Methodolgy: For anyone looking to apply this to their vendor who ripped them off (BFL, BlackArrow, KNC, Bitmine.ch, etc,) just get ONE verified wallet of a given vendor and follow the largest amounts around. In many cases the largest amounts lead to the same places. I found this to be the case as I will demonstrate in detail below. For most this can be academically interesting for actual AMT customers and the lawyers suing them, this will be evidence, for law enforcement also evidence of Joshua Zipkin participating in Silk Road 2 as a client, AND money laundering as well as a poor and obvious attempt to hide their assets.
Here is some detail on AMT's wallet. As always this will be a very lengthy post. But it's the money trail. First this is ALL based on the ONE confirmed AMT wallet. That and large amounts do not get moved like the following will show. I am focusing on amounts over 300BTC. This is pretty dry and boring stuff. But if you want to see the money trail, this is it. I have ONE confirmed wallet for AMT and the BITPAY address used to pay them as well. So that is TWO addresses we now know of that were used by AMT. Note this is actually how we will ALL find the money that he has been hiding and mining with. The pay off here is WHERE the BTC wound up and the wallets they are currently stored in. That took some time but the conclusions are stated below. At the end of this I have identified where the money ultimately goes and that Joshua Zipkin has been using to enrich himself from our money. Oh and silk road 2 he bought from them
This following is Joshua Zipkins transaction history with bitcoin...I have bolded the confirmed wallet. The bolded item It is one that was used to pay AMT in bitcoin (bitpay paid them or Joshua Zipkin moved money from that wallet around to other wallets as you will see). I recommend others follow my research and validate my findings. So lets play a game of follow the money....I will thank Gleb Gamow for using this tool in BFL related matters as it got me looking at it as well for this. Nice and simple to follow along with so you know where your money has been coming and going from. There are some interesting things I will note below where I went a bit further including Silk Road 2 drug purchases REALLY easy to follow that trail. Oh and the motherlode. Not to mention proof he was mining with our hardware as well. Again easy to start tracking.
First entry in bold is a confirmed address various customers used to pay AMT (this was validated by customers who have asked to remain anonymous due to the retaliatory nature of Joshua Zipkin and AMT)
Note that each wallet can be followed by the next one. In fact if you look at the largest amounts, you start to see they get divided into various wallets. I will make notations as to any noteworthy transactions against the wallets themselves.
http://www.walletexplorer.com/wallet/BitPay.com?from_address=1P9NwQ1pUS8vpKRG8um6NyAXLcvv1dG9sgNotably look what happens next here:
http://www.walletexplorer.com/txid/92abd539cec5f54626e2334c526c34df42d31eab0d6c9dca0bfddd5f6a4ec7baThis transaction is tied to a specific purchase made for the miners that is how I was able to link the bitpay wallet to the wallet below as being AMT's. I won't go into the who. But various people paid similar amounts. That much is certain and others who are trusted also have the same info and can confirm it also it's not just me with the information.
This leads us to this particular wallet which is one of the confirmed amounts paid moved in it's entirety to the wallet below.
THIS is the actual AMT wallet. Let us follow the money....
http://www.walletexplorer.com/address/1N7pFYGpthLU2HcvaLR2FPreAYKSX4Ms6KFrom here I followed amounts over 300BTC in most cases....here is the first one. I will stop at the
http://www.walletexplorer.com/address/1PrxRC2bo4SJgX7t7H9BAcYLn9bZu4k8oMWhen following this one and interesting picture emerges. It appears the other wallets are mining wallets just based simply on how they accumulate BTC and where.
http://www.walletexplorer.com/txid/11b10dbfd03116cf97f6b203b557cc4d2a599a6ef685aa1f9d524c1142d06cda TXid linking the wallets up
If one follows the larger amount of 500BTC being moved the amount gets smaller and ends here:
http://www.walletexplorer.com/txid/20e1b69042b1a442fcddf15f730e69c2905e3b541c512567abc1e21d7261f43fLets move to the next branch:
338.833591BTC was moved if you follow TXID
http://www.walletexplorer.com/txid/a64a45e1ec235d37fb8d91c0645ac01d0d0736a7664921a1b6b4ee6df60452ff Now here is where things gets interesting. Noteworthy, as the wallets in between the above and the txid below only have 2 transactions the whole way thru. Follow the larger of the amounts for a bit in the outputs and you get to:
http://www.walletexplorer.com/txid/5c897ac8318f17a01f1203a7b6ad77f7d451402b54403f3ab984cd765a6fea43 OH SHIT!! Someone has been buying drugs from
Silk Road 2. And
laundering money in the process, it got tedious following that particular thread past that but I will pick it up as its bookmarked. But I am sure there is more to be found.
I decided to start looking at this next:
http://www.walletexplorer.com/txid/5c897ac8318f17a01f1203a7b6ad77f7d451402b54403f3ab984cd765a6fea43 Now this is interesting! why is KNCminer getting paid all this money? The wallet balance went to 0 at this point so its
VERY odd that they drained their wallet to 0 at this point. See below where it goes next.
http://www.walletexplorer.com/address/17g3v264TJi4FAMsNKGG8C6kRpUSXNuLYm Let us follow along and see what we find? I followed the transaction from the AMT in the beginning of this post
2014-01-03 07:02:16 -792.30597856 0. 93679f3958…
At first glance it appears to be a KNCminer.com wallet. I thought so too BUT as you will see in the following wallet transactions it seems VERY odd that Josh is cleaning out his wallet and paying it to KNC. I dig quite a bit deeper on this.
The first transaction I just followed the amount to the wallet just mentioned. Now the amount is merged into:
http://www.walletexplorer.com/address/1MdttRwVDT1mtj6T5vujZmwYSZfg8hFGAn and then splits @
http://www.walletexplorer.com/txid/abee646c78791a67205ffd89b767a0fdf65187eb766c049ce15fdc866c9479cd I stopped here. It is possible there is more but I am not going too far down the chain yet.
NOW we have some serious BTC here:
From this transaction in January:
http://www.walletexplorer.com/txid/2917d9f1ae6633cda8ef44689c30fd78403652d8ec6797865695106ef77ff9ffNote that UP to this point AMT was getting a stead +10BTC every few hours in this wallet we now KNOW belongs to Joshua Zipkin / AMT The pattern is consistent with mining due to the very consistent exact amounts. In fact spot checking a number of those 10BTC amounts you can easily see that it was btcguild.com's wallet paying them.
Lets move on. The 2 next largest entries are of particular note:
2013-11-23 16:39:06 -990.45270657 removed 0.69852453 balance
http://www.walletexplorer.com/txid/237676859fb06e42d8a651533036869b4cd3b9ce89fc9c3b5e272f70be1c8bb9 Ok why is KNC miner getting all this money? Or is it actually KNC? THis is peculiar. Bears more investigating. But I stopped here because it led me to the same wallet as before where I mentioned KNC, next:http://www.walletexplorer.com/address/17g3v264TJi4FAMsNKGG8C6kRpUSXNuLYm OH wait...KNC is getting paid again with Josh clearing his wallet?...wtf is going on?....unless wait for it...KNC is in cahoots OR is actually AMT under another guise..has anyone actually met Sam Cole in person? Considering that Gleb Gamow (Bruno) has already revealed Tyler Lummis (who shows up in a mountain dew video with Josh on youtube) is actually Jim Brown...aliases are not such a foregone conclusion here. Joshua Zipkin has already admitted that he would start companies with aliases...he may have already done this.
WELL when I followed the the larger of these amounts in this transaction below:
http://www.walletexplorer.com/txid/949982d6cd3bdaeabb98e83ec11f7c0f6da1797d1e03be7a15fb313424c223b3I eventually landed @
http://www.walletexplorer.com/txid/df4fbd817ea25c19806001a002c5cb3ecd082d2a261a063aad64b88730768733BUT when I followed the 1000BTC (which was the lesser of the two)......MOTHERLODE!!!
http://www.walletexplorer.com/address/1DWosvn7iEv6TUfCUXsmLqNVBZi9usEkexWhich leads me down the rabbit hole here. Now mind you this was happening in November roughly when AMT was taking orders.
First post was in September.
https://bitcointalk.org/index.php?topic=304605.0First known published order was in October but could have been a shill as Josh was aware of details of my notifying the FBI (seeing as I sent the message to ALL published customers):
https://bitcointalk.org/index.php?topic=304605.msg3278091#msg3278091But I digress, back to the wallet trail, The trail leads to this:
http://www.walletexplorer.com/txid/f37b9c72e85f1059e34e23284a461272a8734e851db5f1ea98623fc938694aab Note the very consistent amounts paid out to the two wallets listed.
http://www.walletexplorer.com/wallet/0001a006f59da08b http://www.walletexplorer.com/wallet/016e72d52404934b Next Transaction:
http://www.walletexplorer.com/address/1LSNnyf4Rqy8x7wGv3c5X149Lx4x9aWaXw -880.4678BTC was moved 2013-10-22 18:27:28 -880.4678 SENT 2546.8584187 BALANCE
Considering links I was previously at are highlighted in purple I found it peculiar when following the money trail of this particular transaction led me back to:
http://www.walletexplorer.com/wallet/0085dbddfa85e4bc SO I decided to explore a bit more:
My trail followed to this wallet:
http://www.walletexplorer.com/wallet/060191d9fe355202 If you follow the larger of the transactions from the wallet above you will get to this point as well. We are getting close
Here is the bitfinex wallet account where the above leads being used for disbursing the money:
http://www.walletexplorer.com/wallet/Bitfinex.com obviously the BTC is being traded and moved around as well in this. This is pretty much where one part of the trail ends as this is a general wallet for bitfinex it appears.
Ultimately what one sees is a VERY easy trail of breadcrumbs to follow. In most cases the wallets were 1 time use deals that can be followed to the next transaction and so on till we get to the jackpot. Any good money laundering scheme requires that the launder channels his/her money through as many channels as possible to obscure the trail. It is obvious this was done here. And poorly too. The trail was as easy to follow as if Joshua Zipkin had lit it up with spotlights for me.
BUT I am not done yet:
If one follows the smaller amounts that stem from
http://www.walletexplorer.com/txid/d3c2230adab4edc52c8a8c79d9ce463b2523a6dbadc6dc752fb758d428121bca It leads to:
http://www.walletexplorer.com/txid/6368100f91031c693ffbb7e0ea743083b77fceb75eaf3e19f9c18bc7527f3e81 Most being traded and/or converted to money. The smaller amounts usually lead to this trend of behavior.
His BTC-E account wallet:
http://www.walletexplorer.com/wallet/BTC-e.comWhen one follows enough of the trails they usually wind up in one of the exchanges after MUCH following. In almost all cases it turns out into wallets with a one time use. Most with no more than 5 or 6 transactions in the same few hours.
Some mentions of other wallets he has. Considering around the time he was getting sued and the timeline of events where he was being asked for his financial info, the AMT wallet above suddenly got very empty to where it now sits a 0 BTC. Every satoshi drained.
After looking where those transactions went it was a quick stop to check where...here is a list.
http://www.walletexplorer.com/address/1BR4j8iNKmfSNDwJSSyLisM96C8pvuoGqWLooking at TXids, I also caught sight of this.
http://www.walletexplorer.com/txid/37c1674317a9e107d202dc95c7d8a37d507f462a6de5c60066666af6d6938f8cAnd
http://www.walletexplorer.com/txid/5bd3fb2df122ee91b56e79f6f21da0c7aa59409c5a96df6e09134651d7100c54 Correct me if I am wrong here but if the sender is the same person....that is ALOT of fucking btc he is moving out. I followed one of the 1000 trails and got to this:
http://www.walletexplorer.com/wallet/0e5a580e6eb99056
Considering this is likely a bitstamp wallet for him....this is the mother-lode we have been looking for. He has plenty of BTC stashed. Now this is all considering that the TXID info where the sender is the same person is correct. If not then this will need to be amended. Hopefully someone can answer the last bit there if the sender is the same person. If so then we found his master wallet. And all our money is hiding there. Even if he moves it or cashes out, we got him by the balls either way. Again this method can apply to ANYONE who has made a transaction with a given vendor via BTC.
"Joshua Zipkin Silk road"
"Silk Road"
"Joshua Zipkin drugs"
"Joshua ZIpkin gambling"