0.01 btc bounty to find out who owns a wallet and where the money went to

[cryptasm]

Hello I am looking up some old Bitcoin address for a friend for his taxes, he doesn't remember where he sent 40+ Bitcoin to
https://www.blockchain.com/de/btc/address/3B2ArYY9RMbbSyqvgApMxARHEwZT9MKGQx <--- This is the address where he sent it to

This is the address where it went to at the end (maybe an exchange wallet?):  37zfKL5EqsokYztEj6yrJxeJah52CgJixG

The first one to comment the solution will get paid the Btc.

Much love,

Cryptasm

[RapTarX]

I found someone is using the address in his profile field.

https://bitcointalk.org/index.php?action=profile;u=778507

Found from here with some more information- https://bitcoinwhoswho.com/address/37zfKL5EqsokYztEj6yrJxeJah52CgJixG/urlid/10870507

Seems like the address owned by some mlm ponzi.

[Avirunes]

Found from here with some more information- https://bitcoinwhoswho.com/address/37zfKL5EqsokYztEj6yrJxeJah52CgJixG/urlid/10870507

Seems like the address owned by some mlm ponzi.

MLM sites needs to show proof that they are paying and most of them set up fake transaction IDs or shows histories to make other believe that they are legit. You never know if they are saying truth or not but most of times they set it up all fake.


In this case, I think the address: 3B2ArYY9RMbbSyqvgApMxARHEwZT9MKGQx linked to wallet https://www.walletexplorer.com/wallet/00037858203c7c7a is a deposit wallet (maybe of an exchange/service) and similarly https://www.walletexplorer.com/wallet/9a75bfe3e97cda24 which contains 37zfKL5EqsokYztEj6yrJxeJah52CgJixG is actually a withdrawal wallet of the same service. (Just guessing with the way of transactions both wallets are processing- but I could be wrong).

[bL4nkcode]

Does your friend only notice the transaction made?

It might be an exchange address but the last transaction was 2 years ago and its transactions are strange. All last transactions are outgoing seems paying its clients like a ponzi just like what other mentioned above and the forum profile linked is somewhat connected to the site mmmglobal?

[milewilda]

https://bitinfocharts.com/bitcoin/address/37zfKL5EqsokYztEj6yrJxeJah52CgJixG

Basing on the transactions this might be an exchange wallet but last transactions was on year 2017.
Incoming and outgoing transactions between 2015-2017.So im wondering what exchange this would be.

Basing on whats being written above this address being used by a brand new account with having MMM extra on personal Text.
I agree with avirunes which these tx's goes back and forth just to show up history that they're legit but those are just presumptions.

[Steve D]

Does your friend only notice the transaction made?

It might be an exchange address but the last transaction was 2 years ago and its transactions are strange. All last transactions are outgoing seems paying its clients like a ponzi just like what other mentioned above and the forum profile linked is somewhat connected to the site mmmglobal?

Cryptasm was nice enough to create this post for me. I simply can't recall whether it was a wallet or exchange i sent to money to having made thousands of transaction in that time period.
I can say for sure though i did not invest in a ponzi scheme. I did invest in BitDice in 2016 but remember withdrawing my funds because i was too managing them in 2017.

[bL4nkcode]

Cryptasm was nice enough to create this post for me. I simply can't recall whether it was a wallet or exchange i sent to money to having made thousands of transaction in that time period.
I can say for sure though i did not invest in a ponzi scheme. I did invest in BitDice in 2016 but remember withdrawing my funds because i was too managing them in 2017.

So are those funds were lost? Or?

I don't actually get on how getting the transaction data for an old address related to taxes. Or most likely, some tax org requires you to disclose your crypto related transactions?

[N0sferatu]

Maybe those information will help:

Last transactions from the address 37zfKL5EqsokYztEj6yrJxeJah52CgJixG were done on 2017-09-11, the day China declared to shut down all of its exchanges.

Those funds (and several others!!) lead to this address: 3DfVp3nuGyNbHgYKFrBs4L7nzsSkcdtejU

Approx. 28 BTC were then sent to a Bech32 address: bc1qzzxdvcpp9gk5lkk2zcf2hgz66ml3xasp75ty053094lz80pn52yqrju285
(At this time, the only exchange supporting withdrawals to Bech32 addresses was Coinbase!)

This happened 2018-12-14, a day Bitcoin saw a new yearly low.

So i guess, either Coinbase or any chinese exchange is involved.


Edit:

I just found a connection to this address: 1N52wHoVR79PMDishab2XmRHsbekCdGquK
(Transaction from that address to above mentioned 3DfVp3nuGyNbHgYKFrBs4L7nzsSkcdtejU)

This is a hot wallet of Bittrex!

In short:  

37zfKL5EqsokYztEj6yrJxeJah52CgJixG and
1N52wHoVR79PMDishab2XmRHsbekCdGquK (<<< Bittrex Hot wallet)
sent funds to
3DfVp3nuGyNbHgYKFrBs4L7nzsSkcdtejU]3DfVp3nuGyNbHgYKFrBs4L7nzsSkcdtejU
and later to Bech32 address
bc1qzzxdvcpp9gk5lkk2zcf2hgz66ml3xasp75ty053094lz80pn52yqrju285

[FaucetKING]

Maybe those information will help:

Last transactions from the address 37zfKL5EqsokYztEj6yrJxeJah52CgJixG were done on 2017-09-11, the day China declared to shut down all of its exchanges.

Those funds (and several others!!) lead to this address: 3DfVp3nuGyNbHgYKFrBs4L7nzsSkcdtejU

Approx. 28 BTC were then sent to a Bech32 address: bc1qzzxdvcpp9gk5lkk2zcf2hgz66ml3xasp75ty053094lz80pn52yqrju285
(At this time, the only exchange supporting withdrawals to Bech32 addresses was Coinbase!)

This happened 2018-12-14, a day Bitcoin saw a new yearly low.

So i guess, either Coinbase or any chinese exchange is involved.


Edit:

I just found a connection to this address: 1N52wHoVR79PMDishab2XmRHsbekCdGquK
(Transaction from that address to above mentioned 3DfVp3nuGyNbHgYKFrBs4L7nzsSkcdtejU)

This is a hot wallet of Bittrex!

In short:  

37zfKL5EqsokYztEj6yrJxeJah52CgJixG and
1N52wHoVR79PMDishab2XmRHsbekCdGquK (<<< Bittrex Hot wallet)
sent funds to
3DfVp3nuGyNbHgYKFrBs4L7nzsSkcdtejU]3DfVp3nuGyNbHgYKFrBs4L7nzsSkcdtejU
and later to Bech32 address
bc1qzzxdvcpp9gk5lkk2zcf2hgz66ml3xasp75ty053094lz80pn52yqrju285

Thanks for the deep look, i followed your thoughts and i think that you are right and that the wallet is somehow related to Bittrex's hot wallet..
How to check even further if it is really the right answer? is it an old wallet or what?
I also think that you should be rewarded the 0.01 Btc, well done mate.

[joniboini]

How to check even further if it is really the right answer? is it an old wallet or what?

That address was listed here[1] and here[2].
Another way to verify it is to see your deposit address on Bittrex, see where do the funds that you sent there went to (if you have an account over there).

[1] https://www.walletexplorer.com/wallet/Bittrex.com/addresses
[2] https://bitinfocharts.com/bitcoin/wallet/Bittrex.com

[N0sferatu]

Thanks for the deep look, i followed your thoughts and i think that you are right and that the wallet is somehow related to Bittrex's hot wallet..
How to check even further if it is really the right answer? is it an old wallet or what?
I also think that you should be rewarded the 0.01 Btc, well done mate.

Well it seems that the mentioned Bech32 address is still active.
Same for the hot wallet.

Can't really trace where OP's BTC exactly have been sent to, as those are mixed over and over again. That's how exchanges work, unfortunately.
All in all it doesn't really matter in which address the BTC are stored, as long as the address belongs to Bittrex, OP will probably be able to recover the coins (provided he used Bittrex in the past).

[cryptasm]

Maybe those information will help:

Last transactions from the address 37zfKL5EqsokYztEj6yrJxeJah52CgJixG were done on 2017-09-11, the day China declared to shut down all of its exchanges.

Those funds (and several others!!) lead to this address: 3DfVp3nuGyNbHgYKFrBs4L7nzsSkcdtejU

Approx. 28 BTC were then sent to a Bech32 address: bc1qzzxdvcpp9gk5lkk2zcf2hgz66ml3xasp75ty053094lz80pn52yqrju285
(At this time, the only exchange supporting withdrawals to Bech32 addresses was Coinbase!)

This happened 2018-12-14, a day Bitcoin saw a new yearly low.

So i guess, either Coinbase or any chinese exchange is involved.


Edit:

I just found a connection to this address: 1N52wHoVR79PMDishab2XmRHsbekCdGquK
(Transaction from that address to above mentioned 3DfVp3nuGyNbHgYKFrBs4L7nzsSkcdtejU)

This is a hot wallet of Bittrex!

In short:  

37zfKL5EqsokYztEj6yrJxeJah52CgJixG and
1N52wHoVR79PMDishab2XmRHsbekCdGquK (<<< Bittrex Hot wallet)
sent funds to
3DfVp3nuGyNbHgYKFrBs4L7nzsSkcdtejU]3DfVp3nuGyNbHgYKFrBs4L7nzsSkcdtejU
and later to Bech32 address
bc1qzzxdvcpp9gk5lkk2zcf2hgz66ml3xasp75ty053094lz80pn52yqrju285

Cheers, you helped us out, whats your BTC address?

[Steve D]

Maybe those information will help:

Last transactions from the address 37zfKL5EqsokYztEj6yrJxeJah52CgJixG were done on 2017-09-11, the day m/2017/09/11/bitcoin-price-falls-on-reports-that-china-is-closing-local-exchanges.html]China declared to shut down all of its exchanges.

Those funds (and several others!!) lead to this address: 3DfVp3nuGyNbHgYKFrBs4L7nzsSkcdtejU

Approx. 28 BTC were then sent to a Bech32 address: bc1qzzxdvcpp9gk5lkk2zcf2hgz66ml3xasp75ty053094lz80pn52yqrju285
(At this time, the only exchange supporting withdrawals to Bech32 addresses was Coinbase!)

This happened 2018-12-14, a day Bitcoin saw a new yearly low.

So i guess, either Coinbase or any chinese exchange is involved.


Edit:

I just found a connection to this address: 1N52wHoVR79PMDishab2XmRHsbekCdGquK
(Transaction from that address to above mentioned 3DfVp3nuGyNbHgYKFrBs4L7nzsSkcdtejU)

This is a hot wallet of Bittrex!

In short:  

37zfKL5EqsokYztEj6yrJxeJah52CgJixG and
1N52wHoVR79PMDishab2XmRHsbekCdGquK (<<< Bittrex Hot wallet)
sent funds to
3DfVp3nuGyNbHgYKFrBs4L7nzsSkcdtejU]3DfVp3nuGyNbHgYKFrBs4L7nzsSkcdtejU
and later to Bech32 address
bc1qzzxdvcpp9gk5lkk2zcf2hgz66ml3xasp75ty053094lz80pn52yqrju285

Superb research. Just what i was looking for.

Unfortunately i couldn't retrieve the BTC as i only ever deposited twice on Bittrex 6 months later.

I'll make sure you get the bounty through Cryptasm nevertheless. Couldn't have hoped for more tbh.

[N0sferatu]

Superb research. Just what i was looking for.

Unfortunately i couldn't retrieve the BTC as i only ever deposited twice on Bittrex 6 months later.

I'll make sure you get the bounty through Cryptasm nevertheless. Couldn't have hoped for more tbh.

Thank you very much for the reward!

It's such a pity you weren't able to retrieve your coins.. Still I hope this will have a happy end for you someday!

[Steve D]

Just to clarify. I'd be willing to pay another one of you 0.01 BTC if your research actually leads to me being able to recover my BTC.

[N0sferatu]

Wasn't pleased with the fact you couldn't retrieve the BTC so was looking into it again. (No need for a 2nd reward though.)

Is there a possibility you tried a "BTC doubler" or HYIP scheme by that time?

The address: 37zfKL5EqsokYztEj6yrJxeJah52CgJixG is connected to a forum user: https://bitcointalk.org/index.php?action=profile%3Bu%3D778507

This user / wallet is connected to some ponzi schemes. Source.
(don't know how i could oversee this yesterday)

Probable websites (not advisable to visit them, i haven't checked for malicious activities!):

Code:

http://Bitcoincopy.site123.me
http://Multiplybitcoin.com
http://Btc48hours.com
http://mmmglobal.org/?i=lex

I can't find any related websites to the other wallets though.

[jankeman]

Wasn't pleased with the fact you couldn't retrieve the BTC so was looking into it again. (No need for a 2nd reward though.)

Is there a possibility you tried a "BTC doubler" or HYIP scheme by that time?

The address: 37zfKL5EqsokYztEj6yrJxeJah52CgJixG is connected to a forum user: https://bitcointalk.org/index.php?action=profile%3Bu%3D778507

This user / wallet is connected to some ponzi schemes. Source.
(don't know how i could oversee this yesterday)

Probable websites (not advisable to visit them, i haven't checked for malicious activities!):

Code:

http://Bitcoincopy.site123.me
http://Multiplybitcoin.com
http://Btc48hours.com
http://mmmglobal.org/?i=lex

I can't find any related websites to the other wallets though.

According to bitcoinwhoswho, the address received its latest transaction in 2017,  so it has stopped receiving BTC. This might be due to the 'owner' shutting the sites down.

Says the wallet is connected with 4 possible Hyip scams, so it's been used for illegal activity.

[jankeman]

Wasn't pleased with the fact you couldn't retrieve the BTC so was looking into it again. (No need for a 2nd reward though.)

Is there a possibility you tried a "BTC doubler" or HYIP scheme by that time?

The address: 37zfKL5EqsokYztEj6yrJxeJah52CgJixG is connected to a forum user: https://bitcointalk.org/index.php?action=profile%3Bu%3D778507

This user / wallet is connected to some ponzi schemes. Source.
(don't know how i could oversee this yesterday)

Probable websites (not advisable to visit them, i haven't checked for malicious activities!):

Code:

http://Bitcoincopy.site123.me
http://Multiplybitcoin.com
http://Btc48hours.com
http://mmmglobal.org/?i=lex

I can't find any related websites to the other wallets though.

According to bitcoinwhoswho, the address received its latest transaction in 2017,  so it has stopped receiving BTC. This might be due to the 'owner' shutting the sites down.

Says the wallet is connected with 4 possible Hyip scams, so it's been used for illegal activity.

Not only that, I checked the transaction link you added, and it said that your friend sent the btc to the address, this might imply that he sent them to a HYIP owner.
Unfortunately, there is simply no way for bittrex to get the BTCs back, not only because the btc transaction is basically irreversible, but also because the transaction is old enough, he sent them in 2017.

Here's my address: 373dAiDkUX6cfkadmWcbeJHbHhxpZScDP6