# Tracing stakefish validator NFTs stakefish recently [launched](https://blog.stake.fish/stake-mint-earn/) validator NFT, which is said to be noncustodial. So we're going to deep dive and trace the transactions to see how it works <kbd>![](https://i.imgur.com/75rfx4G.png)</kbd> ## Mint The NFT Manager is at: [0xffff2d93c83d4c613ed68ca887f057651135e089](https://etherscan.io/address/0xffff2d93c83d4c613ed68ca887f057651135e089) Looking at the first mint at tx [0xb22ff8edd3909c447de91162dc0a387f0bebfbe487a8d0a67fa1fa3075216966](https://etherscan.io/tx/0xb22ff8edd3909c447de91162dc0a387f0bebfbe487a8d0a67fa1fa3075216966) ![](https://i.imgur.com/VLEU3DZ.png) Events confirms the validator contract address, which is the same as withdrawal address. ![](https://i.imgur.com/gS898N8.png) ## Deposit Analyzing the validator contract address, I find the Beaconchain transfer [0x72a73d2c52284f22aec675e78e663aef55edf5d8d7f33c4650a036f396fab595](https://etherscan.io/tx/0x72a73d2c52284f22aec675e78e663aef55edf5d8d7f33c4650a036f396fab595). ![](https://i.imgur.com/BpOmOYu.png) ## Verify the Withdrawal credentials From the deposit, we trace it to the validator pubkey https://beaconscan.com/validator/0x97e9838a7d2d62db1847b90b0c2a58239ca78b8d144ffda991ae7945817850704845cdf6fa389fd2c4142044ff9ebfc8#deposits ![](https://i.imgur.com/OFQUHKc.png) And more: https://beaconscan.com/slot/5620779#deposit The withdrawal credentials is: ``` 0x010000000000000000000000ce9e8587e5d5539a00d0a3357b4d8ae089dec8bf ``` which means it's a [0x1 ETH1](https://github.com/ethereum/consensus-specs/pull/2149) withdrawal credentials pointing to `ce9e8587e5d5539a00d0a3357b4d8ae089dec8bf` and yes, that matches with the smart wallet address. When withdrawal or sweep happens, the funds will be transfered to smart wallet, and the owner can withdraw() out of it. ## Withdraw https://etherscan.io/token/0xffff2d93c83d4c613ed68ca887f057651135e089#writeContract ![](https://i.imgur.com/u80o0jS.png) I hope that's helpful. Let me know if there is anything else to look at.