Skip to main content
AVOID.NET
Sign in

0x327a81d0d128db8886d265be73c9fdda97194f30

avoid.net/0x327a81d0d128db8886d265be73c9fdda97194f30→5/100·100% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:etherscan][src:zachxbt][blockchain-forensics][ethereum][zachxbt-flagged]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·2X6ytv…Srp1

Summary

Avalanche C-Chain address 0x327a81d0d128db8886d265be73c9fdda97194f30 was flagged by on-chain investigator ZachXBT in June 2024 as the primary launderer for the BTCTurk exchange hack, having transferred approximately 1.96 million AVAX (valued at ~$54.2 million) to Coinbase, Binance, Gate.io, and THORChain. ZachXBT's timing analysis linked subsequent BTC withdrawals of approximately $45.96 million to the same threat actor, who was also allegedly responsible for a concurrent $2.9 million theft from Sportsbet. The address currently holds negligible funds, consistent with successful laundering of proceeds.

Connected Entities

8 entities · 60 linked investigations
Organizations
□Ethereum64□BtcTurk28□THORChain52□Binance45□0x327a81d0d128db8886d265be73c9fdda97194f30□Sportsbet6□ZachXBT82
Tokens
♦Coinbase62
Relationships
  • Ethereum→mentioned with→Coinbase(60%)
  • ZachXBT→mentioned with→Ethereum(70%)
  • ZachXBT→mentioned with→Binance(60%)
  • Binance→mentioned with→Ethereum(65%)
  • THORChain→mentioned with→Ethereum(70%)
  • THORChain→mentioned with→Binance(65%)
  • Sportsbet→mentioned with→BtcTurk(80%)
  • BtcTurk→mentioned with→Coinbase(70%)
  • BtcTurk→mentioned with→0x327a81d0d128db8886d265be73c9fdda97194f30(65%)
  • BtcTurk→mentioned with→ZachXBT(70%)
  • + 14 more
Also appears in
Aperture LM·28Crossmint·70BtcTurk·28Dean Daghita / CMDSS (Command Services and Support)·0Gurhan Kiziloz·0SafePal·42AnubisDAO·2BNB Chain Bridge·16Clober Liquidity Vault·52Nobitex June 2025 Hack (Predatory Sparrow)·10+ 50 more

Connected Through

8 shared actors · 612 investigations

Distinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.

Have evidence about 0x327a81d0d128db8886d265be73c9fdda97194f30?

Timeline(6 events)

22 June 2024

BTCTurk exchange suffers cyberattack compromising ten hot wallets; estimated $48–55 million stolen across multiple blockchains.

22 June 2024

Alleged threat actor also attacks Sportsbet betting platform around the same time, stealing over $2.9 million; ZachXBT reports funds were commingled with BTCTurk proceeds.

22 June 2024

Address 0x327a81d0d128db8886d265be73c9fdda97194f30 begins transferring approximately 1.96 million AVAX (~$54.2M) to Coinbase, Binance, Gate.io, and THORChain.

22 June 2024

ZachXBT's timing analysis identifies 587.75 BTC (~$38.1M) withdrawn from Coinbase and 122.66 BTC (~$7.95M) withdrawn from Binance, correlated with AVAX deposits from this address; total estimated BTC extraction: ~$45.96M.

22 June 2024

AVAX price drops approximately 10% to a 6-month low under $25 as market reacts to the large AVAX sell-off associated with the hack.

23 June 2024

Binance announces it has frozen over $5.3 million in funds associated with the BTCTurk hack following cooperation with investigation.

Provenance & Audit Trail
Anchored on SolanaVerify on-chainsrc:etherscansrc:zachxbt

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event).

full audit log →version history →

model: claude-sonnet

generated: 5/4/2026, 4:04:56 PM

last updated: 8/29/2026, 1:34:02 AM

5 views

avoid.net — verified advice for a post-truth world