Chainalysis traced cryptocurrency transfers from Amnokgang Technology Development Company, a sanctioned North Korean IT delegation manager, directly to wallets linked to Vitold Obertas

Overview Debates Related claims Topics Sources

Vitold Obertas deposited cryptocurrency into both sanctioned exchanges and mainstream cryptocurrency exchanges, according to Chainalysis blockchain tracking

Chainalysis traced cryptocurrency earnings from a North Korean developer to Ilya Boykov, who forwarded the funds to the sanctioned Russian exchange Garantex for potential cash conversion

Cc9f267dcClaimNews event

Blockchain records confirmed a transfer of 15,819,002 USDT from TRON address TQKJQ to another TRON address

ZachXBT alleged that CoinDCX deposit address TQKJQ swept user deposits to CoinDCX's public hot wallet and received gas funding as recently as April and May 2026

Glassnode estimated that U.S. spot Bitcoin ETFs acquired their holdings at an average cost basis of approximately $81,500 per Bitcoin

Glassnode estimated that corporate Bitcoin treasuries hold their tokens at an average cost basis of approximately $80,200 per Bitcoin

On-chain investigator ZachXBT alleged on October 22, 2026, that a CoinDCX-linked address TQKJQ swept user deposits into CoinDCX active hot wallet in April and May 2026, leaving $15.8 million unaccounted for

Tron blockchain records show a CoinDCX-linked wallet address labeled TQKJQ moved 15,819,002 USDT at 11:35 a.m. ET on October 21, 2026, to a newly created address that transferred out all funds by 11:22 p.m. ET

Blockchain researchers identified approximately $99 million withdrawn from LIBRA liquidity pools through eight digital wallets linked to the cryptocurrency's creator

The October 20, 2026 deposits to Tornado Cash from the Drift Protocol exploiter's wallet were made in fixed tranches of 100 Ether and 10 Ether to match mixer pools and obscure the sender's identity

According to Arkham Intelligence data, 71 tracked wallets belonging to the exploiter behind the April 1, 2026 Drift Protocol exploit retain approximately 81,454 Ether, valued between $194 million and $198.58 million

On October 20, 2026, an Ethereum wallet labeled Drift Exploiter 5 deposited 25,700 to 25,710 Ether, valued at $61.5 million to $63.1 million, into Tornado Cash over approximately two hours

On July 23 and 24, 2026, an address labeled Drift Exploiter 4, linked to the Drift Protocol exploit, deposited 23,095 Ether, valued at approximately $44.4 million, into Tornado Cash

Chainalysis reported that on April 1, 2026, the Drift Protocol exploiter moved funds from five initial exploit wallets to a single stopover wallet across 13 transactions before depositing into Tornado Cash

Coinbase's Global Intelligence team connected public blockchain transactions with evidence from social media profiles, messaging accounts, and fraudulent websites to identify scam operations.

Blockchain data cited by Arkham Intelligence showed Mt. Gox moved 10,422 Bitcoin worth about $739 million on June 2, 2026, while retaining over 34,500 Bitcoin

Approximately 87.1% of the QU tokens drained in the October 18, 2026 wallet drain remain immobilized directly on the Qubic network on-chain

On-chain data platform Token Terminal reported in early October 2026 that Uniswap earned approximately $14.7 million to $14.81 million in September 2026, marking the protocol's highest monthly total to date

Cysic blacklisted the recipient address of the unauthorized 10 million CYS mint at 13:47:52 UTC on October 17, 2026, freezing approximately 2.8 million tokens

Cysic brought in third-party security experts to investigate the October 17, 2026 bridge breach involving the unauthorized CYS mint and track the movement and potential swapping of the exploited CYS tokens