligns with their public claims. The absence of such evidence, combined with community allegations of fake luxury item displays, suggests a pattern of fabricated success designed to attract followers and establish false credibility. This deception serves the fundamental scam model: appearing successful to attract victims who hope to replicate that success by following the influencer's recommendations.

Based on comprehensive analysis of account profile data, documented scam allegations, engagement patterns, and blockchain activity, @DaoKwonDo presents a HIGH RISK profile for potential fraudulent activity. The convergence of multiple independent red flags across different data sources creates a compelling case for extreme caution when interacting with this account or participating in promoted projects. The risk assessment considers both the severity of documented allegations and the consistency of patterns across multiple dimensions of analysis.

The most significant risk factor is the documented evidence of involvement in multiple scam operations, including the $1 million MoneyGlitch presale scam, the $POX investor fund locking scheme, and the $FIREWORKS and $SHIRO rug pulls. These allegations come from multiple independent sources including institutional blockchain security researchers (Cyber Strategy Institute), community watchdog groups (Anti Ruggers United), and individual victims. The existence of alleged audio recordings documenting scam planning elevates these from mere accusations to potentially prosecutable fraud evidence.

The behavioral pattern of aggressive promotion combined with scam detection theater represents sophisticated psychological manipulation. By positioning himself as an authority on identifying scams while simultaneously promoting questionable projects, the account operator creates cognitive dissonance that may reduce follower skepticism. The systematic attacks on competing projects like Zcash, combined with unverified claims about Aster's "$2M daily revenue," demonstrate classic pump-and-dump promotional tactics designed to manipulate market sentiment and drive followers into promoted positions.

The disconnect between displayed wealth and on-chain holdings represents deliberate deception. With only $22.19 in verifiable cryptocurrency holdings in the publicly associated wallet, the frequent displays of luxury items and claims of successful trading appear fabricated to establish false credibility. This deception serves the fundamental scam model: appearing successful to attract victims who hope to replicate that success. The community's questioning of luxury item authenticity, combined with minimal on-chain evidence of wealth, strongly suggests fabricated success narratives.

The account's long history (14.5 years) and connections to legitimate high-profile accounts provide a veneer of legitimacy that may lower follower defenses. However, account age alone does not validate trustworthiness, and high-profile followers do not constitute endorsements. The blue verification status (paid subscription) rather than legacy verification further indicates that Twitter has not independently verified the account's claimed identity or legitimacy. The combination of apparent legitimacy markers with documented scam involvement creates a particularly dangerous risk profile for unsophisticated investors.

Based on the comprehensive risk assessment, we recommend that retail investors, institutional participants, and cryptocurrency community members exercise extreme caution when encountering @DaoKwonDo or associated accounts. The documented evidence of scam involvement, combined with ongoing promotional activities and wealth fabrication, creates an unacceptable risk profile for financial interaction. The following recommendations provide specific guidance for different stakeholder categories to minimize exposure to potential fraud.

For Retail Investors

Do not participate in any projects, token presales, or investment opportunities promoted by @DaoKwonDo. The documented history of scam involvement across multiple projects (MoneyGlitch, $POX, $FIREWORKS, $SHIRO, $COPE, $POGE) demonstrates a pattern of fraudulent activity that is likely to continue. Current promotion of the Aster token with unverified claims of "$2M daily revenue" and "50B+ valuation" exhibits classic pump-and-dump characteristics and should be avoided entirely.

Unfollow and block the account to prevent exposure to manipulative content. The psychological manipulation tactics employed, including scam detection theater and wealth displays, are designed to lower skepticism and create trust. Continued exposure to this content may unconsciously influence investment decisions even among skeptical followers. Blocking also prevents the account from monitoring your activity or targeting you with direct messages.

Verify all cryptocurrency investment opportunities through independent research. Never rely solely on influencer recommendations, regardless of follower count or apparent credibility. Check project fundamentals, team backgrounds, smart contract audits, and community sentiment across multiple independent sources. Use blockchain explorers to verify claimed transaction volumes, liquidity, and holder distributions before investing.

Be aware of impersonation attempts. Multiple fake accounts mimicking @DaoKwonDo exist, including @DaoKwonDoTG and @daokwondoo. These impersonators target the account's followers with additional scams. Verify account handles carefully, never respond to unsolicited direct messages offering investment opportunities, and be suspicious of any requests for private key information or wallet connections.

For Cryptocurrency Projects & Platforms

Implement enhanced due diligence for influencer partnerships. Projects considering promotional partnerships with @DaoKwonDo or associated accounts should conduct thorough background checks including review of scam allegations, on-chain activity verification, and community sentiment analysis. Association with accounts involved in documented scams can damage project reputation and expose the project to regulatory scrutiny.

Monitor for coordinated manipulation attempts. The documented collaboration between @DaoKwonDo, @barkmeta, and @GodsBurnt in the MoneyGlitch and $POX scams demonstrates coordinated manipulation tactics. Projects should monitor for unusual promotional activity from multiple accounts simultaneously, particularly when combined with Twitter Spaces events designed to create urgency and social proof.

Report suspicious activity to platform administrators and regulatory authorities. Cryptocurrency exchanges, wallet providers, and social media platforms have reporting mechanisms for fraudulent activity. Document evidence of scam promotion, coordinate with other affected projects, and file reports with relevant authorities including the SEC, FTC, and FBI Internet Crime Complaint Center (IC3) for U.S.-based operations.

For Blockchain Security Researchers

Continue monitoring and documenting activity. The Cyber Strategy Institute's investigative work has been valuable in exposing scam operations. Continued monitoring of @DaoKwonDo and associated accounts can help identify new scam projects early, protect potential victims, and build evidence for potential legal action. Focus on documenting on-chain evidence, archiving social media content, and tracking fund flows.

Analyze network connections and collaboration patterns. The documented collaboration with @barkmeta and @GodsBurnt suggests a broader scam network. Network analysis can identify additional associated accounts, shared wallet addresses, and coordinated promotional patterns. This information can help predict future scam operations and warn communities before significant losses occur.

Develop automated detection systems. The behavioral patterns exhibited by @DaoKwonDo—wealth fabrication, aggressive promotion, scam detection theater, project abandonment cycles—can be codified into detection algorithms. Machine learning models trained on documented scam accounts can help identify similar high-risk accounts earlier in their operational lifecycle.

For Regulatory & Law Enforcement

Investigate documented allegations for potential prosecution. The existence of alleged audio recordings documenting scam planning, combined with documented financial losses exceeding $1 million in the MoneyGlitch case alone, may constitute prosecutable securities fraud, wire fraud, or conspiracy charges. The multi-state and potentially international nature of victims may trigger federal jurisdiction.

Coordinate with cryptocurrency platforms for account action. Twitter/X, cryptocurrency exchanges, and wallet providers can take administrative action against accounts involved in documented scams. Coordination between regulatory authorities and platforms can result in account suspensions, fund freezes, and prevention of future scam operations through the same infrastructure.

Develop industry-wide influencer accountability standards. The cryptocurrency industry lacks comprehensive standards for influencer disclosure, promotional transparency, and accountability for fraudulent recommendations. Regulatory guidance similar to FTC influencer marketing rules, adapted for cryptocurrency-specific risks, could help protect retail investors while preserving legitimate promotional activity.