As part of the transaction, which took place around 08:38 UTC, a wallet that received 3,500 bitcoin forwarded 300 BTC to another destination. That was split further and landed in several wallets not attributed to any known custodial service. The distribution pattern is open to interpretation: It's possible the wallet owner simply sent the money to other wallets of their own, sent it to other people or cashed out through an unofficial over-the-counter broker. The remaining 6,500 stayed put.
Mt. Gox, the first bitcoin exchange, was robbed of 744,408 BTC and shut permanently in 2014. Alexander Vinnik, alleged to be the operator of BTC-e – which he denies – was arrested in 2017 at a resort near Thessaloniki, Greece, at the request of the U.S. Department of Justice on money laundering and other allegations.
The wallet involved in Wednesday's transaction was attributed to BTC-e by blockchain analytics system Crystal Blockchain. The transfer was noticed by Russian crypto entrepreneur Sergey Mendeleev, who published the observation in his Telegram channel. Blockchain data provides a limited amount of information, which is open to interpretation.
Vinnik, a Russian national, faced competing extradition claims from Russia, France and the U.S. He was extradited to France from Greece in 2020 and sentenced to five years in prison for money laundering. In August of that year he was extradited to the U.S. to face allegations of “computer intrusions and hacking incidents, ransomware scams, identity theft schemes, corrupt public officials and narcotics distribution rings,” according to a 2020 indictment by the California court. He is now at the Santa Rita Jail in Dublin, California, according to the court case docket.
Soon after BTC-e closed and its servers seized by the FBI in 2017, a clone started under the name WEX. After a year of operation, WEX froze all withdrawals and shut down. CEO Dmitri Vasilev said he sold the exchange to Dmitri Khavchenko.
Before and after shutting down, WEX wallets were drained of millions of dollars worth of crypto, CoinDesk reported at the time. Users filed police reports and several investigations were reportedly launched in Russia and Kazakhstan. Over the years, Vasilev has been arrested in Italy, Poland and Croatia at the request of the Russian police, but every time released soon after.
The most recent picture in Vasilev's Instagram profile was posted on May 3, geotagged as taken in Amsterdam. On the photo, Vasilev is standing in front of a store named Scamm.
In his public talks, as well as in group chats with WEX users, Vasilev said control of users' crypto had always been with the anonymous WEX admin. In 2019, another Russian national, Alexei Bilyuchenko, confessed to being the admin. He said he was forced to transfer all the money to two unidentified officers of Russia's Federal Security Service (FSB), according to the criminal case materials obtained by BBC.
CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by Block.one; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk offers all employees above a certain salary threshold, including journalists, stock options in the Bullish group as part of their compensation.