Multi-Hop $BTC Funnel Tracer
Interactive blockchain trace simulating how stolen funds were split across peel chains, cross-chain bridges, and un-hosted mixer wallets. Click any node to inspect on-chain telemetry.
Exchange Alert Latency:
14 Hours
Mixer Dispersion Hops:
4 Hops
Selected Entity Telemetry
Node: Victim Vault
Entity Name
Victim Primary Storage Vault
Simulated Address
bc1q9x3f...78k29a
BTC Transferred
3,500 BTC ($240,000,000)
OFAC / Sanction Risk Score
Critical (Source Node)
Tactical Note
Initial unauthorized withdrawal triggered via remote social-engineering attack vector.
Support Impersonation Playbook
1
Spoofed Security Alert (Google)
Fraudulent SMS/Email claiming unauthorized login attempt to victim's primary Gmail.
2
Inbound Support Call Hand-Off
Scammer poses as official Google/Gemini VIP tier support offering urgent wallet remediation.
3
2FA Interception / Session Takeover
Victim tricked into releasing recovery token & approving multisig whitelist modification.
4
Rapid Off-Ramping & Mixing
Immediate dispatch of 3,500 BTC through peels, instant-swap bridges, and luxury asset laundering.
Forensic Insight: Scammers in the $240M heist combined voice phishing (vishing) with coordinated spoofed infrastructure to deceive an institutional-grade holder into transferring full control.
Support Domain Risk Scanner
Test URLs commonly used in Gemini/Google VIP impersonation scams:
⚠️ HIGH RISK FRAUDULENT DOMAIN
• Matches known typosquat pattern targeting Gemini Exchange.
• Brand impersonation score: 98/100.
• Registered via privacy-proxy 4 days prior to attack wave.
• Brand impersonation score: 98/100.
• Registered via privacy-proxy 4 days prior to attack wave.
Asset Seizure & Recovery Model
Overall Seizure Probability
18.4%
KYC Blacklist Diffusion:
32% (4 centralized exchanges contacted)
Cross-Border Law Enforcement Lag:
High friction (US & Singapore MLAT)
Net Recoverable Estimate:
$44,160,000 USD (644 BTC)