Crypto Sleuth Links Russian OTC Desk To $4.7M Laundering

bitcoinistPubblicato 2026-03-25Pubblicato ultima volta 2026-03-25

Introduzione

ZachXBT, an anonymous blockchain investigator, has identified Russian OTC broker Aleksandr Khinkis as the central figure in a money laundering scheme involving over $4.7 million from three separate ransomware payments totaling 796 BTC. The investigation, which included an undercover Telegram conversation, revealed that Khinkis provided an exchange deposit address that became the anchor for tracing the illicit flows. The funds moved through multiple networks, including Bitcoin, Avalanche, and Tron, with some addresses later frozen by Tether. A dormant 73-BTC wallet remains under watch. Law enforcement has received the detailed transaction records, though no arrests have been announced.

A 73-bitcoin stash sitting untouched in a separate crypto wallet may be what eventually brings a Russian crypto broker to justice.

That dormant pile of digital cash, flagged by blockchain investigator ZachXBT, sits at the edge of a much larger money trail — one that reportedly spans three ransomware payments, multiple networks, and at least one undercover Telegram conversation.

Sting Operation Cracked The Case Open

ZachXBT, an anonymous on-chain investigator with a long record of tracing illicit crypto flows, identified Russian OTC broker Aleksandr Khinkis as the central figure in the alleged scheme.

According to reports, investigators posed as potential clients and contacted Khinkis directly through Telegram. He allegedly handed over an exchange deposit address — a move that gave investigators the thread they needed to pull.

That single address, starting with 0xa756, became the anchor point for the entire investigation. From it, researchers tracked roughly 75 transfers funneling more than $4.7 million into the same account. The money had been moving since at least July 2025.

Three Ransoms. Three Trails. One Broker

The alleged laundering involved three separate ransomware payments totaling 796 BTC. Each left a distinct footprint across multiple blockchain networks.

The oldest case dates back to September 2023, when five Bitcoin bridge deposit addresses were tied to a 560 BTC ransom. Those funds eventually crossed into the Avalanche network sometime in 2024.

A second payment of 72 BTC, traced to September 2025, showed more than 15% overlap with known ransomware wallets across compliance screening tools. About $1.36 million from that batch moved through instant exchanges before consolidating into a Tron wallet.

The most recent and largest payment — 164 BTC — was recorded in October 2025. Based on reports, around $3.8 million in bitcoin passed through instant exchanges before reaching Tron-linked outputs.

Bitcoin is now trading at $71,701. Chart: TradingView

Seven Tron addresses connected to that flow were frozen by Tether the following month. The frozen funds were later burned, confirming that enforcement action had been taken.

Meanwhile, an additional $16.6 million remains sitting in related addresses or platforms, with some of it already being cashed out.

Law Enforcement Now Has the Data

ZachXBT confirmed that compliance teams and law enforcement agencies have received detailed records of the traced addresses and fund movements. No arrests have been publicly announced.

Beyond the blockchain data, open-source intelligence painted a clearer picture of Khinkis as a person. Reports indicate he travels outside Russia regularly — including trips to Southeast Asia and Australia — and documents those trips openly on social media.

The 73 BTC still sitting dormant at a separate address hasn’t moved. If and when it does, investigators will almost certainly be watching.

Featured image from Pexels, chart from TradingView

Domande pertinenti

QWho is the central figure identified in the alleged money laundering scheme, and what is his profession?

AThe central figure is Aleksandr Khinkis, a Russian OTC broker.

QWhat was the total amount of money laundered through the single crypto exchange account, and how many Bitcoin did the three ransomware payments total?

AMore than $4.7 million was laundered through the account, and the three ransomware payments totaled 796 BTC.

QWhat crucial piece of evidence did the undercover investigators obtain from Aleksandr Khinkis on Telegram?

AThe investigators obtained his exchange deposit address (0xa756...), which became the anchor point for the entire investigation.

QWhat action did Tether take regarding the seven Tron addresses connected to the most recent ransom payment?

ATether froze the funds in the seven Tron addresses, and the frozen funds were later burned.

QWhat significant amount of cryptocurrency remains untouched and is being monitored by investigators?

AA stash of 73 Bitcoin sitting in a separate wallet remains dormant and is being watched by investigators.

Letture associate

BitMart's Final 9 Days: A True Exchange Crisis Is Never About Shutting Down

BitMart's Final 9 Days: A True Exchange Crisis Is Not About Shutting Down On August 17, 2026, with just 9 days until BitMart's scheduled cessation of trading, the focus shifted from the platform's orderly closure to serious questions about user withdrawals, platform solvency, employee payments, and reserve transparency. Stakeholders, claiming to represent users and staff, publicly demanded asset/liability disclosures, explanations for withdrawal delays, a user repayment plan, and an independent audit, setting an August 19 deadline. While BitMart CEO Sheldon Lee denied allegations of insolvency or wrongdoing, the controversy highlighted a core vulnerability of centralized exchanges (CEXs). When an exchange announces its shutdown, normal user behavior changes dramatically, triggering a mass withdrawal event—the ultimate stress test for its liquidity and custodial integrity. The key question becomes not whether the platform has assets, but whether it holds sufficient *liquid* assets to cover all user liabilities on demand. The article argues that the trust placed in CEXs is based on the convenience they provide, abstracting users from direct control of their private keys. This trust is rarely questioned during normal operations but becomes critically exposed during a wind-down. The situation underscores the limitations of simple Proof of Reserves, which shows "what we have" but not the crucial "what we owe." True financial credibility requires transparent, auditable data on assets, liabilities, and segregated user funds. BitMart's situation reflects a broader, often overlooked issue in the crypto industry: while there is extensive focus on growth mechanisms for exchanges, there is little discussion or established protocol for a safe and transparent "exit mechanism." The final measure of an exchange's integrity, the article concludes, is not its user count or trading volume during a bull market, but its ability to ensure every last user can successfully withdraw their assets when the doors are closing. The outcome will be determined not by statements, but by whether the final user's funds securely leave the platform.

marsbit40 min fa

BitMart's Final 9 Days: A True Exchange Crisis Is Never About Shutting Down

marsbit40 min fa

Don't Speculate on 100x Coins, Just Bet on 'Cash Cows': Which Projects Are Worth Dollar-Cost Averaging in the Bear Market?

In a bearish crypto market, finding sustainable investments is more prudent than chasing speculative meme coins. This article analyzes projects generating consistent revenue, highlighting them as potential "cash cows" for long-term dollar-cost averaging (DCA). The top performers are "picks-and-shovels" plays. **Pump.fun**, a Solana-based meme coin launchpad, leads with $415.3M in monthly revenue, profiting from a 1.25% fee on token transactions. Despite market volatility, it has averaged tens of millions in monthly income in 2024. Perpetual DEX **Hyperliquid** stands out as a "bear market star," accumulating ~$352M in revenue over seven months. Its model funnels ~99% of fees into buying back and permanently burning its HYPE token. Established giants are also adapting. **Uniswap**, after enabling its fee switch, now earns protocol revenue (e.g., $5.6M recently), which is used to buy back and burn UNI, giving the token direct value accrual. Similarly, oracle provider **Chainlink** generates stable monthly revenue (~$4.57M recently) from its essential data, cross-chain, and automation services. Its new Payment Abstraction feature automatically converts service fees into LINK, accruing value in its treasury. The core thesis is clear: in a downturn, focus on projects with proven, resilient business models—those acting as essential infrastructure or capturing consistent transaction fees—rather than speculative narratives.

marsbit56 min fa

Don't Speculate on 100x Coins, Just Bet on 'Cash Cows': Which Projects Are Worth Dollar-Cost Averaging in the Bear Market?

marsbit56 min fa

Trends in U.S. Stocks (August 18): U.S.-Iran Deal Prospects Dim, Major Indices See Two Consecutive Down Days, Chip Stocks Defy Market Decline

**Market Overview:** On August 18th, U.S. stock indices declined for a second consecutive day. The S&P 500 fell 0.52%, the Dow dropped 0.51% to a two-week low, and the Nasdaq slipped 0.32%. The decline was driven by heightened geopolitical risk as U.S.-Iran negotiations reached a key deadline without an extension, dimming the prospect of a long-term agreement. **Key Drivers:** * **Geopolitics & Oil:** The failure to extend the U.S.-Iran memorandum led to a surge in oil prices, with Brent crude closing above $90/barrel for the first time in three weeks. * **Treasury Yields:** The 30-year U.S. Treasury yield hit a high not seen since 2007, driven by heavy corporate issuance (notably for AI investments) and ongoing fiscal deficits. * **Sector Performance:** While the "Magnificent Seven" tech giants all closed lower, semiconductor stocks bucked the trend. The Philadelphia Semiconductor Index rose 1.6%, led by memory chipmakers (e.g., SanDisk, Micron) and optical communication companies, as investors focused on the strong demand outlook for AI-related hardware. * **Currency & Safe Havens:** The U.S. Dollar Index fell for a third day, while the offshore Chinese Yuan hit a three-year high. Gold prices rose to a two-month peak, supported by safe-haven demand outweighing pressure from rising yields. Bitcoin also gained. **Outlook:** Market focus remains on potential escalation in the Middle East and its impact on oil, alongside continued scrutiny of AI-related earnings and demand signals.

marsbit1 h fa

Trends in U.S. Stocks (August 18): U.S.-Iran Deal Prospects Dim, Major Indices See Two Consecutive Down Days, Chip Stocks Defy Market Decline

marsbit1 h fa

Trading

Spot
活动图片