← Work

Kraken User — $18.2M Social Engineering Theft

InvestigationEthereumBitcoinTHORChainChainflipAMLFund TracingCross-ChainHitBTC
View on X

End-to-end on-chain attribution of an $18.2M social engineering theft from a Kraken user. Traced ETH fund flows across multiple staging wallets, reconstructed a THORChain ETH→BTC cross-chain swap, documented a failed Chainflip exit attempt, and performed dual-chain cash-out attribution to HitBTC — including an assessment of HitBTC's regulatory posture across two jurisdictions (BVI FSC and SVG FSA). Published publicly with full transaction evidence.