Some more info I need help analyzing with, just some clues/connections:
Last withdrawal from D.N controlled AK linked 15QESooCEtbeDpDw6hMr5G7gRjMyvhzktP goes to 1JvBcFjmgPJNRJYP6osMGysjGv7tvSvozD on Oct 9.
Transaction before that on Oct 8 goes from 1JvBcFjmgPJNRJYP6osMGysjGv7tvSvozD to 19V6cRgL3jHBAppRFKosrTHvZjU3mYg8Dk((the return address for the last transaction from ninja controlled 19V6 address which goes to 1Ninja afterwards, so 19V6cRgL3jHBAppRFKosrTHvZjU3mYg8Dk is also D.N controlled, which means 188oB1TR6gNXxzyxJCyck9BHkU4dBMVmVg is the return address.
188oB1TR6gNXxzyxJCyck9BHkU4dBMVmVg is in fact a bitdice.me deposit address so the transaction went from 1JvBc to 188oB1TR6gNXxzyxJCyck9BHkU4dBMVmVg, confirmed by bitdice.me here.
also the LAST transaction from ninja controlled 19v6 has 1DJCAqFAPy4sm4zauZM6PXpYR1BCeeaLKV as the return address.
1DMz3SW6TGYtzGqDy5et9jhe2Dyi6ESHLv is also bitdice.me controlled, it sends with 188o to coldwallet directly.
1DMz3 received 10 btc from 1DrJ6L1G72apxrZnmVPSaGmdzi3rLexvqX on
Oct 8, a day before the heist, the BTC had been sitting at 1DrJ since June 30th, it was sent to 1Drj6L from 1DwrBhgkxf6Uy8CAtxPiQ9jPAJ61R4VY69(a JD hotwallet). 1DrJ can be linked to AK, is it another of his addresses?
1LMVVcBb95xkYJctFMYArHECzSiXNgC58E is another AK linked N.D address.
15QESooCEtbeDpDw6hMr5G7gRjMyvhzktP is another AK linked N.D address.
What is up with all the
1JvBcFjmgPJNRJYP6osMGysjGv7tvSvozD a connections?
Also need help with these connections:
On 7 sept(the day of the fraud) Dicebitco.in sends btc to 1H3xTsaJj1XKuKmruqpd5inASdpfoMm1L8
in this transaction, 1H3xTsaJj1XKuKmruqpd5inASdpfoMm1L8 to 1PBwXBg55mAeipfweiuy1BaboJAsZMdjcq, 1PBw to 14seaWFJdzmSUcKi2KdUvKofwRA2RqAHsm, 14sea to return address 155dZPhL9FpUvfTkz2uSvB9z1bffJtcPaZ, 1DJCAqFAPy4sm4zauZM6PXpYR1BCeeaLKV together with 155dZPhL9FpUvfTkz2uSvB9z1bffJtcPaZ to 1GTx, BTC still there.
155d and 1DJCA are owned by the same person/entity->
NINJA, since 1DJCA is a return address of another ninja address.
1HXcJkHZbdzg1twJPUFZoECnqUk7aX3zU1 receives 10 btc on Oct 10 from 1FDL3QFACDeWcpwW5weNU8NXML8GmNa3KE, 1FDL received 17 btc from AK PRC deposit address 18iGdLrBucZhSgcnUuWdEHnjZ315QUBSXt. AK PRC address and 1FDL both send btc to 1Joqj6jttR2CpteJDhtHkUvtK3RZ4LwtkG, this first transaction to that address is when it receives BTC from the Just-Dice hotwallet.
1V8ZpLsT6xbjhE1kVbmGk8XmNKHgHLw8c sends 20 btc to AK deposit address on Oct 8.
1 day before the heist, 1HXc received 125 btc from 1PBwXBg55mAeipfweiuy1BaboJAsZMdjcq, 2 days after the dicebitco.in fraud 1PBw received 150 btc from 1H3xTsaJj1XKuKmruqpd5inASdpfoMm1L8, it didn’t move until 1 day before the D.N heist. On the day of the dicebitco.in fraud, 1H3x received 50 btc from 1KDmonsCTGGvSc3VgHBGf6hvhRWb71ffuM, which is the return address of the dicebitco.in hotwallet. On the same day 1H3x received 137 btc from 1KYxcnMKraS6HYhPSoJJm6fFSZiWCdA92r, which is a return address of the 1KDmon address, so also from dicebitco.in
Alright I'm off to bed for now, can someone with more advanced tools do some feedback/extra analysis and correct me where I'm wrong?