Loan-App Extortion Proceeds — Suspected Shared Cash-out Network

StatusOpen
Fund trace from seed transaction
Traced: 8.67 ETH across 8 hops
This trace shows transaction flow between wallets, not confirmed economic ownership. Where a wallet consolidates multiple inbound transactions before forwarding funds, the outbound hop reflects that wallet's total outflow — it is not a literal same-coin transfer of the original seed funds.
  1. Hop 1E00 → E01
    2.50 ETHT+0m (seed)

    Seed transaction — victim-reported outbound transfer.

    14 Jun 2026, 10:00 UTC
  2. Hop 2E01 → E02
    0.700 ETHT+15m

    Exchange hot wallet fan-out, branch 1 of 4.

    14 Jun 2026, 10:15 UTC
  3. Hop 3E02 → E06
    0.680 ETHT+40m

    Layering hop.

    14 Jun 2026, 10:40 UTC
  4. Hop 4E06 → E09
    0.670 ETHT+1h 10m

    Converges with two parallel branches (E07→E09, E08→E09).

    14 Jun 2026, 11:10 UTC
  5. Hop 5E09 → E10
    1.80 ETHT+1h 40m

    Consolidated output — combines all three convergent branches. Amount reflects the wallet's total outflow, not a literal same-coin transfer of the seed funds.

    14 Jun 2026, 11:40 UTC
  6. Hop 6E10 → E11
    1.78 ETHT+2h 20m

    Bridge wallet forwards to suspected consolidation point.

    14 Jun 2026, 12:20 UTC
  7. Hop 7E05 → E11
    0.540 ETHT+2h 10m

    Parallel direct branch (E01→E05→E11) reaches the same destination independently of the layering chain.

    14 Jun 2026, 12:10 UTC
  8. Hop 8E11 → E02Circular return
    0.050 ETHT+3h 20m

    Circular return to an earlier-seen entity in this trace.

    14 Jun 2026, 13:20 UTC