I have nothing invested in this ... but wait, seriously? At least I would expect him to use an exchange to try to launder first? Elementary fail.
Yeah.. looking through the block chain, I feel this guy has been involved in a lot of laundering.. as I follow the trail, I see hundreds of thousands of dollars in some of the accounts that have moved money through his known addresses over the past few days...
https://blockchain.info/address/13izUnFG7RTwpmumiL2CqAhrJqYKHnBBEu -- the address that got about 40 of the stolen BTC and was used for refunds.. Before any talk of refunds, this wallet sent 4 BTC to:
https://blockchain.info/address/1AWcY1Am2hT8jzFWqWy7eRs1XxEJqqfdtTWhich then went to:
https://blockchain.info/address/1B9HbcJsJvQP3AcCMBYkNgTnEJNDvy6NnZNote: Lots of other accounts sent to this one in a single transaction.. This is worth investigating, as initial research indicates that a long chain of transactions are working to conceal thousands of BTC. We may be able to tie him to larger scams through this..
Then all was sent to:
https://blockchain.info/address/1MSLBgY9Si2SFBHnuj2g1NAEnkHHBwxUYAwhich primarily went to:
https://blockchain.info/address/1McKuuur4ngF3Q89SsaSsEoMNvCVfeBa8K... Then
https://blockchain.info/address/16SpTaW8kYW8NW9RmHZLJyB3TPAzwtzj6U ... Then
https://blockchain.info/address/1NZueDaFyozy3JrH2ZTNhscCQdYdECoupq... Then
https://blockchain.info/address/1Nw2sxCAC6ZKay7irSoVtogfk7k27CXd3u... then
https://blockchain.info/address/17Kfb54KCAN7f6iSTVE8dEH7NPrx4ktLWf... Then
https://blockchain.info/address/14jpbGf3Guxztp1sJDpZtY98WMUpBv58RP... then
https://blockchain.info/address/1G67rAovm2GUfw3dDdkziFW2nZTcVT2YhU... then
https://blockchain.info/address/1D4dDhbRcfyeQq6Qt7gdo7GwzFTyBFx3Nr... then
https://blockchain.info/address/1JUUeZnajHtxfi6sjLGVTrkfGPEaQFcB7G... then
https://blockchain.info/address/1N1xV9swCBYnZZAGHGJebWgzf81HWeJt1a... then
https://blockchain.info/address/18x6Hfc94GVz3zsMRdKUj6ECK6AS9pEkHT... then
https://blockchain.info/address/1NWzVSjGFhiz8N2iY4VCfsMetonKpnk4Vt.. then
https://blockchain.info/address/1HntkccSbpfUthFMBkiEd96NuYAoUdhM95.. then
https://blockchain.info/address/16tCLQWbc6rRnunezduodfhgFvhAZdCBMr.. then
https://blockchain.info/address/13PsB2yUwQCNR6suEFzmRTkongn3fgDDjd.. then
https://blockchain.info/address/1EyRfFwjijDGWL7XHLGcSdVHS5NdZgL6WE.. then
https://blockchain.info/address/14aaFvxtgkethwbK5g7jtb1xqFQz4fT4M7... then
https://blockchain.info/address/12jJnveKiXNXvW795Pmxa9WTkcrP4zg24nThis is where it sits now.. he keeps shaving off bits of it, as it typical for BTC laundering. These shavings might be worth investigating further.
Another line of inquiry: the address he's sending refunds from (
https://blockchain.info/address/13izUnFG7RTwpmumiL2CqAhrJqYKHnBBEu) also received an odd 4 BTC from:
https://blockchain.info/address/1GRMipxgTzH19fVqRkSN7W6tx781XPLX7sIn the same transaction this address also sent 31 BTC to:
https://blockchain.info/address/1EGEBgB4HHCYhceRpzsR9BsPEo2jRuD7i... Then
https://blockchain.info/address/14fx5qf1Tj933M3EHaMcV8iGwysbqZYhqX... then
https://blockchain.info/address/13FEHHvdEniRHQJhJG5ENmYKxEvcvMqxhm... then
https://blockchain.info/address/1Bf3ZhZ15fPuHTQZNSMtFSy2wZjTr5rrEZ... then
https://blockchain.info/address/1Lx9LBQqvPrn7Wo3nCsu5bLY8SzanmjJSyHere he split the funds and send half of them on this route:
https://blockchain.info/address/1AGW2qz4qJ1XQ2DkrsGH557hZQEoqQgbJghttps://blockchain.info/address/14AM8fZAnCahKRkeaxLwGc9U2SJmDM9U9Dhttps://blockchain.info/address/17s3yzeEVjEpLM5RR6xb4RaE36VKcotyv6https://blockchain.info/address/1EjJtEzwKwZwqziT3BdLbVYEgCoj1Cc47C- This wallet is particularly interesting.. looks like a lot of BTC pass through it before going to
https://blockchain.info/address/1Facb8QnikfPUoo8WVFnyai3e1Hcov9y8TThis one is more interesting. Suspected money laundering service - it's had over 100 Million USD worth of BTC pass through it.
The other half of the funds go here:
https://blockchain.info/address/1PehpTQvD8f5uXDYJqeFULAyFwXbkT41wrthen here:
https://blockchain.info/address/14jHyRDjrhAYkEw6sECkpbwCCyVjGZoFn8then here:
https://blockchain.info/address/19xjfwWpCCuUTC1Gq6auZiDF4B7UcrwQXMbefore again going into the suspected laundering service here:
https://blockchain.info/address/1Facb8QnikfPUoo8WVFnyai3e1Hcov9y8T So at the end of the day, everything ends up here: 1Facb8QnikfPUoo8WVFnyai3e1Hcov9y8T
Going back a few steps..
https://blockchain.info/address/13izUnFG7RTwpmumiL2CqAhrJqYKHnBBEu received those 4 BTC from:
https://blockchain.info/address/1GRMipxgTzH19fVqRkSN7W6tx781XPLX7s - where did this ~4btc sender get his money? Well, a few transactions back he took ~64 BTC out of DGEX...
Over the course of some time, DGEX:https://blockchain.info/address/1LNKq42Hx6nsWCyBsxKCDqdF3btBbufnQT
sent around 3000 BTC here:
https://blockchain.info/address/1JpQQcJwNSo4QueHZ3dwcXfbaDCAimYKg7 which I am guessing is another DGEX wallet… On Jan 9th This address sent 64 BTC to our scammer at
https://blockchain.info/address/1BhQufqMWAdNNZLeRypUPeb6YmrhYDGLh4 which sent to
https://blockchain.info/address/1MkaNSYKWJ71oJniwictmMUUBZSnktGb4Bwhich sent to
https://blockchain.info/address/1GRMipxgTzH19fVqRkSN7W6tx781XPLX7swhich sent the majority of the balance to another address, but also sent 4BTC to
https://blockchain.info/address/13izUnFG7RTwpmumiL2CqAhrJqYKHnBBEuwhich happens to be where most of the Shares scam money ended up, thus we see that all this activity is part of his laundering. Notable that all this happened pretty darn fast.
So it's worth asking - was there a NXT scam / heist worth about 64 BTC recently? If not, he may have just been laundering through DGEX.. Hard to say. Other possibility is that he got in early or was in the genesis block.
Now then.. it gets juicier! He was asked to help out with Frozen and I think he feels guilty about the mess he has made with that..
My BTC address is
1AQseUF2CtEs6ZALHS5cJtTVBpntaBmsGs
Do an honest person, you will be successful, , I hope you continue to work for the FZ, I send you 2BTC, you send me 1.5BTC, there 0.5BTC,, please give it to me, thank you,
https://blockchain.info/tx/2960012783896c01bbfc65fffdd4d6d311852bcce85f37e33416197cba9ee3cbBut wait a moment! Where did those funds come from??? They came from:
https://blockchain.info/address/1HezbN4YyUcSh6h2FYmNbZGjAFEggnhJkcwhich had 108 BTC until recently. So.. Where did it come from? It all starts at
https://blockchain.info/address/1Facb8QnikfPUoo8WVFnyai3e1Hcov9y8T -- that suspected laundering service.
https://blockchain.info/address/1Facb8QnikfPUoo8WVFnyai3e1Hcov9y8T to
https://blockchain.info/address/18j5D343qpcthmknKJDzJoE8R2yZn5xSbWto
https://blockchain.info/address/1N6LQPShbSYa1T1XurAm5fasPWnY5KsP4gto
https://blockchain.info/address/1P55oKQVYy9CNyU1Bc3z8cD5dTmcafVeZLto
https://blockchain.info/address/1558DTt1PKDx2mCobbSu6JXbYWsVUR6ssKto
https://blockchain.info/address/1DRzaUT2LsPG3Eoy4ZPVrHYgVmhvEXHgy9to
https://blockchain.info/address/1ErJjTTd5NFasgow5kzE3uqYnFSbybicEMto
https://blockchain.info/address/1DRNg4xeLKzD5jSkDQExX62UoPUxPXzSiDto
https://blockchain.info/address/1PqpH1bG5qnJLWTTQkiDHeGkKhLhb1ZDHqto
https://blockchain.info/address/13qtUgaFjCHUGuPSkUj7pTfGrDRJVaYEaqto
https://blockchain.info/address/12FuyijsERr7WJ8bmT8JkYF7GDjxgoVxcato
https://blockchain.info/address/1PGsNJxiH4tuy9wMsSasa6VnQg5gwRYBpE to
https://blockchain.info/address/1NZYbNzajTgenFkudLWXsQYjb1npQtfSUSto
https://blockchain.info/address/1DMV6jwV1fbGJVY9J6ExjVZCTM4MYoEf5Lto
https://blockchain.info/address/1CyKSYtuFAPfTAHRE7o6vUnqMycyAnH6WRto
https://blockchain.info/address/1HMh7JUG7d2HqndQQbr3WUeLLitKhYtc8Gto
https://blockchain.info/address/1HJovy2giHDTDBekhFQD9HYfFG6gTCsZJpto
https://blockchain.info/address/1H2nxMnrhcVLqtEGk5CmiqEtWXriFkd8UFto
https://blockchain.info/address/1EbYSSbXAAF4zeWb7Ca6k9MRAaV1tdWpzxto
https://blockchain.info/address/1G9W2NDbUpwKEwPvBvynxbRSuck2ZVyFqnto
https://blockchain.info/address/19KSJH6RHMEogSiZwpeFFkcLMffYwxMtgTto
https://blockchain.info/address/1Hd9cgX6twjUu7HuLKo1sPf7e6wkoMEt4Ato
https://blockchain.info/address/1C4W4oJciH6gezm8LmfZVHbNbTCiQT8se9to
https://blockchain.info/address/1HezbN4YyUcSh6h2FYmNbZGjAFEggnhJkcwhere he sends that 0.5 BTC to his old FZ friend.
Then it continues:
https://blockchain.info/address/1C7ShYgQkuYgauyS8r4U7AzyBEjMAMfurPhttps://blockchain.info/address/1K821sNyk9eQS5THfVw12QQGxSNQASZpVYhttps://blockchain.info/address/1BPu3nwpunuTFXTeFzXN2cyUt2Nwwmanukhttps://blockchain.info/address/1Mequey8AQEjcqsagaTxKHFF4WymqBDJ3Qhttps://blockchain.info/address/1NVReZqPZDLNzJoGpxwr4jCbsEvt1jMCTNhttps://blockchain.info/address/1J6suPKEgFYnAC458LtMymbAGmHAWLM3xchttps://blockchain.info/address/1Hcs9suVtuZp3D3EZyAynVe9LbKqxQrwdWwhich is where it remains as I post this.