Crypto Sleuth Links Russian OTC Desk To $4.7M Laundering

bitcoinistОпубліковано о 2026-03-25Востаннє оновлено о 2026-03-25

Анотація

ZachXBT, an anonymous blockchain investigator, has identified Russian OTC broker Aleksandr Khinkis as the central figure in a money laundering scheme involving over $4.7 million from three separate ransomware payments totaling 796 BTC. The investigation, which included an undercover Telegram conversation, revealed that Khinkis provided an exchange deposit address that became the anchor for tracing the illicit flows. The funds moved through multiple networks, including Bitcoin, Avalanche, and Tron, with some addresses later frozen by Tether. A dormant 73-BTC wallet remains under watch. Law enforcement has received the detailed transaction records, though no arrests have been announced.

A 73-bitcoin stash sitting untouched in a separate crypto wallet may be what eventually brings a Russian crypto broker to justice.

That dormant pile of digital cash, flagged by blockchain investigator ZachXBT, sits at the edge of a much larger money trail — one that reportedly spans three ransomware payments, multiple networks, and at least one undercover Telegram conversation.

Sting Operation Cracked The Case Open

ZachXBT, an anonymous on-chain investigator with a long record of tracing illicit crypto flows, identified Russian OTC broker Aleksandr Khinkis as the central figure in the alleged scheme.

According to reports, investigators posed as potential clients and contacted Khinkis directly through Telegram. He allegedly handed over an exchange deposit address — a move that gave investigators the thread they needed to pull.

That single address, starting with 0xa756, became the anchor point for the entire investigation. From it, researchers tracked roughly 75 transfers funneling more than $4.7 million into the same account. The money had been moving since at least July 2025.

Three Ransoms. Three Trails. One Broker

The alleged laundering involved three separate ransomware payments totaling 796 BTC. Each left a distinct footprint across multiple blockchain networks.

The oldest case dates back to September 2023, when five Bitcoin bridge deposit addresses were tied to a 560 BTC ransom. Those funds eventually crossed into the Avalanche network sometime in 2024.

A second payment of 72 BTC, traced to September 2025, showed more than 15% overlap with known ransomware wallets across compliance screening tools. About $1.36 million from that batch moved through instant exchanges before consolidating into a Tron wallet.

The most recent and largest payment — 164 BTC — was recorded in October 2025. Based on reports, around $3.8 million in bitcoin passed through instant exchanges before reaching Tron-linked outputs.

Bitcoin is now trading at $71,701. Chart: TradingView

Seven Tron addresses connected to that flow were frozen by Tether the following month. The frozen funds were later burned, confirming that enforcement action had been taken.

Meanwhile, an additional $16.6 million remains sitting in related addresses or platforms, with some of it already being cashed out.

Law Enforcement Now Has the Data

ZachXBT confirmed that compliance teams and law enforcement agencies have received detailed records of the traced addresses and fund movements. No arrests have been publicly announced.

Beyond the blockchain data, open-source intelligence painted a clearer picture of Khinkis as a person. Reports indicate he travels outside Russia regularly — including trips to Southeast Asia and Australia — and documents those trips openly on social media.

The 73 BTC still sitting dormant at a separate address hasn’t moved. If and when it does, investigators will almost certainly be watching.

Featured image from Pexels, chart from TradingView

Пов'язані питання

QWho is the central figure identified in the alleged money laundering scheme, and what is his profession?

AThe central figure is Aleksandr Khinkis, a Russian OTC broker.

QWhat was the total amount of money laundered through the single crypto exchange account, and how many Bitcoin did the three ransomware payments total?

AMore than $4.7 million was laundered through the account, and the three ransomware payments totaled 796 BTC.

QWhat crucial piece of evidence did the undercover investigators obtain from Aleksandr Khinkis on Telegram?

AThe investigators obtained his exchange deposit address (0xa756...), which became the anchor point for the entire investigation.

QWhat action did Tether take regarding the seven Tron addresses connected to the most recent ransom payment?

ATether froze the funds in the seven Tron addresses, and the frozen funds were later burned.

QWhat significant amount of cryptocurrency remains untouched and is being monitored by investigators?

AA stash of 73 Bitcoin sitting in a separate wallet remains dormant and is being watched by investigators.

Пов'язані матеріали

Coldcard Vulnerability Leads to $89 Million Theft, Sparking Largest On-Chain Migration Since FTX Collapse

A security vulnerability in Coldcard hardware wallets led to the theft of 1,367.05 BTC (approx. $89 million) from 4,585 addresses, according to Galaxy Research. The flaw, caused by insufficient randomness in seed phrase generation for specific firmware versions, triggered a massive migration of funds as users moved assets to new, secure wallets. This event caused the largest on-chain movement of small Bitcoin transactions since the FTX collapse, distorting key market indicators like active addresses and exchange deposits, and significantly dampening market sentiment. The incident also highlighted challenges in cybersecurity investigations, as researchers reported that safety guardrails on mainstream U.S. AI models hindered the analysis of attack patterns, forcing them to use an open-source Chinese AI model for forensic work. This underscores a dilemma in balancing AI security restrictions with the need for rapid response in tracing stolen crypto assets.

marsbit20 хв тому

Coldcard Vulnerability Leads to $89 Million Theft, Sparking Largest On-Chain Migration Since FTX Collapse

marsbit20 хв тому

Annual Salary of Millions Competing for Electricians, Meta Rushes to Open Its Own Technical School

The AI boom is facing an unexpected bottleneck: a severe shortage of skilled construction workers and electricians. As tech giants like Meta, OpenAI, and Alphabet race to build massive data centers—such as OpenAI's $16 billion "Stargate" project—they are hitting a critical labor wall. The U.S. needs an estimated 130,000 more electricians, 240,000 construction workers, and 150,000 supervisors by 2030 for AI infrastructure alone, but tens of thousands of electrician jobs go unfilled each year. While AI companies offer high premiums, with electricians earning up to $280,000 annually, worker scarcity still causes massive losses—delays on a single project can cost $14.2 million per month. The complexity of building AI data centers, which require immense power (equivalent to powering hundreds of thousands of homes), sophisticated electrical systems, and advanced liquid cooling solutions, demands highly skilled technicians who are in short supply. To combat this, companies are investing heavily in training. Meta has committed $115 million to a free training school offering tuition, housing, and stipends, targeting 5,000 new workers. OpenAI is partnering with unions to secure skilled labor. These efforts are paying off, with a significant rise in Gen Z interest in trade schools over college. However, the power demands are staggering. AI data centers are driving a rapid surge in electricity consumption, projected to account for up to 12% of U.S. power use by 2028 and raising costs for consumers. Furthermore, the construction boom is project-based, leading to a potential future glut of trained workers once building peaks, which could depress wages industry-wide. The race for AI supremacy now depends as much on skilled hands as on advanced chips.

marsbit1 год тому

Annual Salary of Millions Competing for Electricians, Meta Rushes to Open Its Own Technical School

marsbit1 год тому

OpenAI No Longer Sells Its Most Expensive Model for Profit

OpenAI is shifting its business strategy away from promoting its most expensive, flagship models for every task. Recent price cuts—80% for GPT-5.6 Luna and 20% for Terra—signal a deeper change: the company now actively advises users that many tasks don't require the most powerful model. Instead, OpenAI recommends a tiered approach: use the high-end GPT-5.6 Sol for complex planning and analysis, then delegate execution to cheaper models like Luna. This mirrors moves by Anthropic, which recently launched Claude Opus 5 at half the price of its top model, Fable 5. Both companies are de-emphasizing flagship models as primary revenue drivers, using them instead for brand prestige and technological showcases. The industry is entering a "mass-market" phase, similar to automotive, where high-volume, cost-effective models handle daily operations and drive scale. OpenAI's price reductions are partly enabled by AI models themselves optimizing underlying code and infrastructure, creating a self-reinforcing cycle of efficiency gains and cost reduction. Competition is shifting from "who is smartest" to "who offers the best value." The goal is no longer selling individual models but fostering widespread API adoption and ecosystem lock-in. By making AI calls cheap and ubiquitous, companies like OpenAI aim to become the indispensable, utility-like infrastructure powering automated workflows—the "water and electricity" of software, quietly embedded everywhere.

marsbit1 год тому

OpenAI No Longer Sells Its Most Expensive Model for Profit

marsbit1 год тому

Suspected 4th Coldcard attack wave sweeps 389 Bitcoin: Galaxy’s Thorn

Coldcard hardware wallet users are facing a new wave of coordinated attacks targeting a firmware flaw, with researcher Alex Thorn flagging 218 recent transactions moving approximately 389 Bitcoin from potentially impacted addresses. The attack pattern shows a high rate of transactions targeting unique victim addresses, differing from previous waves. The vulnerability, which causes affected devices to generate weaker wallet seeds, is estimated to have impacted over 1,100 wallets, leading to around $90 million in Bitcoin stolen. Thorn advises affected users who control their keys may attempt to move funds with a higher-fee transaction before the attacker's transactions are confirmed.

cointelegraph1 год тому

Suspected 4th Coldcard attack wave sweeps 389 Bitcoin: Galaxy’s Thorn

cointelegraph1 год тому

Bitcoin Miners Are Waving the White Flag, But Their Stocks Are Soaring

Bitcoin miners are capitulating as evidenced by a sustained drop in network hash rate and a record-steep 19.9% decline in mining difficulty, signaling the shuttering of unprofitable machines. However, in a significant divergence from historical patterns, the stocks of publicly traded mining companies have soared, with one major player gaining over 430% in the past year, even as BTC's price fell roughly 46%. This surge is largely attributed to these companies pivoting toward the more lucrative AI narrative. Simultaneously, miners face a structural squeeze. Daily block reward revenue in BTC terms has hit a new all-time low following the latest halving, with current dollar-denominated daily revenue around $30 million compared to a longer-term average of ~$40 million. Fee revenue remains negligible, covering less than one block's subsidy over a 28-day average and accounting for only about ten minutes of the network's daily security budget. This capitulation cycle is unique: miner stress and crypto price weakness have decoupled due to alternative revenue streams (AI), while the long-term reliance on increasing bitcoin prices to offset shrinking subsidies continues, with fee income still far from filling the impending gap.

marsbit1 год тому

Bitcoin Miners Are Waving the White Flag, But Their Stocks Are Soaring

marsbit1 год тому

Торгівля

Спот
活动图片