You able to link ethereum cold wallets on other exchanges to him? thats worth at least 100 btc isn't it? Im sure all the info you are posting will help the prosecutors against vernon. Guess Paul got what he wanted... the community to rally around and find the hacker... he just never knew people would find him as it heh. I cant trace all coins wallets on Cryptsy at the same time,but it is obviously now that on 10th.April Vernon took last remaining coins on Cryptsy and tried to sell on different exchanges. Mine advice to the people is to find addresses on cold/hot wallets on Cryptsy and pay attention on all withdrawals made on 10th.April. It is essential that we stop all these transfers as soon as possible or many coins will be lost |
|
|
|
Was Vern dumping Cyptsy Mintcoins on Poloniex today?
It seems so. That Mint big wallet was dormant after 12-13 January, until 10.April(same date as UNOs transfer) ,when 100 millions were taken from it and are sending in different amounts on different addresses on Poloniex.Transfers are speeding up,last hour 7.8 millions sent in one transaction to Polo.(I posted it in mine post above) |
|
|
|
https://chainz.cryptoid.info/mint/wallet.dws?585760.htmCryptsy mintcoin wallet I believe. Thunderjet what do you make of this: es Outflow This is even more experimental Total amount Percentage Transactions Wallet / addresses 8,495,553,805.19104 MINT 45.8 % 1985 Isolated addresses 8,495,553,805.19104 MINT = About $220,000USD Mint is(was) trading on BTER,Cryptsy and Poloniex.This is not Poloniex wallet which is easily identified,but also not BTER,because all transactions on this MINT wallet stopped at the begining on January 2016,when Cryptsy went down. After that all activities in this wallet stopped until 10.April.2016 - the same date as UNOs transfer to Bittrex. In Mint case 100 million mints were transferred to address MdUKpvTpKHE7rSXxoe62x5QYywG5Qjypc2 and then in different batches to different addresses on Poloniex and then suddenly stopped about 6-7 ours ago.Last hour another transfer of 7.8 millions of MINT sent on Poloniex. Now there is still 79.05 millions of MINT still untransferred at address Me3USymetG4yd9X9pG3NdHFtvPsrAVjJyd Strange thing - these 21 millions MINT sent on different addresses on Poloniex - are not yet redreemedhttps://chainz.cryptoid.info/mint/tx.dws?6003795.htm Seller is speeding up,another 7.8 millions of MINT sent on Poloniexhttps://chainz.cryptoid.info/mint/tx.dws?6021086.htm |
|
|
|
He got caught red handed trying to embezzle UNO and launder it on bittrex so he had to hand it over. I think he realized if he didn't jail would be certain. At this point I think it's still a possibility he can avoid jail. If he gives everything back. He was explicitly ordered not to do what he got caught doing in front of everyone. He's on such thin ice at this point, being in China doesn't really mean he can just evade this whole mess forever. Eventually wouldn't his Visa run out and wouldn't they run him for warrants when he tries to renew? I don't think they need to extradite, China gov would probably deport him as a wanted criminal if not just send him to commie labor camp since he has kept his international criminal enterprise going on in China too. He must have done a bunch of naughty stuff over there too. I'm sure embezzling UNO has to be a frowned on activity over there.
I hope that these mine findings about BTC wallet where are BTCs from selling stolen altcoins from Cryptsy,help to investigation. One more thing - Bittrex should pay special attention on this BTC deposit address - 1G1QMXNCsyVAMiuXxHkzs3FrX3QGiXfUg9 where BTC came directly form old Cryptsy hot wallet(unaccessible to users and used just to pay Cryptsy and Vernon expenses) during 2014 and 2015 in time when stolen altcoins are selling.This address was dormant until 3rd.March.2016 when it received last 1.1 BTC from old Cryptsy hot wallet(same pattern like in 2014 and 2015) and on 3rd.March.2016 only Vernon could sent these BTCs. Here is mine original post about it: After a long work I finally found irrefutable evidences about Paul Vernon aka Bao Luo direct connection with "grand hack".Following traces of BTC from Cryptsy old wallet (which was under Vernon sole control and used for paying Cryptsy expenses and from which users could not get BTC directly) I found that after a hack he sent 368.7 BTC to Bittrex address 1G1QMXNCsyVAMiuXxHkzs3FrX3QGiXfUg9 directly from old Cryptsy wallet. How much his greed is big,can be seen from fact that he sent last BTCs from old Cryptsy wallet to that address on Bittrex on 3rd.March.2016 !!! On 3rd.March.2016 he took last 1.1 BTC from Cryptsy old wallet(direct transactions):https://www.walletexplorer.com/address/1G1QMXNCsyVAMiuXxHkzs3FrX3QGiXfUg9https://www.walletexplorer.com/txid/141ffbd042e3d8511e98a3c082061ceb2a65ffa588449eef18bdc5e5e1617430https://www.walletexplorer.com/txid/022be2365754b0b6044332aa9b09adbecc7457fded6c61c19c6bfa09c8666384https://www.walletexplorer.com/txid/39b43a4f0bf61338fc5d47aa51ebd7585570fa53f90f519888d54c42d43b0fcd But that is not full story.This Bittrex address 1G1QMXNCsyVAMiuXxHkzs3FrX3QGiXfUg9 also received 168 BTC from BTER and few dozen BTCs from Mintpal.Following DASH transactions after hack,some members of this forum,found many 5000 DASH transactions from Cryptsy wallet to Mintpal day after day,just few days from hack.Well now we know that was Vernon who sent them on Mintpal,sold for BTC and move some of that BTC to this Bittrex BTC address described above.After fall of Mintpal,BTER is coming into the game - selling was continuing on it.Few members of Cryptsy,including myself during December 2015 received few withdrawals from Cryptsy that were not coming from Cryptsy wallet ,but BTER.It seems that Vernon wanted to prolonge Cryptsy fall a little later,because Bitebi9 project was not finished then. Now the most interesting part.This address on Bittrex was active in late 2014 and May 2015 (few last txs came from Cryptsy long after Cryptsy fall),when hacker was selling stolen altcoins on Bittrex and other exchanges.Mainly he withdraw BTCs to Bitfinex ,but one big withdraw(20 BTCs) was directly moved to BTC wallet (address 1C6JEkN16FqyLH37vvmSicE59kqEadUmtf) where hacker stored all BTC obtained from selling stolen altcoins on different exchanges - that is direct link with theft .
So:
- on this Bittrex address BTC were coming from Cryptsy old wallet almost until court seized it
- from autumn 2014 until July 2015 - 368.7 BTC came directly from old Cryptsy wallet which was untouchable for users
- finally, 20 BTC were sent from this Bittrex account directly to BTC wallet where hacker stored BTCs obtained from selling stolen altcoins
https://www.walletexplorer.com/txid/d39a289e6a271c9380165090de989aab93f26d834ac27101e38fb5b041b6ec6bBTC wallet where hacker stored BTCs from selling altcoins: https://www.walletexplorer.com/wallet/1356a64174770337This is link where you can see mine earlier findings about BTC wallet where hacker stored BTC from selling altcoins : https://bitcointalk.org/index.php?topic=1173703.msg13678567#msg13678567 Plus Vernon will have to explain sending so much coins directly from Cryptsy wallet to BTCC China few weeks before BItebi 9 opening,especially because after July.2015 this account on BTCC China received 16 BTCs directly from old hot Cryptsy wallet on 10th.January.2016,just few days before closing,when you cant get even 0.01 BTC I found firm evidences how P.Vernon financed Bitebi9 exchange by money from Cryptsy users.Bitebi9 was founded 28th.July.2015 and start capital was 300.000 CNY(picture below) ~ $46.000 ~ 184 BTC at that time. Money came from Cryptsy old hot wallet(founded before theft) which was used only for paying Cryptsy expenses and refunding new hot wallet from time to time - users did not receive BTC directly from it at all. From Cryptsy old hot wallet money went to address 17UFQvsFyq7z2tUHHWhAkGsLTYEaCZZp4S at BTCC China exchange,where BTC were changed to CNY. For period July 2015 - January 2016, 543.5 BTC came from old hot Cryptsy wallet to this address on BTCC.In 2 such transactions 150 BTC and 200 BTC were transfered directly to BTCC - that is far over 100 BTC limit per transaction for users,so there are no doubt that is not user ,but P.Vernon. Another indication that it is P.Vernon account is that this address received directly from Cryptsy old hot wallet 16 BTC on 10.January.2016,just few days before closure and in time when receiving just 0.01 BTC was impossible. https://www.walletexplorer.com/address/17UFQvsFyq7z2tUHHWhAkGsLTYEaCZZp4SWhat is also interesting that this address 17UFQvsFyq7z2tUHHWhAkGsLTYEaCZZp4S received 56 BTC from Bittrex and 100 from BTC-e,two exchanges that "hacker" used to sell stolen altcoins and convert them in BTC.   Can the forensics link those trans id's to a cold wallet in bitebi9 somewhere? Should be easy enough with a small deposit to bitebi9 somewhere that shows they go to the same place? I don't think Bao is smart enough to use mixers... if he was you could question why an ethical exchange used mixers. All these BTC went to BTCC China(probably on his Chinese paramour account) and were sold for CNY needed for Bitebi9 opening and working expenses.They did not come to Bitebi9 wallet. Bao did not use mixers,because he did not trust them - Cryptsy "hacker" like Bao ,also did not use mixers. |
|
|
|
One good thing on all this exchange funnelling is that exchanges will be on high alert atm. KYC restrictions will limit what he can pull out per day. Im sure bittrex and poloniex are watching for new accounts depositing in big balances, or even smaller ones. Paul will only be pulling out small amounts per day if he even can.
Them KYC restrictions you speaketh of sure the hell worked in Cryptsy's case unless the over-amount was due to an inside hack, then no reporting is required according to the Law of Vernon. Pretty much  paul approved his own 350BTC withdrawal because he's such an honest stand up guy. Wonder if he reported that suspicious withdrawal of his to the authorities? I've been checking out some other coins. I think Pauls been bleeding them dry over the last few months. Cryptcracker wanker and the apology was just a disguise whilst he slowly filtered it out for sales. I think this is how he's been living after divorce settlements. Ages ago on cryptsy chat i was trying to find owners of top 10 netcoin wallets and i asked Mullick. He told me that cryptsy's cold wallet address was n5nZXRojBHjtyE78r8jkemNJbjs1xxMALc which is funny because mullick didn't have access to the wallets directly right? not sure how he knew that. Anyways it rang true because i could see that address link up to withdrawals i did. Now Bao shut his shit down around what mid jan? Netcoin cold wallet has been bled dry over time... its small amounts here and there and sometimes a larger 1-2 million hit by the looks when prices were more favorable to him. Check it out on the explorer http://netexplorer.coin-server.com/address/n5nZXRojBHjtyE78r8jkemNJbjs1xxMALcHe stakes here and there as per was the normal cryptsy method though they denied they staked customer coins and if it happened it was an accident when syncing the cold wallet funds to transfer... my fookin arse in a bunch of stake coins you can send without staking... the option is unlock for staking only... when you hit send it prompts for encrypted password and sends im pretty sure it doesn't stake then send. Anyways the bleeding starts around 2 months after that start point and finishes on 23rd march. I don't know of bittrex cold wallets / hot wallets so can't match the addresses filtered off but im assuming they are either a) bittrex or b) Bao is slowly trying to mimmick normal sends and filtering to other wallets in his control that receivers don't have. If this is the case Paul might be banking on the fact that he'll get away with any investigation then pick the wallets up later in his control after its all blown over. I think this might be a case. Might be worth checking other wallets for coins people have on explorers and see how they progress but i'm willing to bet that asshole opened wallets up that didn't have much value in them to withdraw and he kept closed the ones he was off to steal. Too many coins to keep them all so he prolly decided to take 20-30 wallets of good coins for later. I want to check DGB next because that 200 million on bittrex is mighty suspicious. Especially when the second biggest holder on there is 13 million!!! After 19.Nov.2015 there was no txs from Cryptsy NET cold wallet until 26.Jan: On 26th.January.2016 NET cold wallet address on Cryptst was n9zYjyGxhxmBBGQQpK2VLWZY6kg9uHtZX5 There were 25,539408 millions Net coins in Cryptsy cold wallet on that date. Then on 26th.January 10 millions of NET were transfered to Cryptsy NET hot wallet - nCnLUa14D12VqM9kTDMaswF6ydK4rvEk2W On 28th.January.2016 NET cold wallet address on Cryptst was nJtwPDxBzuE8uWji6HMWR4fiVK1n8mKpog (change sfter every txs) with 15.539 millions of NET in it. That 28th.Januar.2016 another 1 million of NET coins were transfered to hot wallet nCnLUa14D12VqM9kTDMaswF6ydK4rvEk2W On 30th.January 10 millions of NET coins from cold wallet(nQZCsusjpqyFK14T58EjQ9QucvBf35J37w) were transfered to hot wallet nCnLUa14D12VqM9kTDMaswF6ydK4rvEk2W In second txs on 30th.Janauary,all remaining NET from cold wallet(n5zKU5VQS27QChZvVPd5PvNbk62HgCk5NT), 4.539 millions of NET were transfered to hot wallet nCnLUa14D12VqM9kTDMaswF6ydK4rvEk2W. So,on 30.th.January.2016 NET cold wallet ceased to exist - all NET coins were in hot wallet nCnLUa14D12VqM9kTDMaswF6ydK4rvEk2W There were a lot of withdrawals form hot wallet from 25.January - 4-5th.March,when NET wallet were opened for withdrawals. I can confirm,that is 7.517 millions of NET still at Cryptsy on address nRUSQpaUoDJyDCntT8mK8L5k9SorEWURdS
After all I found one suspicious tx - 2553f41b6eba9a086ab160ac39e664b34df15c91ac4e9bef137abee9927927f6 from Cryptsy hot wallet on 30th.January when 2.085 millions of Netcoins were sent to address nEgHgjhaQxuRQ4Dzn28sUuWwTCLnLpPmzr.That address is very odd,because after that big input,it has every day few small inputs of ~ 600 Net and all transactions to this address are deposits,not at one withdrawal.Thanks i'll try and get you a cold wallet digibyte one. I was looking through my transactions of digibyte but that was like a year ago so it might be a stretch :/. Do we know that when wallets were open for withdrawals that vern didn't use this excuse to mimmick sends to customers to his own addresses? I just can't believe he only did it with UNO. Only ones which took receivership can find that in wallets logs.I guess was this BTC address on Bittrex are among "Crypsy funds" on Bittrex: After a long work I finally found irrefutable evidences about Paul Vernon aka Bao Luo direct connection with "grand hack".Following traces of BTC from Cryptsy old wallet (which was under Vernon sole control and used for paying Cryptsy expenses and from which users could not get BTC directly) I found that after a hack he sent 368.7 BTC to Bittrex address 1G1QMXNCsyVAMiuXxHkzs3FrX3QGiXfUg9 directly from old Cryptsy wallet. How much his greed is big,can be seen from fact that he sent last BTCs from old Cryptsy wallet to that address on Bittrex on 3rd.March.2016 !!! On 3rd.March.2016 he took last 1.1 BTC from Cryptsy old wallet(direct transactions):https://www.walletexplorer.com/address/1G1QMXNCsyVAMiuXxHkzs3FrX3QGiXfUg9But that is not full story.This Bittrex address 1G1QMXNCsyVAMiuXxHkzs3FrX3QGiXfUg9 also received 168 BTC from BTER and few dozen BTCs from Mintpal.Following DASH transactions after hack,some members of this forum,found many 5000 DASH transactions from Cryptsy wallet to Mintpal day after day,just few days from hack.Well now we know that was Vernon who sent them on Mintpal,sold for BTC and move some of that BTC to this Bittrex BTC address described above.After fall of Mintpal,BTER is coming into the game - selling was continuing on it.Few members of Cryptsy,including myself during December 2015 received few withdrawals from Cryptsy that were not coming from Cryptsy wallet ,but BTER.It seems that Vernon wanted to prolonge Cryptsy fall a little later,because Bitebi9 project was not finished then. Now the most interesting part.This address on Bittrex was active in late 2014 and May 2015 (few last txs came from Cryptsy long after Cryptsy fall),when hacker was selling stolen altcoins on Bittrex and other exchanges.Mainly he withdraw BTCs to Bitfinex ,but one big withdraw(20 BTCs) was directly moved to BTC wallet (address 1C6JEkN16FqyLH37vvmSicE59kqEadUmtf) where hacker stored all BTC obtained from selling stolen altcoins on different exchanges - that is direct link with theft .
So:
- on this Bittrex address BTC were coming from Cryptsy old wallet almost until court seized it
- from autumn 2014 until July 2015 - 368.7 BTC came directly from old Cryptsy wallet which was untouchable for users
- finally, 20 BTC were sent from this Bittrex account directly to BTC wallet where hacker stored BTCs obtained from selling stolen altcoins
https://www.walletexplorer.com/txid/d39a289e6a271c9380165090de989aab93f26d834ac27101e38fb5b041b6ec6bBTC wallet where hacker stored BTCs from selling altcoins: https://www.walletexplorer.com/wallet/1356a64174770337This is link where you can see mine earlier findings about BTC wallet where hacker stored BTC from selling altcoins : https://bitcointalk.org/index.php?topic=1173703.msg13678567#msg13678567 |
|
|
|
One good thing on all this exchange funnelling is that exchanges will be on high alert atm. KYC restrictions will limit what he can pull out per day. Im sure bittrex and poloniex are watching for new accounts depositing in big balances, or even smaller ones. Paul will only be pulling out small amounts per day if he even can.
Them KYC restrictions you speaketh of sure the hell worked in Cryptsy's case unless the over-amount was due to an inside hack, then no reporting is required according to the Law of Vernon. Pretty much paul approved his own 350BTC withdrawal because he's such an honest stand up guy. Wonder if he reported that suspicious withdrawal of his to the authorities? I've been checking out some other coins. I think Pauls been bleeding them dry over the last few months. Cryptcracker wanker and the apology was just a disguise whilst he slowly filtered it out for sales. I think this is how he's been living after divorce settlements. Ages ago on cryptsy chat i was trying to find owners of top 10 netcoin wallets and i asked Mullick. He told me that cryptsy's cold wallet address was n5nZXRojBHjtyE78r8jkemNJbjs1xxMALc which is funny because mullick didn't have access to the wallets directly right? not sure how he knew that. Anyways it rang true because i could see that address link up to withdrawals i did. Now Bao shut his shit down around what mid jan? Netcoin cold wallet has been bled dry over time... its small amounts here and there and sometimes a larger 1-2 million hit by the looks when prices were more favorable to him. Check it out on the explorer http://netexplorer.coin-server.com/address/n5nZXRojBHjtyE78r8jkemNJbjs1xxMALcHe stakes here and there as per was the normal cryptsy method though they denied they staked customer coins and if it happened it was an accident when syncing the cold wallet funds to transfer... my fookin arse in a bunch of stake coins you can send without staking... the option is unlock for staking only... when you hit send it prompts for encrypted password and sends im pretty sure it doesn't stake then send. Anyways the bleeding starts around 2 months after that start point and finishes on 23rd march. I don't know of bittrex cold wallets / hot wallets so can't match the addresses filtered off but im assuming they are either a) bittrex or b) Bao is slowly trying to mimmick normal sends and filtering to other wallets in his control that receivers don't have. If this is the case Paul might be banking on the fact that he'll get away with any investigation then pick the wallets up later in his control after its all blown over. I think this might be a case. Might be worth checking other wallets for coins people have on explorers and see how they progress but i'm willing to bet that asshole opened wallets up that didn't have much value in them to withdraw and he kept closed the ones he was off to steal. Too many coins to keep them all so he prolly decided to take 20-30 wallets of good coins for later. I want to check DGB next because that 200 million on bittrex is mighty suspicious. Especially when the second biggest holder on there is 13 million!!! After 19.Nov.2015 there was no txs from Cryptsy NET cold wallet until 26.Jan: On 26th.January.2016 NET cold wallet address on Cryptst was n9zYjyGxhxmBBGQQpK2VLWZY6kg9uHtZX5 There were 25,539408 millions Net coins in Cryptsy cold wallet on that date. Then on 26th.January 10 millions of NET were transfered to Cryptsy NET hot wallet - nCnLUa14D12VqM9kTDMaswF6ydK4rvEk2W On 28th.January.2016 NET cold wallet address on Cryptst was nJtwPDxBzuE8uWji6HMWR4fiVK1n8mKpog (change sfter every txs) with 15.539 millions of NET in it. That 28th.Januar.2016 another 1 million of NET coins were transfered to hot wallet nCnLUa14D12VqM9kTDMaswF6ydK4rvEk2W On 30th.January 10 millions of NET coins from cold wallet(nQZCsusjpqyFK14T58EjQ9QucvBf35J37w) were transfered to hot wallet nCnLUa14D12VqM9kTDMaswF6ydK4rvEk2W In second txs on 30th.Janauary,all remaining NET from cold wallet(n5zKU5VQS27QChZvVPd5PvNbk62HgCk5NT), 4.539 millions of NET were transfered to hot wallet nCnLUa14D12VqM9kTDMaswF6ydK4rvEk2W. So,on 30.th.January.2016 NET cold wallet ceased to exist - all NET coins were in hot wallet nCnLUa14D12VqM9kTDMaswF6ydK4rvEk2W There were a lot of withdrawals form hot wallet from 25.January - 4-5th.March,when NET wallet were opened for withdrawals. I can confirm,that is 7.517 millions of NET still at Cryptsy on address nRUSQpaUoDJyDCntT8mK8L5k9SorEWURdS
After all I found one suspicious tx - 2553f41b6eba9a086ab160ac39e664b34df15c91ac4e9bef137abee9927927f6 from Cryptsy hot wallet on 30th.January when 2.085 millions of Netcoins were sent to address nEgHgjhaQxuRQ4Dzn28sUuWwTCLnLpPmzr.That address is very odd,because after that big input,it has every day few small inputs of ~ 600 Net and all transactions to this address are deposits,not at one withdrawal. |
|
|
|
Please tell me the receivers didn't just shut cryptsy.com down thinking it will stop vern moving funds.... They are aware of what owning the private keys means right... i.e. paul downloads a blockchain and imports them and sends funds?
It would be pretty embarrassing if pauls moronic attempt to move them in 1 lump actually worked. Maybe the receivers can get their teenage kids to come in and help them move the funds after they setup dad and mums vcr player?
Maybe we could get a thread going of coins wallet addresses so they can be watched and direct exchanges like bittrex etc to. I'm sure they can then be on the lookout for Bao sending coins in. Im rather enjoying the thought of him sleeping in a cardboard box. Must be desperate with bitebi9 making a total of $10 USD a day. Im also wondering if paul thought out his runaway china place correctly too... they tend to execute white collar workers that take money.
It looks that receivers just shutdown cryptsy.Till now they did not give any list of Cryptsy wallets and amount of coins in them.I dont think they have much time,because if you see what was happened with UNO at Bittrex,deposit Bittrex address was opened and tested on 7th.March.2016. - about month before transfer UNOs. It means that somebody prepared it for a long time - time enough to download blockchains of any coin and import private keys.Now time is essence,especially with the coins which can be traded on multiple exchanges. They have cryptsy wallets though pretty quick to generate new address and send all input funds to it. Do that for every wallet. Assuming no backdoors funds secured... unless im missing something. Nobody knows what is condition of Cryptsy system.Is there any backdoors and is it secured from hacker intrusions at all.So,the best thing they could do is to : - identify most valubale wallets, - immediately open new wallets for them on a secure,separate computer,out of any Cryptsy network - after wallets instalation take generated new deposit addresses and send coins from Cryptsy to them - later download blockchains for wallets . |
|
|
|
Please tell me the receivers didn't just shut cryptsy.com down thinking it will stop vern moving funds.... They are aware of what owning the private keys means right... i.e. paul downloads a blockchain and imports them and sends funds?
It would be pretty embarrassing if pauls moronic attempt to move them in 1 lump actually worked. Maybe the receivers can get their teenage kids to come in and help them move the funds after they setup dad and mums vcr player?
Maybe we could get a thread going of coins wallet addresses so they can be watched and direct exchanges like bittrex etc to. I'm sure they can then be on the lookout for Bao sending coins in. Im rather enjoying the thought of him sleeping in a cardboard box. Must be desperate with bitebi9 making a total of $10 USD a day. Im also wondering if paul thought out his runaway china place correctly too... they tend to execute white collar workers that take money.
It looks that receivers just shutdown cryptsy.Till now they did not give any list of Cryptsy wallets and amount of coins in them.I dont think they have much time,because if you see what was happened with UNO at Bittrex,deposit Bittrex address was opened and tested on 7th.March.2016. - about month before transfer UNOs. It means that somebody prepared it for a long time - time enough to download blockchains of any coin and import private keys.Now time is essence,especially with the coins which can be traded on multiple exchanges. |
|
|
|
Gekko tryin' to work people up, don't fall for it Balu2  Yes we should do right but it's also a no-mercy environment. If I had the choice between one of you buying 2000 UNO at 0.001 or me buying 2000 UNO at 0.0011, I would buy it myself! That's not to say that Bittrex wouldn't reverse trades if such a large dump took place anyway. I wonder if Bittrex would have noticed if none of us mentioned it. I also wonder where this thunderbolt guy came from. LOL! That was an exciting Sunday night/Monday morning, I had fun watching it unfold & using Twitter. This story is a good opportunity for attention so continue to tweet, retweet, post & comment in reddit, there are 3 cryptocointalk threads about it already...what else do crypto people use these days? It is not thunderbolt,but thunderjet,Merkle miswrote mine username and I did not know they used mine infos until I saw post here.Yesterday one guy - nukefxr,probably from UNO community asked me if I can help about sudden move of UNOs from Cryptsy to Bittrex.Immediately it got mine attention,because during tracing stolen BTCs and altcoins from Cryptsy I found that "hacker" extensively used Bittrex to sell stolen BTCD and XC.So I did investigation and put post about mine findings about 12 hours ago.This is mine original post: They still have the coins though. Vern does at least. He can still return them. The clock is ticking. As the events unfold in the next few months I think if Vern returns the coins now he can still keep himself and his accomplices out of jail, or minimize the legal liability at least. It's the same situation Karpeles was in when the "missing" coins were tracked to his wallet. It's obvious at this point Vern is guilty.
Now,after receiveship it will be good to look at Cryptsy wallets carefully and compare all these suspicious transactions(including money transactions of course).When we are talking about blockchain expertise,it is very hard to say what can be enough credentials for the court,because it is something so new,there are no school or something similar for that.Maybe these guys from Chain analysis ,which have company for blockchain expertise will have enough credentials for the court: https://www.chainalysis.com/Thunderjet good job with your wallet forensics. Just saw this thought you might wanna see it. The Cryptsy UNO cold wallet has been moved to a wallet at Bittrex this sunday . https://bitcointalk.org/index.php?topic=527500.msg14494331#msg14494331 … If you look carefully at this UNO address on Bittrex uWCVvkiyUqXDiQ8nczaoLrWjqScr4jvnnz which received UNOs from Cryptsy cold wallet,you can see that it got first 25 UNOs (probably control transaction) on 7th.March.2016 - 3 weeks before receivership . Rest of them came yesterday. So,this 15000 UNO transaction has been done by someone who had control of UNO cold wallet on Cryptsy at 7th.March.2016 and we all know who is that person - Paul Vernon. Unfortunately,it looks like Vernon copied wallet.dat files from wallets on Cryptsy and now wants to exchange rest of altcoins for BTCs.His big wallets with BTCs taken directly from Crypytsy and from selling altcoins are discovered and compromised,so he cant touch them.Bitebi9 is dead,no volume at all,no income,but he has a lot of expenses, from child alimony to paying big expensive lawer,so he probably desperately needs influx of uncompromised BTCs.I dont think so that this account on Bittrex is on his name,but probably on some poor guy/girl whose gave identity data to Cryptsy. Maybe big players in crypto world know something about it,because yesterday we had unusally big drop of all altcoins value,while BTC price was stable.  One more thing - I followed UNO address of Cryptsy cold wallet(from the last one address before move on Bittrex) backward on the blockchain to see point of origin of wallet for that address,because that last known address has no label,so someone on Bittrex could tell you are wrong.But, you are right - I found point of origin and it is Cryptsy UNO cold wallet ,no doubt on that:
That point of origin is UNO address(49.000 UNOs) - ucUNib5VsyTHfdz7EQFeqfsvyMgEX9Jhju ,which is positively identified on blockchain as Cryptsy address: https://chainz.cryptoid.info/uno/tx.dws?627285.htmhttps://chainz.cryptoid.info/uno/address.dws?ucUNib5VsyTHfdz7EQFeqfsvyMgEX9Jhju.htmIf you go one more step backward from address - ucUNib5VsyTHfdz7EQFeqfsvyMgEX9Jhju - you will see address uV3ZkXabHfYoBCJpcEX9W7qKH6L6KqkMHy with 50.000 UNOs from where UNOs were transferred to ucUNib5VsyTHfdz7EQFeqfsvyMgEX9Jhju : https://chainz.cryptoid.info/uno/address.dws?uV3ZkXabHfYoBCJpcEX9W7qKH6L6KqkMHy.htmNow pay attnetion on funds which came to the address uV3ZkXabHfYoBCJpcEX9W7qKH6L6KqkMHy - on 50000 UNO deposit (block 507095) it leads right to old URAN wallet of Cryptsy : uRAN4dj3yG8n93obakUHT8siVQap47bHrNhttps://chainz.cryptoid.info/uno/tx.dws?617298.htmThings are more than clear now |
|
|
|
They still have the coins though. Vern does at least. He can still return them. The clock is ticking. As the events unfold in the next few months I think if Vern returns the coins now he can still keep himself and his accomplices out of jail, or minimize the legal liability at least. It's the same situation Karpeles was in when the "missing" coins were tracked to his wallet. It's obvious at this point Vern is guilty.
Now,after receiveship it will be good to look at Cryptsy wallets carefully and compare all these suspicious transactions(including money transactions of course).When we are talking about blockchain expertise,it is very hard to say what can be enough credentials for the court,because it is something so new,there are no school or something similar for that.Maybe these guys from Chain analysis ,which have company for blockchain expertise will have enough credentials for the court: https://www.chainalysis.com/Thunderjet good job with your wallet forensics. Just saw this thought you might wanna see it. The Cryptsy UNO cold wallet has been moved to a wallet at Bittrex this sunday . https://bitcointalk.org/index.php?topic=527500.msg14494331#msg14494331 … If you look carefully at this UNO address on Bittrex uWCVvkiyUqXDiQ8nczaoLrWjqScr4jvnnz which received UNOs from Cryptsy cold wallet,you can see that it got first 25 UNOs (probably control transaction) on 7th.March.2016 - 3 weeks before receivership . Rest of them came yesterday. So,this 15000 UNO transaction has been done by someone who had control of UNO cold wallet on Cryptsy at 7th.March.2016 and we all know who is that person - Paul Vernon. Unfortunately,it looks like Vernon copied wallet.dat files from wallets on Cryptsy and now wants to exchange rest of altcoins for BTCs.His big wallets with BTCs taken directly from Crypytsy and from selling altcoins are discovered and compromised,so he cant touch them.Bitebi9 is dead,no volume at all,no income,but he has a lot of expenses, from child alimony to paying big expensive lawer,so he probably desperately needs influx of uncompromised BTCs.I dont think so that this account on Bittrex is on his name,but probably on some poor guy/girl whose gave identity data to Cryptsy. Maybe big players in crypto world know something about it,because yesterday we had unusally big drop of all altcoins value,while BTC price was stable. One more thing - I followed UNO address of Cryptsy cold wallet(from the last one address before move on Bittrex) backward on the blockchain to see point of origin of wallet for that address,because that last known address has no label,so someone on Bittrex could tell you are wrong.But, you are right - I found point of origin and it is Cryptsy UNO cold wallet ,no doubt on that:
That point of origin is UNO address(49.000 UNOs) - ucUNib5VsyTHfdz7EQFeqfsvyMgEX9Jhju ,which is positively identified on blockchain as Cryptsy address: https://chainz.cryptoid.info/uno/tx.dws?627285.htmhttps://chainz.cryptoid.info/uno/address.dws?ucUNib5VsyTHfdz7EQFeqfsvyMgEX9Jhju.htmIf you go one more step backward from address - ucUNib5VsyTHfdz7EQFeqfsvyMgEX9Jhju - you will see address uV3ZkXabHfYoBCJpcEX9W7qKH6L6KqkMHy with 50.000 UNOs from where UNOs were transferred to ucUNib5VsyTHfdz7EQFeqfsvyMgEX9Jhju : https://chainz.cryptoid.info/uno/address.dws?uV3ZkXabHfYoBCJpcEX9W7qKH6L6KqkMHy.htmNow pay attnetion on funds which came to the address uV3ZkXabHfYoBCJpcEX9W7qKH6L6KqkMHy - on 50000 UNO deposit (block 507095) it leads right to old URAN wallet of Cryptsy : uRAN4dj3yG8n93obakUHT8siVQap47bHrNhttps://chainz.cryptoid.info/uno/tx.dws?617298.htmThings are more than clear now |
|
|
|
They still have the coins though. Vern does at least. He can still return them. The clock is ticking. As the events unfold in the next few months I think if Vern returns the coins now he can still keep himself and his accomplices out of jail, or minimize the legal liability at least. It's the same situation Karpeles was in when the "missing" coins were tracked to his wallet. It's obvious at this point Vern is guilty.
Now,after receiveship it will be good to look at Cryptsy wallets carefully and compare all these suspicious transactions(including money transactions of course).When we are talking about blockchain expertise,it is very hard to say what can be enough credentials for the court,because it is something so new,there are no school or something similar for that.Maybe these guys from Chain analysis ,which have company for blockchain expertise will have enough credentials for the court: https://www.chainalysis.com/ |
|
|
|
Wow so according to your theory of the crime, if I follow right, the main stash of the proceeds of the alt wallet heist hasn't been moved since january but there was a period where it looks like the "hacker"(Vern?) was attempting to dissipate the coins through some sort of bot but then right about the time Vern announced the "Event" it looks like the Hacker culprit(s) have perhaps gotten alerted to the heat on those coins and stopped the wallet activity. Part of that is that some of the coins seem to have been laundered through a kraken account in the period following Vern's divorce. This scenario seems consistent with and would seem to possibly match Lorie's allegations that she thought he was actively trying to dissipate "assets". I think she filed the divorce in that intermittent period between the sell-off portion of the strategy and the post-sale dissipation bot activity. Vern seems to have stopped looting the hot wallets since the "judge" in effect ordered him to stop.
Trying to conjecture what's in the hacker's mind. If the coin activity stopped right about the time the hack was announced then it appears the hacker was alerted to the heat and then mostly stopped messing with the coins in the "dirty" wallet stash. But Vern still kept looting the "clean" coins until a few weeks ago, if I'm following the forensics trail correctly. So, this means the hacker really mostly has not directly spent many of the "dirty" coins at all, mainly laundered them or simply left them in those big wallets in clumps of 1000.
After Cryptsy hack announcement on 15.January,it seems that hacker was trying to speed up moving BTC obtained form selling stolen altcoins to exchanges.On 18th.January alone he sent 356 BTC,but after posting of his wallet on 26th.January he abruptly stopped. 11825 BTCs stolen from Cryptsy were not moved at all.It looks that he wanted first to sell altcoins,then BTCs from them exchange for cash.He probably thought that everybody would look on stolen BTCs and nobody will pay attention on what is happening with altcoins.He thought that is impossible to trace altcoins,especially after changing them for BTCs.How wrong he was. All that time October 2014 - July 2015, Vernon did not do anything to prevent it.Why he did not contact Bittrex which is also US based exchange?All that silence was perfect only for hacker,because he could exchange stolen altcoins in peace.Hacker was so sure in himself that he sent directly stolen altcoins to exchanges,without any mixing. Few months after hack,everything goes smooth and relaxed Vernon bought 1.3 millions worth house for cash he recevied from Santa Clause.It is very possible that he reported that money to IRS as a profit from Cryptsy- clean money .After few months he was sure that Cryptsy will survive on fractional reserves and nobody will ever know what was happened.Now IRS are looking for him to explain that profit in year when exchange lost more than 10 millions in hack - that is why he put signature on divorce agreement in China not US. After last altcoins (LTCs) were sold in July.2015 ,Vernon opened Bitebi9 on 28th.July(gave $46000 for start capital alone) and a month after that Cryptsy started to crumble.Money for Bitebi9 were obtained directly form Cryptsy old wallet,by sending 545 BTC in July to BTCC China and selling them for CNY.From July 2015-January 2016 there were no activities on that account and then just few days before Cryptsy closing on 10th.January.2016 last 16 BTC from Cryptsy wallet went on that address at BTCC China. Obviously he tried to cover tracks,by using different wallets for different activities,so nobody could connect them.He only had full control on Cryptsy wallet,so nobody except him could know what is happening.He learned lesson from Mt.Gox,when other staff had access and report about Karpeless activities on forums before final crash.It is very possible that he has a small network of offshore companies(like Shaun Bridges had) where money from selling BTCs first went after selling for dollars on exchanges. All this looks like some carefully planned secret operation - well maybe it is,Vernon worked for military inteligence,so he knew how secrecy is important when you doing sensitive,especially dirty things.The less people know the better.He surely very well know for inteligence services reaction after major fuck ups - first, deny everything untill you can,then starting blame others and finally act insanity. The more i think about it the more i think you are right. This piece of shit tried to use funds in cryptsy to push his lifestyle and new ventures... he probably started small and then well you know once you start you can't stop. He figured the cryptsy coffers would cover and fill this and with unpredictable prices and withdrawals before you know it he was fucked. So he did what any scammer and poor excuse for a father and human being would do given that situation he ran off to somewhere else. Im not sure it was planned from the opening of cryptsy but maybe he got greedy and thought it would all be covered... its going to be a great year. Paul Vernon and Joshua Garza both in court and both involved together. Its horrible to see but maybe crypto needs bad examples like this with incarceration and fines to set examples to prevent future scams? I also dont think he was planning that from begining(that would be pure evil).For a long time I thought it was just pure greed overtook him when he saw so much money in his hands.But after all maybe initial reason came from something else. 2 months before hack at least 585 BTC from Silkroad seized wallets in the time when Shaun Bridges controlled them,came through Cryptsy wallets. 75 BTCs came directly to cold wallet and stayed in it until hack.No doubt,Vernon knew Shaun Bridges months before hack.In that time Cryptsy was biggest altcoin exchange based in US and ideal for laundering dirty Bitcoins if you had a deal with owner and give him percentage for that service. Problem began when just few weeks after BTCs from Silkroad started to come on Cryptsy,Carl Force and Shaun Bridges went under investigation.Maybe,Vernon was afraid that investigators will connect him with them and decided to perform fake hack,so if investigation comes to him ,authorities could not sieze majority of valubale altcoins and BTCs and no matter what he will have more than enough money for the rainy days. He performed silent hack and waited.Months were passing and nothing happened.No investigation and Cryptsy performanced well on fractional reserves.Then after initial fear,greed overtook.He probably thought - nobody search for me,exchange works,so why I would not retain all these coins for myself? He started to relax,put posts on veteran sites about his techno genius personality and finally decided to reward himself for all months in fear by starting to live luxury life.First big house,than luxury cars and finally young Chinese mistress. Maybe all this would not happened if people knew before what Gleb discovered on this forum - that Vernon ran penny auction site Foopile few years before(Brawnco inc) which was closed on a way very similar to Cryptsy. |
|
|
|
Wow so according to your theory of the crime, if I follow right, the main stash of the proceeds of the alt wallet heist hasn't been moved since january but there was a period where it looks like the "hacker"(Vern?) was attempting to dissipate the coins through some sort of bot but then right about the time Vern announced the "Event" it looks like the Hacker culprit(s) have perhaps gotten alerted to the heat on those coins and stopped the wallet activity. Part of that is that some of the coins seem to have been laundered through a kraken account in the period following Vern's divorce. This scenario seems consistent with and would seem to possibly match Lorie's allegations that she thought he was actively trying to dissipate "assets". I think she filed the divorce in that intermittent period between the sell-off portion of the strategy and the post-sale dissipation bot activity. Vern seems to have stopped looting the hot wallets since the "judge" in effect ordered him to stop.
Trying to conjecture what's in the hacker's mind. If the coin activity stopped right about the time the hack was announced then it appears the hacker was alerted to the heat and then mostly stopped messing with the coins in the "dirty" wallet stash. But Vern still kept looting the "clean" coins until a few weeks ago, if I'm following the forensics trail correctly. So, this means the hacker really mostly has not directly spent many of the "dirty" coins at all, mainly laundered them or simply left them in those big wallets in clumps of 1000.
After Cryptsy hack announcement on 15.January,it seems that hacker was trying to speed up moving BTC obtained form selling stolen altcoins to exchanges.On 18th.January alone he sent 356 BTC,but after posting of his wallet on 26th.January he abruptly stopped. 11825 BTCs stolen from Cryptsy were not moved at all.It looks that he wanted first to sell altcoins,then BTCs from them exchange for cash.He probably thought that everybody would look on stolen BTCs and nobody will pay attention on what is happening with altcoins.He thought that is impossible to trace altcoins,especially after changing them for BTCs.How wrong he was. All that time October 2014 - July 2015, Vernon did not do anything to prevent it.Why he did not contact Bittrex which is also US based exchange?All that silence was perfect only for hacker,because he could exchange stolen altcoins in peace.Hacker was so sure in himself that he sent directly stolen altcoins to exchanges,without any mixing. Few months after hack,everything goes smooth and relaxed Vernon bought 1.3 millions worth house for cash he recevied from Santa Clause.It is very possible that he reported that money to IRS as a profit from Cryptsy- clean money .After few months he was sure that Cryptsy will survive on fractional reserves and nobody will ever know what was happened.Now IRS are looking for him to explain that profit in year when exchange lost more than 10 millions in hack - that is why he put signature on divorce agreement in China not US. After last altcoins (LTCs) were sold in July.2015 ,Vernon opened Bitebi9 on 28th.July(gave $46000 for start capital alone) and a month after that Cryptsy started to crumble.Money for Bitebi9 were obtained directly form Cryptsy old wallet,by sending 545 BTC in July to BTCC China and selling them for CNY.From July 2015-January 2016 there were no activities on that account and then just few days before Cryptsy closing on 10th.January.2016 last 16 BTC from Cryptsy wallet went on that address at BTCC China. Obviously he tried to cover tracks,by using different wallets for different activities,so nobody could connect them.He only had full control on Cryptsy wallet,so nobody except him could know what is happening.He learned lesson from Mt.Gox,when other staff had access and report about Karpeless activities on forums before final crash.It is very possible that he has a small network of offshore companies(like Shaun Bridges had) where money from selling BTCs first went after selling for dollars on exchanges. All this looks like some carefully planned secret operation - well maybe it is,Vernon worked for military inteligence,so he knew how secrecy is important when you doing sensitive,especially dirty things.The less people know the better.He surely very well know for inteligence services reaction after major fuck ups - first, deny everything untill you can,then starting blame others and finally act insanity. |
|
|
|
Perhaps we should notify exchanges of these transactions? btc-e, kraken, etc?
P.S. I think there's a good chance the hacker is following this thread, and may even be participating.
Of course he is. Hacker is Vernon and he reads it daily.. how else would he know to change bitebi9 details from Bao to his chinese mistress (which he abandoned his US wife and kids for). How else would Horus, Mullick, Jshock and the others get their info so they can try and protect themselves from the bs they brought on their customers. They only read this thread because they are at the exposure stage and try to downplay what was done. JShock or Cryptsy_Jim still hasn't given us the plausable story that cryptocracker gave them. JShock complains that people just accuse and put shit on others and don't ask questions. People have repeatedly asked him to give the story that made Paul Vernon think it was plausable. So lets ask it a final time. JShock.... or Cryptsy_Jim if you prefer. WHAT was the plausable story that cryptocracker gave Paul Vernon that you were privy to that made him think it was legit? You owe this to the customers whos funds you lost, so please enlighten us or have you gone dark again until another big thing comes out? How else would DCGirl know that the name Susan Wilson is affiliated with her, hence her coming here ASAP to ward off the connection. All in all, we've witnessed a long con, with Paul Vernon claiming to have gotten in Bitcoin in 2011, then taking a break, with Cryptsy being registered on 2012-02-09T17:45:01.00Z, Paul supposedly not being active again till early 2013 tinkering in Litecoin, then creating a few pools, to bringing Cryptsy to life in less than two months with BitJohn being a cheerleader for the new dude (Paul) on the scene while he (BitJohn/John Hammes) supposedly being in a war zone in Afghanistan playing Cryptsy support sans pay because he thought it was fun, only to later vacant his paid position because ... wait for it... he wasn't being paid enough for ALL the fuckin' work he was doing, his exit coinciding with the divorce filing, with same true for most other higher-ups except Horus, living comfortably numb in the fully paid for condo office-cum-residence on Cryptsy's dime... make that Cryptsy's users' dimes. Iam sure you are right that DCGirl read these posts - her quick reaction prove it, but is she really Susan Wilson? That woman is first class scammer,playing only with big boys(multi-millioners and billionaires).What could she provide to Vernon? Maybe some rich investors,but did not find that any of them were interested for Cryptsy.Except that name for a game Whack a Troll, did not find any real connection. When I read about Susan Wilson,how she cold blooded using her own children for scamming people,there is no doubt that she is cold,very eloquent,very secure,highly focused and ruthless person which achieves goals by any means neccessary - true machiavellian type of person.On the other hand DCGirl posts are talking that she is quite different - she is also smart,but insecure person,much more emotional.It seems that she had almost fatalistic point of view,that is inevitable that one day she will find her name on this forum - like people convicted to death sentence waiting for a day when executioner will come for them. But,now when court gave receivership of Cryptsy to plantiffs,I expect that one of first things will be to publish full list of Cryptsy employees,time period of theirs work and salaries.Then we will know all their true identities for sure.Maybe we even see episode dedicated to Cryptsy on BLACKLIST TV serie - BITEBI BITE I dont know if you see mine post from last week,when I put identity of Cryptsy main financial person Roman Almanza who worked on Cryptsy to the last days:I found that 4 persons left to work on Cryptsy to the very end - Jim Shockney,Horus,Mullick and I thought that 4th would be DC Girl.
I was wrong,4th person was Roman Almanza,Senior Financial Analyst,the person who was responsible for all finances on Cryptsy and the one who knows all about Cryptsy money operations.He could be valuable witness.
He first studied business and financial administration in Saratov,Russia and interesting thing is that he appears by two different names - Dmitry R Almanza and Roman Almanza.
http://www.indeed.com/r/Roman-Almanza/450c10f4bc30d741#_ga=1.7364658.1263527337.1459745828 |
|
|
|
I tracked stolen altcoins from Cryptsy wallet.After few months,altcoins(except LTC) started to move directly on Bittrex,without any mixing.I compare Bittrex charts for BTCD and XC on days when hacker moved them on that exchange.Huge selling occured on these days.Then I started looking on Bittrex BTC output transactions for big BTC withdrawals on the days of selling.I found one BTC wallet which was exact match by: - received BTCs from Bittrex on the days of selling - amounts were match for the worth of BTCD and XC for the sum of altcoins hacker sold on these days Then I tracked LTCs,which were moved directly on July.2015 to Huobi(~75%) and BTC-e(~20%).Smaller amounts went on BTC38.Hackers wallet started to receive huge amounts of BTCs on these days from Huobi and BTC-e and these amounts matched amounts and worth od sold LTCs.Hacker could not move all of BTCs from BTC-e on the date of selling because of 100 BTC daily withdraw limit,so he removed them in batches until 25th.July,but whole amount is a match for LTC whole sum and selling price. Finally 4685 BTC came to that BTC wallet. I put mine findings about this BTC wallet on forum on January 26th.After that all transactions stopped from this wallet.Notice that larger amounts of BTCs started to move out on 18th.January,just 3 days after Cryptsy fall and then suddenly stopped. Wallet I found yesterday on Bittrex is very important because it is a direct link between Cryptsy(that wallet received BTCs directly from Cryptsy until 3rd.March.2016), Mintpal - BTER selling of DASH plus in one withdraw transaction 20 BTC went directly to hacker BTC wallet found on 26th.January. This is a mine post from 26th.January: After a long search I located hacker BTC wallet,where he put BTCs after selling stolen LTC, BTCD and XC and most likely from some other stolen coins from Cryptsy too
https://www.walletexplorer.com/wallet/1356a64174770337This is list of hacker BTC wallet addresses and amounts on them: 1C6JEkN16FqyLH37vvmSicE59kqEadUmtf 1044.4783332
1EycjnLMwsu3TGkmRXk2KcQFKfMDms3BPh 543.96196074
1LDJRDYwqaMeP4fohtKCk9rC4yNp84ZwBj 539.76554775
12wjDTKN7VJ7EzGpXhzUugRn9EksAE7V54 529.15362786
12jbr2aBAvepnhLVzH7FmEJSj5vhV12AVc 525.12341805
16GND7hK2G6ng1wkZeotEboAAXCJQ3oFMS 198.38328147
19tZeUPgr79fPcnF7kZ5Auibng5MJu8ZXV 92.68801239
1CH76kqRrgi1bNKBR2No58D2Ww4ZMLNnAz 24.3806
1KCUsmS1yno86E1WyaezJryBLeFPTBvgSS 20.91127867
12pph89q6WqBnfSMyhTbB9jY3Qy42ckkSY 0.
152kBAm48m7qpJ435LnvskYNyQk5zdE7oR 0.
1KLAEfwvJC8awiuigk5CrQ8dVB2XsXjABm 0.
13hvDJDXC95hgvBqbf3zVpQiYct8FTv2GZ 0.
1MWcNSArYxzR2JxAqs7fSi9hnKMgf1KfNM 0.
121nt1QeEZTbSRREaEGvKcqCmTQkhCcDAX 0.
1CCN21uVdp95LHJtXh53B6BC7M3s4y63Mo 0.
1FDDuyhunAtBb287WNmJEEwr6s24yvEQTv 0.
15wzuUsgz5Wia8i5mrEYp3p8ciHPbi1v4h 0.
1JuyFXAYuS4RHdaxrZDjE1f6XtFPRQdhYP 0.
I was tracking Bittrex BTC wallet outputs on dates when he moved stolen BTCD and XC on Bittrex.Hacker moved and sold BTCD and XC on Bittrex in period between 14.Oct.2014 - 07.Nov.2014.I did it ,because Bittrex is a small exchange in comparison for BTC exchanges,there are no much big withdrawals,and every such one can be easily identified and tracked. Inside hacker wallet there is address 1C6JEkN16FqyLH37vvmSicE59kqEadUmtf : https://www.walletexplorer.com/address/1C6JEkN16FqyLH37vvmSicE59kqEadUmtfon that address hacker put BTC after selling BTCD and XC on Bittrex and LTC on BTC-e(11.July.2015) If you carefully look on inputs at that address for period 14.Oct- 04.Nov.2014 - they are all from Bittrex.After this period new inputs started again on 11.July.2015 - day when LTC started to moving to different exchanges.As I wrote in mine previous posts, 55000 LTC moved 11.July on BTCe exchange to address: LY13Z54QKwyAnuwKfYwKFhW98qa6ihsfYy and then to BTCe LTC hot wallet - LXA3i9eEAVDbgDqkThCa4D6BUJ3SEULkErHacker sold 55000 LTC on BTC-e 11-12.July.2015,but could not move about 935 BTC all at once,due to BTCe daily withdraw limit of 100 BTC,so you will see a lot of inputs of 99.999 BTC on 1C6JEkN16FqyLH37vvmSicE59kqEadUmtf from 11-25.July All inputs on this address for period 11-25.July has a total sum of about 930 BTC. Average value of LTC for 11-12July on BTCe,when hacker sold them was 0.017 BTC for 1 LTC: 55000 x 0.017 = 935 BTC If you trace backward(with help of Wallet explorer trace largest sum(branching BTCe output) in every txs) all BTC inputs on address 1C6JEkN16FqyLH37vvmSicE59kqEadUmtf for 11-25.July have point of origin in BTCe exchange wallet. Also hacker wallet https://www.walletexplorer.com/wallet/1356a64174770337 for a period 18.Aug.2014(when it formed) till now you will see that all inputs in it has a total sum of ~ 4685 BTC Sum of stolen LTC,BTCD and XC is: 2475000 LTC x 0.015 = 3712 BTC 107400 BTCD x 0.007 = 752 BTC 289000 XC x 0.0007 = 202 BTC --------------------------------------------- Total: 4666 BTC , very very close to the sum of all inputs for that wallet I have also tested dozen other transactions (traced them backward) in this wallet https://www.walletexplorer.com/wallet/1356a64174770337 and found that BTC inputs which came from LTC selling(11-25.July.2015 came from Huobi, BTC38 and BTC-e,like I found and wrote in previous posts. First 8 inputs in this wallet https://www.walletexplorer.com/wallet/1356a64174770337?page=3 ,has point of origin BTC38.It was before LTC,BTCD and XC started to move,so it is most likely from some other robbed coins,which Cryptsy did not report or even did not aware.Also hacker sold on BTC38 and BTER till 14.Oct.2014 coins in total value of about 200 BTC.It was before BTCD,XC and LTC started to move - so it is some other stolen coins never reported. This is a list of BTCD and XC transactions and dates when they came to Bittrex: XC11 https://chainz.cryptoid.info/xc/tx.dws?198609.htm - moved 24.10.2014 - Bittrex https://chainz.cryptoid.info/xc/tx.dws?411249.htm - moved 07.11.2014 - Bittrex https://chainz.cryptoid.info/xc/tx.dws?380728.htm - moved 24.10.2014 - Bittrex https://chainz.cryptoid.info/xc/tx.dws?395694.htm - moved 31.10.2014 - Bittrex https://chainz.cryptoid.info/xc/tx.dws?373715.htm - moved 20.10.2014 - Bittrex https://chainz.cryptoid.info/xc/tx.dws?373818.htm - moved 20.10.2014 - Bittrex https://chainz.cryptoid.info/xc/tx.dws?393371.htm - moved 30.10.2014 - Bittrex https://chainz.cryptoid.info/xc/tx.dws?399652.htm - moved 02.11.2014 - Bittrex https://chainz.cryptoid.info/xc/tx.dws?380702.htm - moved 23.10.2014 - Bittrex https://chainz.cryptoid.info/xc/tx.dws?398810.htm - moved 01.11.2014 - Bittrex https://chainz.cryptoid.info/xc/tx.dws?399528.htm - moved 02.11.2014 - Bittrex https://chainz.cryptoid.info/xc/tx.dws?399682.htm - moved 02.11.2014 - Bittrex https://chainz.cryptoid.info/xc/tx.dws?399688.htm - moved 02.11.2014 - Bittrex https://chainz.cryptoid.info/xc/tx.dws?399694.htm - moved 02.11.2014 - Bittrex https://chainz.cryptoid.info/xc/tx.dws?411262.htm - moved 07.11.2014 - Bittrex BTCD http://explorebtcd.info/tx/8d20bdcc209a724f9769707578d69bd39bfa108636ae3df7664f8a56629e67af - moved 24.10.2014 - Bittrex http://explorebtcd.info/tx/a035693c30b9d6ad2fe9b8e1df8fb41e672b292546065863e73095838965344e - moved 14.10.2014 - Bittrex http://explorebtcd.info/tx/3cdd16fe894e7039b4edeefae27d40ce355d44ac0a98ed7e3715ca117d2befde - moved 30.10.2014 - Bittrex |
|
|
|
After a long work I finally found irrefutable evidences about Paul Vernon aka Bao Luo direct connection with "grand hack".Following traces of BTC from Cryptsy old wallet (which was under Vernon sole control and used for paying Cryptsy expenses and from which users could not get BTC directly) I found that after a hack he sent 368.7 BTC to Bittrex address 1G1QMXNCsyVAMiuXxHkzs3FrX3QGiXfUg9 directly from old Cryptsy wallet. How much his greed is big,can be seen from fact that he sent last BTCs from old Cryptsy wallet to that address on Bittrex on 3rd.March.2016 !!! On 3rd.March.2016 he took last 1.1 BTC from Cryptsy old wallet(direct transactions):https://www.walletexplorer.com/address/1G1QMXNCsyVAMiuXxHkzs3FrX3QGiXfUg9But that is not full story.This Bittrex address 1G1QMXNCsyVAMiuXxHkzs3FrX3QGiXfUg9 also received 168 BTC from BTER and few dozen BTCs from Mintpal.Following DASH transactions after hack,some members of this forum,found many 5000 DASH transactions from Cryptsy wallet to Mintpal day after day,just few days from hack.Well now we know that was Vernon who sent them on Mintpal,sold for BTC and move some of that BTC to this Bittrex BTC address described above.After fall of Mintpal,BTER is coming into the game - selling was continuing on it.Few members of Cryptsy,including myself during December 2015 received few withdrawals from Cryptsy that were not coming from Cryptsy wallet ,but BTER.It seems that Vernon wanted to prolonge Cryptsy fall a little later,because Bitebi9 project was not finished then. Now the most interesting part.This address on Bittrex was active in late 2014 and May 2015 (few last txs came from Cryptsy long after Cryptsy fall),when hacker was selling stolen altcoins on Bittrex and other exchanges.Mainly he withdraw BTCs to Bitfinex ,but one big withdraw(20 BTCs) was directly moved to BTC wallet (address 1C6JEkN16FqyLH37vvmSicE59kqEadUmtf) where hacker stored all BTC obtained from selling stolen altcoins on different exchanges - that is direct link with theft .
So:
- on this Bittrex address BTC were coming from Cryptsy old wallet almost until court seized it
- from autumn 2014 until July 2015 - 368.7 BTC came directly from old Cryptsy wallet which was untouchable for users
- finally, 20 BTC were sent from this Bittrex account directly to BTC wallet where hacker stored BTCs obtained from selling stolen altcoins
https://www.walletexplorer.com/txid/d39a289e6a271c9380165090de989aab93f26d834ac27101e38fb5b041b6ec6bBTC wallet where hacker stored BTCs from selling altcoins: https://www.walletexplorer.com/wallet/1356a64174770337This is link where you can see mine earlier findings about BTC wallet where hacker stored BTC from selling altcoins : https://bitcointalk.org/index.php?topic=1173703.msg13678567#msg13678567 Great Job thunderjet. What do you mean by "on this Bittrex address BTC were coming from Cryptsy old wallet almost until court seized it" ? Are you saying until the Court Seized the Cryptsy Wallet? If so, I haven't read anything about the Receiver having any actual wallets, let alone the keys. Thanks From 28th.March,court gave receiveship to plantiffs and Cryptsy is no longer under Vernon control |
|
|
|
So, are you saying Paul Dalian = Paul Vernon = Bao Luo? Am I following this right? So is Paul/Bao embezzling from Cryptsy to fund new Chinese shell Companies and launder the embezzled money?
- after Cryptsy closure,members found out that not only reported BTC and altcoins missing,but many others coins and cash which were not hacker target - DASH and DOGE worth millions of dollars vanished.From Cryptsy Canada a lot of cash money dissapeared too.Hacker could not take cash so where is it? Now we know that he used members cash money and coins to pay Cryptsy and his own expenses too How do you know about the dash and doge and the cash from cryptsy canada? What do you mean vanished? DASH and DOGE transactions from Cryptsy wallet were traced by few members of this forum(including myself).These wallets were not hacker targets(Vernon said on his blog too) and users got coins from them after theft.So it should be enough coins in Cryptsy DASH and DOGE wallets for all members - but members got only small fraction of it,rest dissappeared. If hacker did not take them,only Vernon could.Many numerous 5000 DASH txs came from Cryptsy DASH wallet day after day ,few days after theft.Most of them went to Mintpal. DASH problem occured in October,DOGE in December,so probably larger percentage of DASH were taken by Cryptsy than DOGE. On cryptsy canada users traded altcoins for CAD only.In early October first complaints appeared about cash withdraw problems.In November and December it was avalanche of complaints.Hacker could not get cash,so where is money? Only Cryptsy could do it and all money were under Vernon control. |
|
|
|
After a long work I finally found irrefutable evidences about Paul Vernon aka Bao Luo direct connection with "grand hack".Following traces of BTC from Cryptsy old wallet (which was under Vernon sole control and used for paying Cryptsy expenses and from which users could not get BTC directly) I found that after a hack he sent 368.7 BTC to Bittrex address 1G1QMXNCsyVAMiuXxHkzs3FrX3QGiXfUg9 directly from old Cryptsy wallet. How much his greed is big,can be seen from fact that he sent last BTCs from old Cryptsy wallet to that address on Bittrex on 3rd.March.2016 !!! On 3rd.March.2016 he took last 1.1 BTC from Cryptsy old wallet(direct transactions):https://www.walletexplorer.com/address/1G1QMXNCsyVAMiuXxHkzs3FrX3QGiXfUg9But that is not full story.This Bittrex address 1G1QMXNCsyVAMiuXxHkzs3FrX3QGiXfUg9 also received 168 BTC from BTER and few dozen BTCs from Mintpal.Following DASH transactions after hack,some members of this forum,found many 5000 DASH transactions from Cryptsy wallet to Mintpal day after day,just few days from hack.Well now we know that was Vernon who sent them on Mintpal,sold for BTC and move some of that BTC to this Bittrex BTC address described above.After fall of Mintpal,BTER is coming into the game - selling was continuing on it.Few members of Cryptsy,including myself during December 2015 received few withdrawals from Cryptsy that were not coming from Cryptsy wallet ,but BTER.It seems that Vernon wanted to prolonge Cryptsy fall a little later,because Bitebi9 project was not finished then. Now the most interesting part.This address on Bittrex was active in late 2014 and May 2015 (few last txs came from Cryptsy long after Cryptsy fall),when hacker was selling stolen altcoins on Bittrex and other exchanges.Mainly he withdraw BTCs to Bitfinex ,but one big withdraw(20 BTCs) was directly moved to BTC wallet (address 1C6JEkN16FqyLH37vvmSicE59kqEadUmtf) where hacker stored all BTC obtained from selling stolen altcoins on different exchanges - that is direct link with theft .
So:
- on this Bittrex address BTC were coming from Cryptsy old wallet almost until court seized it
- from autumn 2014 until July 2015 - 368.7 BTC came directly from old Cryptsy wallet which was untouchable for users
- finally, 20 BTC were sent from this Bittrex account directly to BTC wallet where hacker stored BTCs obtained from selling stolen altcoins
https://www.walletexplorer.com/txid/d39a289e6a271c9380165090de989aab93f26d834ac27101e38fb5b041b6ec6bBTC wallet where hacker stored BTCs from selling altcoins: https://www.walletexplorer.com/wallet/1356a64174770337This is link where you can see mine earlier findings about BTC wallet where hacker stored BTC from selling altcoins : https://bitcointalk.org/index.php?topic=1173703.msg13678567#msg13678567
|
|
|
|
So, are you saying Paul Dalian = Paul Vernon = Bao Luo? Am I following this right? So is Paul/Bao embezzling from Cryptsy to fund new Chinese shell Companies and launder the embezzled money?
Yes, Paul Vernon and Bao Luo are the same person.Bitebi9,his Chinese exchange was registred as Project Investors inc company.When he was discovered he transfered it to his Chinese paramour Liu Xiuxia. What are infos about Cryptsy till now: - 11825 BTC stolen BTC were never moved after so call hack(never happened such thing in crypto world) - hacker took BTC and altcoins during 5.5 hours long hack and no one at Cryptsy react for that time.It was not flash hack,but slow transfer. - stolen altcoins were sent directly to Bittrex,BTC-e,Huobi(smaller amounts on BTC38 and BTER) from October 2014-July 2015.Transactions were easy to track,but Vernon did not do anything to stop them or alarm exchanges about these transactions,so stolen altcoins were converted in about 4400 BTC - 8 months after huge hack,poor Vernon bought $1.3 millions worth huge house for cash and 2 expensive SUVs, - after Cryptsy closure,members found out that not only reported BTC and altcoins missing,but many others coins and cash which were not hacker target - DASH and DOGE worth millions of dollars vanished.From Cryptsy Canada a lot of cash money dissapeared too.Hacker could not take cash so where is it? Now we know that he used members cash money and coins to pay Cryptsy and his own expenses too - before hack, at least 585 BTC from Silkroad siezed accounts passed through Cryptsy accounts in the time when rogue agent Shaun Bridges controlled them. 75 BTC came directly to Cryptsy cold wallet(which was under Vernon sole control) and was never moved.Probably payment for laundry services and advices - month before AML,KYC introduction,Vernon fired Shandice Anderson-Fulton, who is specialist for AML,KYC, Fincen and SEC regulations and put totally unexperienced Horus on her place - starting July 2015 and to the very end,Vernon sucked 545 BTCs from old hot Cryptsy wallet and transfered them to BTCC China address 17UFQvsFyq7z2tUHHWhAkGsLTYEaCZZp4S,where they were sold for needed CNY for Bitebi9 opening and different expenses.Operation were conducted till to end of Cryptsy - on 10th.January 2016. he took last 16 BTC,when nobody can get even 0.01 BTC from Cryptsy, -he claimed during divorce that he has no income,but he gave all his US properties and money to his wife.Further,that man without income and properties obliged to pay $20000 for big house real estate tax, $15.000 for his wife lawyer expenses, to continue paying for his $1.000.000 life insurance and $2.500 monthly payment for child support.From where he will pay that,no money,no income,no assets? - in class action lawsuit papers there is statement that IRS Criminal Division and SEC put Cryptsy and Vernon under investigation |
|
|
|
|
Show Posts
