[GUEST ACCESS MODE: Data is scrambled or limited to provide examples. Make requests using your API key to unlock full data. Check https://lunarcrush.ai/auth for authentication information.] #  @tayvano_ Tay 💖 Tay 💖 posts on X about money, tokenlon, coinbase, $4m the most. They currently have XXXXXX followers and 1252 posts still getting attention that total XXXXXX engagements in the last XX hours. ### Engagements: XXXXXX [#](/creator/twitter::19748227/interactions)  - X Week XXXXXXX +465% - X Month XXXXXXX +195% - X Months XXXXXXXXX -XX% - X Year XXXXXXXXX +121% ### Mentions: XX [#](/creator/twitter::19748227/posts_active)  - X Week XX +136% - X Month XX +30% - X Months XXX +12% - X Year XXX +21% ### Followers: XXXXXX [#](/creator/twitter::19748227/followers)  - X Week XXXXXX +0.11% - X Month XXXXXX +0.07% - X Months XXXXXX +2% - X Year XXXXXX +21% ### CreatorRank: XXXXXXX [#](/creator/twitter::19748227/influencer_rank)  ### Social Influence [#](/creator/twitter::19748227/influence) --- **Social category influence** [exchanges](/list/exchanges) #1767 [cryptocurrencies](/list/cryptocurrencies) [technology brands](/list/technology-brands) [finance](/list/finance) [stocks](/list/stocks) [countries](/list/countries) **Social topic influence** [money](/topic/money), [tokenlon](/topic/tokenlon), [coinbase](/topic/coinbase) #540, [$4m](/topic/$4m), [$250k](/topic/$250k) #13, [ethereum](/topic/ethereum) #2779, [0x03f34be1bf910116595db1b11e9d1b2ca5d59659](/topic/0x03f34be1bf910116595db1b11e9d1b2ca5d59659), [whatsapp](/topic/whatsapp) #1401, [onchain](/topic/onchain), [billions](/topic/billions) **Top assets mentioned** [Tokenlon (LON)](/topic/tokenlon) [Coinbase Global, Inc. (COIN)](/topic/coinbase) [Ethereum (ETH)](/topic/ethereum) [Hundred Million (100M)](/topic/$100m) [Chainge (XCHNG)](/topic/chainge) [Bitcoin (BTC)](/topic/bitcoin) ### Top Social Posts [#](/creator/twitter::19748227/posts) --- Top posts by engagements in the last XX hours "@jconorgrogan Absolutely no way this is the trace I refuse to believe 😭😭😭😭"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1947423167729045857) 2025-07-21 22:27:19 UTC 88K followers, XXX engagements "They don't use Tornado Cash because it's nothing compared to their existing laundry networks. These networks handled the $X billion+ of Bybit stolen funds essentially overnight without flinching. They've handled billions from pig butchering scams over the past few years. Onchain you have Huione various P2P/OTC networks and endless "motorcades" of Chinese brokers. Offchain it's entrenched global organized crime. It's casinos across SE Asia fentanyl and precursors out of China drug and drug money in South America real estate in Canada banks in the US and on and on and on"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1946062272989921295) 2025-07-18 04:19:36 UTC 88K followers, 3001 engagements "Sha Zhu Pan scams are the worst. Her like thousands of others got fucked. The financial + psychology fuckery totally destroys people families relationships jobs. Losing the $$ is often the beginning"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1946062230728196243) 2025-07-18 04:19:26 UTC 88K followers, 2789 engagements "Like I said.simple questions. Insane journey answer. I'm choosing to believe she wanted to testify and got closure from it. I'm also choosing to believe the State will step up their game on that $100m+ seizure. Bc they fucking knew her funds didn't go to Tornado Cash"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1946062278518009934) 2025-07-18 04:19:37 UTC 88K followers, 15.8K engagements "😡 The "Coinbase" account (green address) that her funds "went to" is actually.yeah that's some random motherfucker who swapped for BTC around the same time the scammer swapped BTC for ETH. I'm going long on this one bc that trace is fully inexcusable. On the attached image I've included all the messy bits in the middle. We don't normally graph these. See how the amounts get super random and other addresses show up outta nowhere That is the service.doing it's thing. Each time you deposit the service: 1) sweeps your deposited assets to their hot wallet 2) sends you a different asset elsewhere"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1946062265297650081) 2025-07-18 04:19:34 UTC 88K followers, 2648 engagements "@jconorgrogan But thats $4m where the victim only had $148k from cdc all of which was immediately sent out"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1947425329024536998) 2025-07-21 22:35:54 UTC 88K followers, XXX engagements "This upsets me. Crypto victims have it SO MUCH WORSE bc the utter lack of recourse available. Your money's gone can't do shit everyone says its your fault. Then some asshat sells you a service they can't fulfill and a prosecutor puts you on the stand in an unrelated case"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1946062267885506835) 2025-07-18 04:19:35 UTC 88K followers, 3211 engagements "Due to the aforementioned crackhead explosion tracing I already knew that her funds did NOT go to Tornado. I have no clue what they were tracing. There's no Tornado Cash. Her funds also did NOT go to Coinbase. However I DO know why they think it did. It's painful. 😩"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1946062252303642654) 2025-07-18 04:19:31 UTC 88K followers, 2669 engagements "Chainge Finance (April XX 2024) Mildly interesting: the Radiant hacker used an unlabeled bridge a lot and it took me a while to figure out it was this shit Chainge. I had never seen anyone use it before. lol. 🫠"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1905762606335553567) 2025-03-28 23:23:07 UTC 88K followers, 3245 engagements "As it is here. Her money was gone by by Nov 2021. But to Apr 2022: She hires a "crypto recovery service" called "Payback" I don't know these fuckers but they suck. They should've never taken her case. There was no chance of recovery in April. They charged her money 😡"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1946062232766513531) 2025-07-18 04:19:27 UTC 88K followers, 2840 engagements "Apparently it was these bumbling fucking idiots who "traced" her funds. They never reported or tagged the addresses she sent $250k to as stolen/illicit funds. They didn't freeze any funds let alone recover them. But they DID tell her to email Tornado Cash. ()"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1946062236067524787) 2025-07-18 04:19:27 UTC 88K followers, 4236 engagements "The first "deposits" she made to "NTU Capital" were for $6k and $24k. She withdrew directly from her CEX to "NTU" The literal withdrawal txns from her CEX is the not-so-literal "deposit" txns to NTU Capital. (NTU Capital is not real. It's just the scammer's address.)"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1946062254287606178) 2025-07-18 04:19:32 UTC 88K followers, 2267 engagements "The victim would've seen these deposits on the scam site. The balance then grows rapidly (because "mining" "trading" "pledging" "staking" "earning interest" etc) You can withdraw small sums here. For trust. This is the "fattening up" stage. Examples (not of NTU):"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1946062256321777995) 2025-07-18 04:19:32 UTC 88K followers, 2365 engagements "@LaurentMT @Polymarket Txn hashes Ive been tracing thru tokenlon like a mad person and still cant find the bad trace even if they did indeed trace through a swap"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1947421383732121878) 2025-07-21 22:20:13 UTC 88K followers, XXX engagements "(break for the case dump for the nerds.) 2:23-cv-01988-JJT U.S. District of Arizona September XX 2023 United States of America v. 5012294.90 in TetherUS (USDT) 75589553.41 in Gala (GALA) XXXXXX in BNB (BNB) 1264.16 in Bitcoin (BTC) 1495.72 in Litentry (LIT) 48969 in Fantom (FTM) XXXXX in Ethereum (ETH) XXXXXX in BUSD (BUSD) Binance Depos that I already identified (there are more) Binance 1: 0x6d62811cabe9357e7da7e53e9cbcad3a77958174 Binance 3: 0x56a5df2b1ac53eb603721740e75d71b02ebcf634 PDFs we found so far: (Pls dm me if you grab more pdfs 🙏)"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1946062244175135164) 2025-07-18 04:19:29 UTC 88K followers, 2693 engagements "a week into the roman storm trial and the state is dangerously close to converting me back to team no one should be allowed to freeze any money ever lmao"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1947788213604733138) 2025-07-22 22:37:52 UTC 88K followers, 7106 engagements "@LaurentMT @Polymarket Like you cant seriously tell me someone traced an AMM swap where X Ethereum-based tokens are swapped inside a single txn Where the assets begin and end at the same address In the same txn"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1947422230885101570) 2025-07-21 22:23:35 UTC 88K followers, XXX engagements "@mload_ @jconorgrogan No you cant trace thru tokenlon. The funds are swapped inside a single txn. This is akin to arguing that I am DPRK bc both of us used Uniswap once"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1947424799674011650) 2025-07-21 22:33:48 UTC 88K followers, XX engagements "In some ways its okay bc this shitty tracing doesn't actually matter bc her funds were already long gone by April. It's not like a capable person could've done something. She was in fact fucked the second she deposited. It fucking sucks. But it is. Her scammers are out of KK Parka massive scam compound backed by China and Triads and local government (or future local government) (or past local government) They thrive in the lawless ever-shifting border regions. KK Park is between Myanmar and Thailand. (There are others elsewhere.)"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1946062269437415913) 2025-07-18 04:19:35 UTC 88K followers, 4500 engagements "Now instaswappers/services are one of the most common things you encounter while tracing. Widely used by all sorts of folks. Integrated into wallets. Cross-chain. Someone who sells crypto tracing / recovery services SHOULD know to stop the trace at the depo address.right 🤨"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1946062263435264389) 2025-07-18 04:19:34 UTC 88K followers, 2252 engagements "@mload_ @jconorgrogan The Payback report explicitly says the "exit point" address is 0x03f34be1bf910116595db1b11e9d1b2ca5d59659 which is Tokenlon so I think they probably traced thru Tokenlon I just dont know how"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1947716534132216189) 2025-07-22 17:53:03 UTC 88K followers, XX engagements "The "dude" on WhatsApp is also victim. These compounds are massive operations run by criminals who literally traffic people. They enslave people and force them to scam people. It's horrible. It won't stop bc the money brought by the compounds and associated casinos and development is insane. SEZs. Belt and Road initiative. It impacts the GDP and employment for these emerging econs"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1946062271496778199) 2025-07-18 04:19:36 UTC 88K followers, 2779 engagements "I'm not talking out of my ass here. My team and I have talked to thousands of these victims. We've tracked nearly a billion dollars stolen on Ethereum. We have a dashboard for all known victims of the "Approval" variant of this scam btwn 2021-2023"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1946062227385307199) 2025-07-18 04:19:25 UTC 88K followers, 3775 engagements "This first witness in Roman's trial immediately caught my attention bc the victim was a classic Pig Butchering case. The only issue is.uh.those scammers don't use Tornado Cash And they never have So like wtf"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1946062225829175326) 2025-07-18 04:19:25 UTC 88K followers, 145.3K engagements "@jconorgrogan @L0laL33tz @W_J_Jones @payback_ltd I want to double check what exactly domains were seized and from whom and try to check against who the victim hired. There are occasionally impersonators with the scam recovery services. This really doesnt feel like an impersonation situation to me but we should be sure"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1947441101817934124) 2025-07-21 23:38:35 UTC 88K followers, XXX engagements "Oh good apparently now the Coinbase breach happened on Dec XX 2024. LOL So since Coinbase won't be straight with you I will. Threat actors had ongoing access via multiple insiders over a prolonged period of time"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1925228440267247846) 2025-05-21 16:33:23 UTC 88K followers, 222.2K engagements "Sorry I still don't understand how anyone reasonably gets from point a to point b even via Tokenlon X. These are insanely active DEX contracts The Payback report names 0x03f34be1bf910116595db1b11e9d1b2ca5d59659 which is the contract that handled the processing of the $4m swap on Nov XX but not the contract that actually routed any of the assets. This means that this address won't show up on the transfer pages anywhere which makes it basically impossible to be following funds "thru" this address. I guess they could somehow pull 0x03f3 later looking at the raw transaction hash (or something)"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1947681636470166011) 2025-07-22 15:34:22 UTC 88K followers, XXX engagements "So.why did this victim end up on the stand in the Tornado trial Simple question. Insane journey of an answer. It all starts with a dude on WhatsApp/Line and a website "NTU Capital." He makes promises. She wires $250k. The money goes *poof.*"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1946062228878508119) 2025-07-18 04:19:26 UTC 88K followers, 3166 engagements "I did find what I was looking for. 😄 Here's the "NTU" addresses she "deposited" to amounts and relevant txn hashes: Deposit #1 - October XX - 6129 direct to: 3Jsboa2vwnwEAMy2Ha8hM4ucj5auwTCYtH ddfd0827a6c7339078162a5fc791fc53a7ee53d44449a76fb0de137d10821522 bridged to: 0x2b01f2e2935b426ee499b7572dc628b148499e69 0xcb0aeb9b7617a88cd2d08c398bda3e8a5cd66311394a9a37a55d83cc63193451 Deposit #2 - October XX - 24624 direct to: 3Jsboa2vwnwEAMy2Ha8hM4ucj5auwTCYtH 5c27b63423a4da9bc461c1722cc350d7b13173a2b95413bda3983baee906a169 bridged to: 0x2b01f2e2935b426ee499b7572dc628b148499e69"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1946062249648681159) 2025-07-18 04:19:31 UTC 88K followers, 2792 engagements "But after a lot of digging I found a thing. In 2023 the FBI seized like OVER ONE HUNDRED FUCKING MILLION DOLLARS RELATING TO "NTU CAPITAL" AND A BUNCH OF OTHER PIG BUTCHERS The complaint has tracing AND SCREENSHOTS WAT"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1946062240484085799) 2025-07-18 04:19:28 UTC 88K followers, 4940 engagements "The State's choice to have this victim re-live her loss on the stand FOUR YEARS LATER is.a lot. All so the jury could hear that Roman didn't respond to an inquiry sent to the catchall email on TC's homepage regarding funds that weren't even the victim's"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1946062275871391924) 2025-07-18 04:19:37 UTC 88K followers, 7249 engagements "I accidentally managed to shit-trace to some DPRK IT Workers. Only took X or X hops too. 😄 Specifically 0x2ad9790b5116ce19b9cc59c7982a64df0fea84bc which was identified as "OTC 2" and affiliated with the infamous Sim Hyon Sop. (This address didn't go to Tornado either though rip)"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1947708025906860080) 2025-07-22 17:19:14 UTC 88K followers, XX engagements "If this is in fact the same Payback LTD that the FBI explicitly shut down last year the state will absolutely need to show that their investigators did not wholly rely on a single bad-faith letter from an identified scam crypto recovery service Whether any federal LE agent is willing to go on the stand and testify they verified the trace remains to be seen. There is a lot of moving pieces in trials I would not be surprised if the AUSA genuinely thought the IRS agent would testify to this (based on memory or some notes) I will be surprised if any agent testifies to this. In my humble opinion"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1947439042959970428) 2025-07-21 23:30:24 UTC 88K followers, XXX engagements "@SalsaTekila 0x90fE81fd2C379D9e5c8C716Becf0547eb0d13EC1 has no tether"  [@tayvano_](/creator/x/tayvano_) on [X](/post/tweet/1946567292881670537) 2025-07-19 13:46:22 UTC 88K followers, 8062 engagements
[GUEST ACCESS MODE: Data is scrambled or limited to provide examples. Make requests using your API key to unlock full data. Check https://lunarcrush.ai/auth for authentication information.]
@tayvano_ Tay 💖
Tay 💖 posts on X about money, tokenlon, coinbase, $4m the most. They currently have XXXXXX followers and 1252 posts still getting attention that total XXXXXX engagements in the last XX hours.
Engagements: XXXXXX #
- X Week XXXXXXX +465%
- X Month XXXXXXX +195%
- X Months XXXXXXXXX -XX%
- X Year XXXXXXXXX +121%
Mentions: XX #
- X Week XX +136%
- X Month XX +30%
- X Months XXX +12%
- X Year XXX +21%
Followers: XXXXXX #
- X Week XXXXXX +0.11%
- X Month XXXXXX +0.07%
- X Months XXXXXX +2%
- X Year XXXXXX +21%
CreatorRank: XXXXXXX #
Social Influence #
Social category influence exchanges #1767 cryptocurrencies technology brands finance stocks countries
Social topic influence money, tokenlon, coinbase #540, $4m, $250k #13, ethereum #2779, 0x03f34be1bf910116595db1b11e9d1b2ca5d59659, whatsapp #1401, onchain, billions
Top assets mentioned Tokenlon (LON) Coinbase Global, Inc. (COIN) Ethereum (ETH) Hundred Million (100M) Chainge (XCHNG) Bitcoin (BTC)
Top Social Posts #
Top posts by engagements in the last XX hours
"@jconorgrogan Absolutely no way this is the trace I refuse to believe 😭😭😭😭"
@tayvano_ on X 2025-07-21 22:27:19 UTC 88K followers, XXX engagements
"They don't use Tornado Cash because it's nothing compared to their existing laundry networks. These networks handled the $X billion+ of Bybit stolen funds essentially overnight without flinching. They've handled billions from pig butchering scams over the past few years. Onchain you have Huione various P2P/OTC networks and endless "motorcades" of Chinese brokers. Offchain it's entrenched global organized crime. It's casinos across SE Asia fentanyl and precursors out of China drug and drug money in South America real estate in Canada banks in the US and on and on and on" @tayvano_ on X 2025-07-18 04:19:36 UTC 88K followers, 3001 engagements
"Sha Zhu Pan scams are the worst. Her like thousands of others got fucked. The financial + psychology fuckery totally destroys people families relationships jobs. Losing the $$ is often the beginning" @tayvano_ on X 2025-07-18 04:19:26 UTC 88K followers, 2789 engagements
"Like I said.simple questions. Insane journey answer. I'm choosing to believe she wanted to testify and got closure from it. I'm also choosing to believe the State will step up their game on that $100m+ seizure. Bc they fucking knew her funds didn't go to Tornado Cash" @tayvano_ on X 2025-07-18 04:19:37 UTC 88K followers, 15.8K engagements
"😡 The "Coinbase" account (green address) that her funds "went to" is actually.yeah that's some random motherfucker who swapped for BTC around the same time the scammer swapped BTC for ETH. I'm going long on this one bc that trace is fully inexcusable. On the attached image I've included all the messy bits in the middle. We don't normally graph these. See how the amounts get super random and other addresses show up outta nowhere That is the service.doing it's thing. Each time you deposit the service: 1) sweeps your deposited assets to their hot wallet 2) sends you a different asset elsewhere" @tayvano_ on X 2025-07-18 04:19:34 UTC 88K followers, 2648 engagements
"@jconorgrogan But thats $4m where the victim only had $148k from cdc all of which was immediately sent out" @tayvano_ on X 2025-07-21 22:35:54 UTC 88K followers, XXX engagements
"This upsets me. Crypto victims have it SO MUCH WORSE bc the utter lack of recourse available. Your money's gone can't do shit everyone says its your fault. Then some asshat sells you a service they can't fulfill and a prosecutor puts you on the stand in an unrelated case" @tayvano_ on X 2025-07-18 04:19:35 UTC 88K followers, 3211 engagements
"Due to the aforementioned crackhead explosion tracing I already knew that her funds did NOT go to Tornado. I have no clue what they were tracing. There's no Tornado Cash. Her funds also did NOT go to Coinbase. However I DO know why they think it did. It's painful. 😩" @tayvano_ on X 2025-07-18 04:19:31 UTC 88K followers, 2669 engagements
"Chainge Finance (April XX 2024) Mildly interesting: the Radiant hacker used an unlabeled bridge a lot and it took me a while to figure out it was this shit Chainge. I had never seen anyone use it before. lol. 🫠" @tayvano_ on X 2025-03-28 23:23:07 UTC 88K followers, 3245 engagements
"As it is here. Her money was gone by by Nov 2021. But to Apr 2022: She hires a "crypto recovery service" called "Payback" I don't know these fuckers but they suck. They should've never taken her case. There was no chance of recovery in April. They charged her money 😡" @tayvano_ on X 2025-07-18 04:19:27 UTC 88K followers, 2840 engagements
"Apparently it was these bumbling fucking idiots who "traced" her funds. They never reported or tagged the addresses she sent $250k to as stolen/illicit funds. They didn't freeze any funds let alone recover them. But they DID tell her to email Tornado Cash. ()" @tayvano_ on X 2025-07-18 04:19:27 UTC 88K followers, 4236 engagements
"The first "deposits" she made to "NTU Capital" were for $6k and $24k. She withdrew directly from her CEX to "NTU" The literal withdrawal txns from her CEX is the not-so-literal "deposit" txns to NTU Capital. (NTU Capital is not real. It's just the scammer's address.)" @tayvano_ on X 2025-07-18 04:19:32 UTC 88K followers, 2267 engagements
"The victim would've seen these deposits on the scam site. The balance then grows rapidly (because "mining" "trading" "pledging" "staking" "earning interest" etc) You can withdraw small sums here. For trust. This is the "fattening up" stage. Examples (not of NTU):" @tayvano_ on X 2025-07-18 04:19:32 UTC 88K followers, 2365 engagements
"@LaurentMT @Polymarket Txn hashes Ive been tracing thru tokenlon like a mad person and still cant find the bad trace even if they did indeed trace through a swap" @tayvano_ on X 2025-07-21 22:20:13 UTC 88K followers, XXX engagements
"(break for the case dump for the nerds.) 2:23-cv-01988-JJT U.S. District of Arizona September XX 2023 United States of America v. 5012294.90 in TetherUS (USDT) 75589553.41 in Gala (GALA) XXXXXX in BNB (BNB) 1264.16 in Bitcoin (BTC) 1495.72 in Litentry (LIT) 48969 in Fantom (FTM) XXXXX in Ethereum (ETH) XXXXXX in BUSD (BUSD) Binance Depos that I already identified (there are more) Binance 1: 0x6d62811cabe9357e7da7e53e9cbcad3a77958174 Binance 3: 0x56a5df2b1ac53eb603721740e75d71b02ebcf634 PDFs we found so far: (Pls dm me if you grab more pdfs 🙏)" @tayvano_ on X 2025-07-18 04:19:29 UTC 88K followers, 2693 engagements
"a week into the roman storm trial and the state is dangerously close to converting me back to team no one should be allowed to freeze any money ever lmao" @tayvano_ on X 2025-07-22 22:37:52 UTC 88K followers, 7106 engagements
"@LaurentMT @Polymarket Like you cant seriously tell me someone traced an AMM swap where X Ethereum-based tokens are swapped inside a single txn Where the assets begin and end at the same address In the same txn" @tayvano_ on X 2025-07-21 22:23:35 UTC 88K followers, XXX engagements
"@mload_ @jconorgrogan No you cant trace thru tokenlon. The funds are swapped inside a single txn. This is akin to arguing that I am DPRK bc both of us used Uniswap once" @tayvano_ on X 2025-07-21 22:33:48 UTC 88K followers, XX engagements
"In some ways its okay bc this shitty tracing doesn't actually matter bc her funds were already long gone by April. It's not like a capable person could've done something. She was in fact fucked the second she deposited. It fucking sucks. But it is. Her scammers are out of KK Parka massive scam compound backed by China and Triads and local government (or future local government) (or past local government) They thrive in the lawless ever-shifting border regions. KK Park is between Myanmar and Thailand. (There are others elsewhere.)" @tayvano_ on X 2025-07-18 04:19:35 UTC 88K followers, 4500 engagements
"Now instaswappers/services are one of the most common things you encounter while tracing. Widely used by all sorts of folks. Integrated into wallets. Cross-chain. Someone who sells crypto tracing / recovery services SHOULD know to stop the trace at the depo address.right 🤨" @tayvano_ on X 2025-07-18 04:19:34 UTC 88K followers, 2252 engagements
"@mload_ @jconorgrogan The Payback report explicitly says the "exit point" address is 0x03f34be1bf910116595db1b11e9d1b2ca5d59659 which is Tokenlon so I think they probably traced thru Tokenlon I just dont know how" @tayvano_ on X 2025-07-22 17:53:03 UTC 88K followers, XX engagements
"The "dude" on WhatsApp is also victim. These compounds are massive operations run by criminals who literally traffic people. They enslave people and force them to scam people. It's horrible. It won't stop bc the money brought by the compounds and associated casinos and development is insane. SEZs. Belt and Road initiative. It impacts the GDP and employment for these emerging econs" @tayvano_ on X 2025-07-18 04:19:36 UTC 88K followers, 2779 engagements
"I'm not talking out of my ass here. My team and I have talked to thousands of these victims. We've tracked nearly a billion dollars stolen on Ethereum. We have a dashboard for all known victims of the "Approval" variant of this scam btwn 2021-2023" @tayvano_ on X 2025-07-18 04:19:25 UTC 88K followers, 3775 engagements
"This first witness in Roman's trial immediately caught my attention bc the victim was a classic Pig Butchering case. The only issue is.uh.those scammers don't use Tornado Cash And they never have So like wtf" @tayvano_ on X 2025-07-18 04:19:25 UTC 88K followers, 145.3K engagements
"@jconorgrogan @L0laL33tz @W_J_Jones @payback_ltd I want to double check what exactly domains were seized and from whom and try to check against who the victim hired. There are occasionally impersonators with the scam recovery services. This really doesnt feel like an impersonation situation to me but we should be sure" @tayvano_ on X 2025-07-21 23:38:35 UTC 88K followers, XXX engagements
"Oh good apparently now the Coinbase breach happened on Dec XX 2024. LOL So since Coinbase won't be straight with you I will. Threat actors had ongoing access via multiple insiders over a prolonged period of time" @tayvano_ on X 2025-05-21 16:33:23 UTC 88K followers, 222.2K engagements
"Sorry I still don't understand how anyone reasonably gets from point a to point b even via Tokenlon X. These are insanely active DEX contracts The Payback report names 0x03f34be1bf910116595db1b11e9d1b2ca5d59659 which is the contract that handled the processing of the $4m swap on Nov XX but not the contract that actually routed any of the assets. This means that this address won't show up on the transfer pages anywhere which makes it basically impossible to be following funds "thru" this address. I guess they could somehow pull 0x03f3 later looking at the raw transaction hash (or something)" @tayvano_ on X 2025-07-22 15:34:22 UTC 88K followers, XXX engagements
"So.why did this victim end up on the stand in the Tornado trial Simple question. Insane journey of an answer. It all starts with a dude on WhatsApp/Line and a website "NTU Capital." He makes promises. She wires $250k. The money goes poof." @tayvano_ on X 2025-07-18 04:19:26 UTC 88K followers, 3166 engagements
"I did find what I was looking for. 😄 Here's the "NTU" addresses she "deposited" to amounts and relevant txn hashes: Deposit #1 - October XX - 6129 direct to: 3Jsboa2vwnwEAMy2Ha8hM4ucj5auwTCYtH ddfd0827a6c7339078162a5fc791fc53a7ee53d44449a76fb0de137d10821522 bridged to: 0x2b01f2e2935b426ee499b7572dc628b148499e69 0xcb0aeb9b7617a88cd2d08c398bda3e8a5cd66311394a9a37a55d83cc63193451 Deposit #2 - October XX - 24624 direct to: 3Jsboa2vwnwEAMy2Ha8hM4ucj5auwTCYtH 5c27b63423a4da9bc461c1722cc350d7b13173a2b95413bda3983baee906a169 bridged to: 0x2b01f2e2935b426ee499b7572dc628b148499e69" @tayvano_ on X 2025-07-18 04:19:31 UTC 88K followers, 2792 engagements
"But after a lot of digging I found a thing. In 2023 the FBI seized like OVER ONE HUNDRED FUCKING MILLION DOLLARS RELATING TO "NTU CAPITAL" AND A BUNCH OF OTHER PIG BUTCHERS The complaint has tracing AND SCREENSHOTS WAT" @tayvano_ on X 2025-07-18 04:19:28 UTC 88K followers, 4940 engagements
"The State's choice to have this victim re-live her loss on the stand FOUR YEARS LATER is.a lot. All so the jury could hear that Roman didn't respond to an inquiry sent to the catchall email on TC's homepage regarding funds that weren't even the victim's" @tayvano_ on X 2025-07-18 04:19:37 UTC 88K followers, 7249 engagements
"I accidentally managed to shit-trace to some DPRK IT Workers. Only took X or X hops too. 😄 Specifically 0x2ad9790b5116ce19b9cc59c7982a64df0fea84bc which was identified as "OTC 2" and affiliated with the infamous Sim Hyon Sop. (This address didn't go to Tornado either though rip)" @tayvano_ on X 2025-07-22 17:19:14 UTC 88K followers, XX engagements
"If this is in fact the same Payback LTD that the FBI explicitly shut down last year the state will absolutely need to show that their investigators did not wholly rely on a single bad-faith letter from an identified scam crypto recovery service Whether any federal LE agent is willing to go on the stand and testify they verified the trace remains to be seen. There is a lot of moving pieces in trials I would not be surprised if the AUSA genuinely thought the IRS agent would testify to this (based on memory or some notes) I will be surprised if any agent testifies to this. In my humble opinion" @tayvano_ on X 2025-07-21 23:30:24 UTC 88K followers, XXX engagements
"@SalsaTekila 0x90fE81fd2C379D9e5c8C716Becf0547eb0d13EC1 has no tether" @tayvano_ on X 2025-07-19 13:46:22 UTC 88K followers, 8062 engagements