Cointime

Download App
iOS & Android

Trustformer's Analysis of OFAC-Sanctioned Russian Addresses in Money Laundering

Validated Project

1. Event Background

On November 3, the U.S. Treasury and its Office of Foreign Assets Control (OFAC) sanctioned Russian businesswoman Ekaterina Zhdanova for alleged assistance in money laundering and fund transfers for Russian elites. She was involved in massive cross-border transactions, including moving over $100 million to the United Arab Emirates for a Russian oligarch. Zhdanova is also implicated in laundering $2.3 million for a Ryuk ransomware group affiliate, which is believed to be from ransomware victims' payments. As a result, three Bitcoin addresses were sanctioned:

1Ljk8RNNabkZ9bfDYQBn98XfFozJhTjqcZ

3685sEusmTwZBiKJ4cgV73EAhpVD1nbgbe

39p8qWp1bkBNhi4vPpFTetKPtH7goqNDZf

The analysis with the Trustformer system focuses on the sanctioned addresses as examples to examine the pathways of fund transfers and clarify the ultimate destinations of the funds.

2. Event Analysis

2.1 Sanctioned Address: 1Ljk8RNNabkZ9bfDYQBn98XfFozJhTjqcZ

The Trustformer Risk Detector revealed that the address has a TCR score of 98, indicating severe risk and classifying it as a direct risk address. The risk type is identified as USA political blacklist. By clicking on the label, more information about associated individuals and nationalities linked to the address can be accessed.

A review of the address's historical transactions reveals the most recent one on February 6, 2022. Trustformer's Trackr product aids in analyzing the fund movements from this address.

Analyzing transactions from January to February 2022, the address 1Ljk8RNNabkZ9bfDYQBn98XfFozJhTjqcZ initiated 13 fund transfers within this period. The analysis revealed financial transactions among the three sanctioned addresses during this time, indicating their role as collective wallets for the sanctioned individuals. Notably, they transferred 29.1BTC to another sanctioned address, 3685sEusmTwZBiKJ4cgV73EAhpVD1nbgbe, and 1.1BTC to 39p8qWp1bkBNhi4vPpFTetKPtH7goqNDZf.

2.2 Sanctioned Address: 3685sEusmTwZBiKJ4cgV73EAhpVD1nbgbe

This address also showed a TCR score of 98, indicating severe risk and classifying it as a direct risk address. The risk type is identified as USA political blacklist. The most recent transaction for this address occurred on April 3, 2022. Trustformer's Trackr product assists in analyzing the fund movements from this address between February and April 2022.

The address 3685sEusmTwZBiKJ4cgV73EAhpVD1nbgbe initiated four fund transfers between February and April 2022. It moved 33BTC to the same address, bc1qwxqxd25yk2dtw2ml04vxj9atq3huv4rdytf6vt, which is identified as a risk address related to a coin mixer.

After thorough tracking, it was discovered that the address transferred 72BTC to the Huobi exchange.

2.3 Sanctioned Address: 39p8qWp1bkBNhi4vPpFTetKPtH7goqNDZf

This address had a TCR score of 26, indicating severe risk and classifying it as a direct risk address. The risk type is identified as USA political blacklist. The most recent transaction for this address occurred on February 25, 2022. Trustformer's Trackr product assists in analyzing the fund movements from this address between January and February 2022. The latest transaction was on February 25, 2022.

Analysis for January to February 2022 revealed six fund transfers, including a large transaction of 60BTC to 1AynRWwpCcVpm6Ye8xJ8mXRAJ3Qpx3yQuw, and 133BTC flows into Binance.

3. Event Summary

Investigations with Trustformer KYT system's Trackr and Risk Detector conclude:

-Address 1Ljk8RNNabkZ9bfDYQBn98XfFozJhTjqcZ transferred 29.1BTC to 3685sEusmTwZBiKJ4cgV73EAhpVD1nbgbe and 1.1BTC to 39p8qWp1bkBNhi4vPpFTetKPtH7goqNDZf in the most active recent months.

-Address 3685sEusmTwZBiKJ4cgV73EAhpVD1nbgbe moved 72BTC into Huobi and engaged with coin mixer-related intermediary addresses.

-Address 39p8qWp1bkBNhi4vPpFTetKPtH7goqNDZf sent 60BTC to 1AynRWwpCcVpm6Ye8xJ8mXRAJ3Qpx3yQuw, with 133BTC entering Binance.

Recommendations:

-Bitcoin transactions inherently feature mixing characteristics, making it challenging to investigate and gather evidence on sanctioned addresses that often disperse funds in small amounts. Close monitoring of these addresses' transactions is recommended, especially focusing on transfers between other sanctioned addresses.

-Records show funds moving to centralized exchanges like Huobi and Binance during these transfers. Enhanced monitoring of involved exchanges is advised to detect suspicious activities promptly.

🎁 Start your complimentary 31-days trial in KYT experience to elevate your on-chain transaction security.

●📚 Instructions for the use of related products in the event analysis:

●Risk Detector User Guide: https://help.trustformer.ai/

●Trackr User Guide: https://help.trustformer.ai/trackr-user-guide

👉 About Trustformer

Trustformer is a leading large-scale model for applying compliance technology, combining blockchain data for real-time risk monitoring and early warning, and realizing real-time identification and early warning of risks such as risk entities, wallets, and transactions. Combined with the FATF Travel Rule, according to global multinational financial supervision and crypto asset supervision policies, combined with localized finance and crypto financial licenses and policies of jurisdictions, real-time risk identification, transaction analysis, and early warning are carried out. Through graphical node reasoning, the security analysis of transaction addresses and capital chains is realized, and risk compliance investigation and capital security audit services are provided.

Find us

●Website: www.trustformer.ai

●Telegram: t.me/Trustformerai

●Twitter: https://twitter.com/trustformerai

●Email: kyt(@)trustformerai.com

Comments

All Comments

Recommended for you

  • U.S. consumer confidence improves again in November, reaching a two-year high

    Dana M. Peterson, Chief Economist of the World Large Enterprises Federation, said, "US consumer confidence continued to improve in November, reaching the highest level in the past two years. The growth in November was mainly due to consumers' more positive assessment of the current situation, especially in the labor market. Compared with October, consumers' optimism about future employment opportunities has also greatly increased, reaching the highest level in nearly three years. At the same time, consumers' expectations for future business conditions have not changed, while their optimism about future income has slightly declined." Earlier, the US Conference Board Consumer Confidence Index for November recorded 111.7, a new high since July 2023.

  • Starknet: Phase 1 of STRK staking is now live on the mainnet

    Starknet announced that the first stage of STRK staking has officially launched on the mainnet.

  • CZ: Not trying to end the meme craze, just encouraging more builders

    CZ posted on X platform today, saying: "I am not against Meme coins, but Meme coins have become 'a little' strange now. Let's use blockchain technology to build practical applications." Some community users said that even Musk is a supporter of Meme coins, and it is very difficult to end this frenzy. CZ responded that "there is no attempt to end anything, everyone has the right to choose to invest or hold what they want. Just encourage more builders."

  • Talus Network Completes $6 Million Strategic Round of Financing with a Valuation of $150 Million

    decentralized AI protocol Talus Network raised $6 million in a strategic financing round led by Polychain Capital, valuing the company at $150 million. This funding will help further develop the Talus ecosystem, including the Protochain, Nexus framework, and "AI dating experience" application.

  • AXIOS: Trump is considering appointing a secretary of state for artificial intelligence

    according to AXIOS, Trump is considering appointing an AI minister to coordinate federal policies and government use of emerging technologies.

  • Coinbase International has launched COW perpetual contracts

     Coinbase International has launched COW perpetual contracts. COW-PERP market limit, market, stop loss, and stop loss limit orders are now all available.

  • Schuman Financial Completes $7.36 Million Seed Round, Led by RockawayX

    Schuman Financial has completed a $7.36 million seed round of financing, led by RockawayX, with participation from Lightspeed Faction, Kraken Ventures, Nexo Ventures, Gnosis VC, Delta Blockchain Fund and Bankless Ventures. In addition, Schuman Financial has launched a euro stablecoin, EURØP, which complies with the MiCA standard.

  • QCP: BTC's path to $100,000 has stalled, and ETH implied volatility has turned to put options

    QCP Capital has published an analysis indicating that the recent drop in the price of Bitcoin has resulted in long liquidations exceeding $430 million. This drop coincides with the end of five consecutive days of net inflows for spot ETFs, which recorded a outflow of $438 million on Monday, while MicroStrategy fell by 4.4%. With the US holiday approaching and no immediate catalyst to push prices higher, BTC's path towards $100,000 has stalled. In addition, the implied volatility of ETH has turned to bearish options rather than bullish options, and market concerns about downside risks may intensify, especially with the release of the FOMC meeting minutes and PCE data. However, in the long run, this market decline is not an excessive correction. Bitcoin has only retreated to last week's level. Since Trump's election, the market has become extremely overbought and leveraged, so a pause is inevitable.

  • Binance will delist GFT, IRIS, KEY, OAX, and REN

     Binance will delist the following trading pairs on December 10, 2024: GFT/USDT, IRIS/BTC, IRIS/USDT, KEY/USDT, OAX/BTC, OAX/USDT, REN/BTC, and REN/USDT. Additionally, Binance Futures will close all positions and automatically settle the KEYUSDT and RENUSDT USDⓈ-M perpetual contracts on December 3, 2024 at 09:00 (UTC). After the settlement is completed, the contracts will be delisted.

  • Bull Market Frenzy: M3 Ecosystem Tokens Deliver Massive Returns

    Rocket aims to unearth high-quality projects and create more wealth-building opportunities.