Specter

Onchain Investigator | Peace ✌️
Specteranalyst.sol (.eth)

[Specter @SpecterAnalyst]

@DegenerateNews @Pumpfun Deal done lol

[Specter @SpecterAnalyst]

@zachxbt @jassi6980 @CoinDCX @smtgpt What do you mean 😂😂

[Specter @SpecterAnalyst]

@CoinDCX Y’all are clowns.

The interesting thing about a liar is that they’ll keep inventing new lies to cover up previous ones. Eventually, the lies pile up, the story stops making sense, and the truth becomes too obvious to hide.

[Specter @SpecterAnalyst]

For those who don't know how to identify stolen funds, it's often pretty easy.

One way to identify a potentially compromised wallet is to look for a sudden change in its established transaction patterns.

For instance, TQKJQ, a CoinDCX deposit address, had consistently been sending funds to the entity's hot wallet. Then, suddenly, wallets associated with the entity, including TQKJQ, were swept into a single wallet, which began distributing funds, swapping assets, using OTC services, and more.

That's a potential sign of a compromised wallet.

So, the point is: CoinDCX and its co-founder are lying.

[Specter @SpecterAnalyst]

For those who don't know how to identify stolen funds, it's often pretty easy.

One way to identify a potentially compromised wallet is to look for a sudden change in its established transaction patterns.

For instance, TQKJQ, a CoinDCX deposit address, had consistently been sending funds to the entity's hot wallet. Then, suddenly, wallets associated with the entity, including TQKJQ, were swept into a single wallet, which began distributing funds, swapping assets, using OTC services, and more.

That's a potential sign of a compromised wallet.

So, the point is: CoinDCX and its co-founder are lying.

[ZachXBT @zachxbt]

@smtgpt @CoinDCX Why is a CoinDCX team member telling people to engage with this post and thank you for the “transparency”?

Your team waited 17 hours to disclose (not until after it was alerted publicly)

[Specter @SpecterAnalyst]

@morsyxbt You and Fabiano forgot to give credit to the original source ( me).

Anyway, Kimchi didn’t take long to prove me right. 👍

[Specter @SpecterAnalyst]

It's crazy that CT has such a short memory. Scammers, grifters, and rug pullers are quickly forgotten.

There seems to have been a coordinated push around @kimchi1x, with CT claiming that he "made eight figures from the TRUMP token." lol

I decided to look into @kimchi1x . Based on my on-chain analysis, he and his group, including @orangie , have exposure to token launches, bundling, and rug pulls.

Since this thread is about Kimchi, I'll focus on him.

Wallet (publicly shared by Kimchi in a reply on X back in April 2024):

2yu3iNjH6zLa8Uqf1s4yKJ1kB9MHYPhMkDbpu8tLmBMC

Example 1 – $STAR
On May 30, 2024, at 13:41 UTC, $STAR was deployed. Within the same minute, the wallet linked to Kimchi bought 2.96 SOL ($407) and later sold the position for $45.6K.

Tx:
zWstdZjTHRGzPSEX5NPnfv7QS2412iroNx1HpwHNRBwu6UeyNA57ZMRcZRFfmDSi4V3uF7yHshA1YBKi3TncnF1

Example 2 – DADDY ANSEM
On June 11, 2024, at 23:38 UTC, DADDY ANSEM (not launched by Ansem) was deployed. Two minutes later, the wallet linked to Kimchi bought 4.94 SOL ($730) and later sold it for $14.6K.

Tx:
4DqJrynmKbaLLjPKLzZYfZwGPxSKtBCirH2Du2vDdd5Z7sfaGfA89W15x4VBzM5wzdm8BiMVA5xk1M8M9UGUut9c

Example 3 – MUVA
On June 26, 2024, at 22:45 UTC, MUVA was deployed. One minute later, the wallet linked to Kimchi bought 2.9 SOL ($407) and later sold the position for $53K.

Tx:
55ZSNgEMDQRKvAvhcSYicrUnPoxuTV1iUR5FdSVoFK7GGXJ4S2rAtEoZ62wh7S4F39DMAHN5guoxfAmpSQwWfwS7

An exchange deposit address also clusters five other wallets that bundled the same MUVA launch.

These are just a few examples. I decided not to dig through the wallet's entire bundling history.

they have a private group known as @pioneerfnf

While there is no verifiable evidence that @kimchi1x made eight figures from the TRUMP token, it's crazy to see someone with this kind of on-chain history being pushed as a role model.

It's crazy how CT celebrate grifters and rug pullers even after knowing who they are.

Stay smart.

[Specter @SpecterAnalyst]

@WazzCrypto @kimchi1x Back here to say we were right 👍

[Specter @SpecterAnalyst]

It's crazy that CT has such a short memory. Scammers, grifters, and rug pullers are quickly forgotten.

There seems to have been a coordinated push around @kimchi1x, with CT claiming that he "made eight figures from the TRUMP token." lol

I decided to look into @kimchi1x . Based on my on-chain analysis, he and his group, including @orangie , have exposure to token launches, bundling, and rug pulls.

Since this thread is about Kimchi, I'll focus on him.

Wallet (publicly shared by Kimchi in a reply on X back in April 2024):

2yu3iNjH6zLa8Uqf1s4yKJ1kB9MHYPhMkDbpu8tLmBMC

Example 1 – $STAR
On May 30, 2024, at 13:41 UTC, $STAR was deployed. Within the same minute, the wallet linked to Kimchi bought 2.96 SOL ($407) and later sold the position for $45.6K.

Tx:
zWstdZjTHRGzPSEX5NPnfv7QS2412iroNx1HpwHNRBwu6UeyNA57ZMRcZRFfmDSi4V3uF7yHshA1YBKi3TncnF1

Example 2 – DADDY ANSEM
On June 11, 2024, at 23:38 UTC, DADDY ANSEM (not launched by Ansem) was deployed. Two minutes later, the wallet linked to Kimchi bought 4.94 SOL ($730) and later sold it for $14.6K.

Tx:
4DqJrynmKbaLLjPKLzZYfZwGPxSKtBCirH2Du2vDdd5Z7sfaGfA89W15x4VBzM5wzdm8BiMVA5xk1M8M9UGUut9c

Example 3 – MUVA
On June 26, 2024, at 22:45 UTC, MUVA was deployed. One minute later, the wallet linked to Kimchi bought 2.9 SOL ($407) and later sold the position for $53K.

Tx:
55ZSNgEMDQRKvAvhcSYicrUnPoxuTV1iUR5FdSVoFK7GGXJ4S2rAtEoZ62wh7S4F39DMAHN5guoxfAmpSQwWfwS7

An exchange deposit address also clusters five other wallets that bundled the same MUVA launch.

These are just a few examples. I decided not to dig through the wallet's entire bundling history.

they have a private group known as @pioneerfnf

While there is no verifiable evidence that @kimchi1x made eight figures from the TRUMP token, it's crazy to see someone with this kind of on-chain history being pushed as a role model.

It's crazy how CT celebrate grifters and rug pullers even after knowing who they are.

Stay smart.

[Specter @SpecterAnalyst]

@ritzardxiii @noon_capital @SuiCommunity @base Check your DM Richard

[Specter @SpecterAnalyst]

@ILITY_xyz Kindly send me a DM.. ty

[Specter @SpecterAnalyst]

Since ZachXBT posted about the Bitget attacker shielding stolen funds via Zcash (ZEC), we’ve seen other stolen funds flow into ZEC, including funds from the Cryptobills Ledger incident and the $12M Triple-A hack.

Threat actors are actively using ZEC to move stolen funds.

Stay smart.

[Specter @SpecterAnalyst]

@Deestar All the kols on the list are grifters and scammer e.g notEzzy

[Specter @SpecterAnalyst]

@nft_dreww @discord_support Crazy how far bad actors can go
@discord_support

[Specter @SpecterAnalyst]

@YFarmX Ikr

[Specter @SpecterAnalyst]

@emmettgallic 99%+ of the funds were linked to him.. he deposited those funds to Tc in 2025 and were withdrawn in Jan 2026

[Specter @SpecterAnalyst]

A wallet linked to the ProveX sacrifice (@RichardHeartWin) has received a total of 128,808 ETH (~$413M) from Tornado Cash in last 48 hours, with withdrawals to this wallet still ongoing.

In October 2025, wallets linked to @RichardHeartWin deposited over $600M into Tornado Cash.

https://t.co/wYRs8x6pD1

In January 2022, @RichardHeartWin announced the PulseX Sacrifice, where participants sent tokens to a designated sacrifice address in exchange for future allocations of $PLS and $PLSX once the exchange went live.

On January 26, 2022, a wallet linked to Richard Heart received $26M in USDT and 220 ETH directly from the PulseChain sacrifice wallet.

The USDT was subsequently swapped to ETH and deposited into Tornado Cash.

0x1B7BAa734C00298b9429b518D621753Bb0f6efF2

In March 2022, an additional $190M was transferred from the sacrifice wallet to the same address and remained untouched until January 2024.

Between 2024 and October 2025, the majority of these funds were deposited into Tornado Cash, with only approximately $20M bridged to the PulseChain network.

From January 5, 2026, to the present, the ProveX sacrifice wallet has received 128,808 ETH (~$413M) from Tornado Cash, using over 800 intermediary wallets.

There is high confidence that a portion of the funds currently being withdrawn from Tornado Cash are the deposits made few month ago

The same structural approach used during the PulseX sacrifice appears to be reused in the ProveX sacrifice

While I don't give a shit about PulseChain or its users, it is worth noting that the same approach used in the PulseX sacrifice is being applied to the ProveX sacrifice and may ultimately lead to a similar outcome.

Stay smart

[Specter @SpecterAnalyst]

@Naeven_ Bullshit for $135k.....

Just a repeating pattern

Post CA/NFT
Delete it after a few hours
Lie about being hacked (not always)
Let the noise go down and redo the process again

[Specter @SpecterAnalyst]

@WazzCrypto @bitget Ikr.. few months break

[Specter @SpecterAnalyst]

@PeckShieldAlert @arkham @emmettgallic you should check it out

[Specter @SpecterAnalyst]

@PeckShieldAlert y'all are tracing through thorchain wallet

@arkham kindly fix this..you labelled thorchain addresses as theft affects causing the misinformation of binance