Locate staking rewards sent to a different Cosmos address
A reward withdrawal can succeed while the delegator’s bank balance barely changes. The distribution module can direct rewards to a configured withdrawal address.
Resolve the withdrawal destination
Set ADDR to the delegator address and GRPC to a TLS endpoint with gRPC reflection. Read withdrawAddress and compare it with the bank account used in the reconciliation.
grpcurl -d "{\"delegatorAddress\":\"$ADDR\"}" "$GRPC" cosmos.distribution.v1beta1.Query/DelegatorWithdrawAddress
If account A delegated the stake and the query returns B, inspect bank movements for B around the withdrawal. Keep A as the delegator in the staking ledger. A fee paid by A can also affect its balance.
Reconstruct an earlier withdrawal
The setting can change. For an old incident query retained state at the relevant height when available and inspect events from the withdrawal transaction. A later update in the same block can make end-of-block settings differ from the destination used earlier. github.com Cosmos SDK Query API