The transaction from smartaction to cryptofarid involves a "hop" to an unknown address, but there are other ways to confirm the connection.

A lot of bounty hunters all sent tokens to this address:

https://etherscan.io/address/0x4e2d102bbe53401cc8acce5b315be60973ae4808#tokentxns

Including:

BountyDoor

One address received transactions from an address linked to Small Rabbit.

Another address received tokens from the address linked to Bounty Door.

Also linked to the cluster of addresses are Stedsm and 2double0 but their payments never went anywhere and look like legit bounty payments sent by Small Rabbit - they just didn't come from the Multisend app like most of the other bounty payments.

smartaction, on the other hand, has both sent and received tokens from the Jahid cluster.

Labeling all the alt addresses that feed into a collection address (and addresses they sent to) looks a bit like this:



So, it doesn't look good for smartaction. It still doesn't make sense that he would rat himself out.

Is Small Rabbit / Kakatua multiple people that had a falling out? Kind of seems like it.

I'm holding off on tagging smartaction for now as there could still exist a reasonable explanation why he's not Small Rabbit.