VAL

1/ Dritan Kapllani connection to @yelotree In a recent @zachxbt post, I noticed an interesting detail - KOL @yelotree is also being charged for allegedly helping launder money through his Miami car rental business. On March 15, a few days after the theft described in the case, the suspects allegedly arranged with @yelotree to purchase a BMW M4. Since the payment was reportedly made in crypto, I decided to look into what could be found related to it

No waiting after the $367,000 exploit The Little Boy Plus attacker didn't hold back -immediately sent almost all 610 $BNB to Tornado Cash Only 25 $BNB left on a separate wallet The team should probably work with someone on demixing 0x597a11e35Aea9280a070967cBBE6aaFebD293DFF 0xB1dDE17a9be9F123f63420A5b41Af5FD7FCF0D19

@hantengri I have 0.43 HYPE Hyperliquid!

guy who ends every post with hyperliquid but doesn’t own a single hype

@0xkekov look how 'no money' affect people in a better way!

2021: - 80 kg - fast food very often - no gym - no sleep schedule - no gf - no money 2026: - 87 kg - healthy diet - gym 4 times / week - lovely gf - no money believe in yourself

@arkham More coming x.com/osint_based/st…

ANDREW TATE GOT LIQUIDATED LONGING BITCOIN So he decided to short the bottom instead. Great call.

@mlmabc diamond hand

After 8 months, Technorevenant is still holding all 80 million XPL ($9.2M), representing 0.8% of the total supply, that he bought in the days following the XPL TGE. With XPL's price rising over the past few days, his unrealized loss has narrowed to $86.6M, down from roughly $91M at the recent bottom. Addresses: 0xa8698fcd21c2e7eafd66d58153c6299ea6903416 0xf40e7f017c5376aede9b7b94da74068908963b45 0x8caa484392c4ae1ce6af2c70aa97a3b835da3fef 0x1e934e8226b3f2cfdf262f10ef019d5574a4dbb3 0xda223307bc8b0f530f66d55c413172b16349c9b3 0x00e2e6902df2e1bd180a5d0e952dd45dd1675631 0x4c57d6262721ad25a8a337a7ac95d3c10f4900b3 0xf555a2643164e518ba4c1f4a5b8ad63c0d6a858d 0xcc07fbd0aa69923d45caa1aae2f8b42fef6dd368 0xb34c4efb86bb07be261ea5a0faf06ae4e50d80ed 0x971df4ed6000003a6a63f9beb7609d489fbfe4bb 0xb9f3c7aa5ceae0cb7256e5129d52d7c65acc3fef 0xe9e32ffe41cbff270dacd5b2334ce34cbba399e3 0x6c77548e1ea052d65f822413267fb7eee7486778 0x72ec72319700ff1a5545e2cc282f2f72185e6483 0xae8ef3eb29b39dfdd18531104a50876d3a98ac35 0xdb43735bb6deb18c7dffb6fe551032cc2653a1ef 0x5d2abbec200fb869d2a5d5c78821d86678553f60 0xd2025ce53d6261c301fb6944d0826e07ffb31117 0xbb3340c9e2073fb8ad372377230fa708d9b3fe03 0x44327a330aa2343e88fe3d6a5f93de42d7404e8f 0x77bc81c1b1df574d28a4f77b471cabf0c7e0e23c 0x9e2f8a58da8192b1aac60505700184bd00399781 0x5128153e496c90ecb70efe93c0ab567b6aa11109 0xf61ba5417da20fd6267ba42d23123f1a572a6ea7 0x9771bb15dac34345012f8a5005a5e13be6da1bda 0x5d1211d66d13b2f66413e9af3cf5485596418dd6 0x6579896dfcca97db2cd59d26673918f18c7d89e0 0x649568dbdea4a6a1937901ca1e44dd293ead52b8

‼️9.4 ETH lost due to an address poisoning attack Victim simply copied the wallet address from history The real transfer to the correct address was made 4 days ago Attacker already moved all the funds to a consolidation wallet that's involved in tons of other poisoning attacks and scams Attacker address: 0x828E467879D6B39929Fd140B5ADC19905fa681a0 Real address: 0x828E96E475E60069cc3C3b1b5f82D61C5E5281A0

All time PNL says a lot

⚽️ With the start of the World Cup, this user sent 1,077,000 $USDC to a crypto casino Over the past week he's been sending funds straight from Binance to Rollbit He’s been depositing to this casino before, but went more active before the World Cup Crypto casinos are hunting users like this hard right now - offering VIP terms for the tournament period 0x933eE8A5684660F350A5C251ecc90C4272825961

@arkham Or he's just a gambler or someone who hedged it somewhere but everyone’s gonna call him an insider anyway lmao

He made $4 Million from $400K in 90 minutes. ‘fishalive’ bet on Spain NOT winning against Cabo Verde in yesterday’s World Cup match. Spain had 90% chance of winning. The match was a draw. He is now Polymarket’s NUMBER FIVE trader by all-time PnL after making another $4.7 Million on a handicap bet against Spain.

Venus protocol exploiter deposited 1,000 $ETH into Tornado Cash The exploit happened back in March 2026. The threat actor consolidated the funds and used Aave to earn yield in the meantime In the past 24h, the Venus attacker has been the biggest Tornado Cash depositor Address: 0x7a79969a0B9D51D922C4810D2950560360F6f234

@chainalysis $1M profit just in April.. x.com/osint_based/st…

Congratulations to our law enforcement and private sector customers and partners around the world on the successful takedown of the "AudiA6" cryptocurrency laundering network and the Dark2Web cybercrime forum. AudiA6 acted as a mixer-as-a-service for the cybercriminal underground, processing nearly $389 million in Bitcoin. By leveraging over 6,000 KYC-verified money mule accounts, the network washed stolen digital assets through centralized exchanges. This coordinated international strike, which included the arrest of two key administrators, severely degrades a primary financial pipeline for global ransomware gangs. Read our full breakdown of the investigation and the seized infrastructure here: chainalysis.com/blog/law-enfor…

AudiA6 received over $1M in profit in April 2026 They were laundering funds for a client running the Ledger Live fake app scam In the end, all the money flowed through 150 different KuCoin deposit addresses

AudiA6 heavily use kucoin HTX was also used before the recent sanctions they use other services and paths too, but the main goal is usually to get the funds out of kucoin - after that the chain is considered closed and funds are ready for a “client” As AudiA6 once said: “Not your business how I do it. You give me dirty -I give you back clean crypto”

A very large amount of LastPass stolen funds were laundered through AudiA6. For years, KuCoin facilitated this. In rare cases where KuCoin did freeze the funds temporarily, they would not cooperate with LE requests and would often release the funds back to the launderers.

‼️5 ETH lost due to an address poisoning attack The victim was making several transfers to the same address. After the first test tx of $100 to the correct one, the next transfer went to the attacker’s fake address After realizing the mistake, the rest was sent to the right address Good thing they didn’t send all 145 ETH right after that first test transaction Real address: 0xA89BadD9cA5B9fd20738Ce96C57baba8f6076772 Fake address: 0xa89bda5A8831e39792935a3F5aD8cAEC9FD06772 Funds are currently sitting here: 0xf1114FEDa9318F7B2a518d3d376236Fb8D5b5840

@lynk0x $XMR Holder

@ryandcrypto Sell SOL buy HYPE

rate this portfolio

13 hours ago someone received 398 ETH from Tornado Cash and bridged it to Hyperliquid From: 0xB9ebd79846163B79239d9219f9552696ea682605 To: 0x1b5d5d7f2740bee03fc15a76e0fde8f8158e0633 After that, the funds were split into 250 $ETH and 148 $ETH and sent to two other wallets: 0x870f3911645a05dba1c4bfc7f12ea4fdc708829b 0x386c8d1ef2f0c183643266fd6548d0d38a2931d7 Then bridged back to EVM: 0x12a085C1472B1Cf2D11A4DC7E21e4cc6341F0e52 0xe5A50b72F76D7A163820C9E81E09e40B3670AD75 Both receiving wallets only have incoming txs from Railgun (over 100 $ETH each). Looks like an obfuscation operation - Hyperliquid movement was likely used to break the obvious Tornado Cash connection

@Kalshi_Crypto Hyperdote!

JUST IN: Citrini calls Hyperliquid the antidote to FTX's failure

Tether froze a wallet holding 16M USDT It received two big incoming transfers 14.8M and 1.8M Got frozen right after the second one If you start digging into its connections, you see ties to massive money flows and plenty of CEXs, including freshly sanctioned HTX, Aifory, and Rapira Going further, there are wallets that received around $100M withdrawals from BingX Wallet: TEZbaUhqcXARX8VeNAbZQsLh1AgZ5DHSHd Balance: 16,650,000 USDT