VAL

doing onchain investigations better than your local law firm

[VAL @osint_based]

1/ Dritan Kapllani connection to @yelotree

In a recent @zachxbt post, I noticed an interesting detail - KOL @yelotree is also being charged for allegedly helping launder money through his Miami car rental business.

On March 15, a few days after the theft described in the case, the suspects allegedly arranged with @yelotree to purchase a BMW M4. Since the payment was reportedly made in crypto, I decided to look into what could be found related to it

[VAL @osint_based]

@opieaccount4 Still holding more than 3M in ETH

[VAL @osint_based]

Exploiter who stole over $6M went dormant for more than 3 years

Theft was reported back in December 2022. Attacker swapped everything to $ETH at the time and waited

Only now he started depositing into Tornado Cash

So far 1,400 $ETH sent to the mixer

The rest is still sitting on the wallet: 0xD8De42401A1E63E52b92523e222a15913aa05031

[VAL @osint_based]

@frappuccino_xbt If so, he should have hidden this wallet properly.

But usually if there was as much info on him as there was three years ago - almost 0 chance of identifying

He probably prepared for this "operation"

[VAL @osint_based]

@WTFrog_Linea Real stablecoin

[VAL @osint_based]

@boymilketh True

[VAL @osint_based]

@RunnerXBT 1. Marseille. Make sure to visit some crypto meet ups
2. Naples. Best Italian vibes
3. Birmingham. Just good vibes.

[VAL @osint_based]

@b_block_oficial Asian pig butchering scams..

[VAL @osint_based]

@DegenerateNews @HyperliquidX more coming

[VAL @osint_based]

@loffyhl well deserved

[VAL @osint_based]

@nym started using incognito mode in Google Chrome

[VAL @osint_based]

@boldleonidas @saylor Buy $HYPE in May

[VAL @osint_based]

@RunnerXBT Dont worry, Satoshi only has 1M BTC left to sell

[VAL @osint_based]

@cryptolaanie Share your wallet address where the money was withdrawn from - let’s see what the attackers are doing with it

[VAL @osint_based]

@MathiasEli38090 Wallet compromised probably

[VAL @osint_based]

‼️$316,129 $USDC drained from a user 1 hour ago

Attacker swapped all the funds to $ETH to avoid a possible Circle freeze

He also sent the network fees from another wallet that's reportedly involved in phishing and other drains, sending tons of poisoning transactions to users

0x7419522dFFe72E190A138239a8c90c7Dd227B214

[VAL @osint_based]

@icedcoffeluvr AI agents are working for them

[VAL @osint_based]

@dethective It couldn't have been any other way

[VAL @osint_based]

@Polymarket AI bubble

[VAL @osint_based]

‼️Looks like some contract got exploited on @blast

Hundreds of transactions from different wallets are flowing into this address: 0xA9eFD949e91E2eE51F81bdf8a61C7BF9D7fb1bE7

Around 50 $ETH already bridged out

Probably the @nftperp contract, revoke your approvals just in case

[VAL @osint_based]

@OrangeFren @mlmabc No, of course not

Many people use XMR. It doesn’t automatically mean the funds are stolen just because XMR is involved