Skip to main content
AVOID.NET

0x327a81d0d128db8886d265be73c9fdda97194f30

avoid.net/0x327a81d0d128db8886d265be73c9fdda97194f30→32/100·100% conf.

Last changed 2026-10-10 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 5 → 32. Problems weighed by who is responsible: the subject's own conduct −32, problems around the subject, caused by others −0.8. Version history →

Why this score
Every page starts at65
The subject's own conduct-32
Problems around it, caused by others-0.8
Sum32

Score: 32/100 (kept between 0 and 100)

How scoring works →
anchored·2X6ytv…Srp1
last updated 2026-10-10

Summary

Avalanche C-Chain address 0x327a81d0d128db8886d265be73c9fdda97194f30 was flagged by on-chain investigator ZachXBT in June 2024 as the primary launderer for the BTCTurk exchange hack, having transferred approximately 1.96 million AVAX (valued at ~$54.2 million) to Coinbase, Binance, Gate.io, and THORChain. ZachXBT's timing analysis linked subsequent BTC withdrawals of approximately $45.96 million to the same threat actor, who was also allegedly responsible for a concurrent $2.9 million theft from Sportsbet. The address currently holds negligible funds, consistent with successful laundering of proceeds.

Connected Entities

8 entities · 60 linked investigations
Organizations
□Ethereum90□BtcTurk□THORChain□Binance□0x327a81d0d128db8886d265be73c9fdda97194f30□Sportsbet□ZachXBT
Tokens
♦Coinbase
Relationships
  • Ethereum→mentioned with→Coinbase(60%)
  • ZachXBT→mentioned with→Ethereum(70%)
  • ZachXBT→mentioned with→Binance(60%)
  • Binance→mentioned with→Ethereum(65%)
  • THORChain→mentioned with→Ethereum(70%)
  • THORChain→mentioned with→Binance(65%)
  • Sportsbet→mentioned with→BtcTurk(80%)
  • BtcTurk→mentioned with→Coinbase(70%)
  • BtcTurk→mentioned with→0x327a81d0d128db8886d265be73c9fdda97194f30(65%)
  • BtcTurk→mentioned with→ZachXBT(70%)
  • + 14 more
Have evidence about 0x327a81d0d128db8886d265be73c9fdda97194f30?

Timeline(6 events)

22 June 2024

BTCTurk exchange suffers cyberattack compromising ten hot wallets; estimated $48–55 million stolen across multiple blockchains.

22 June 2024

Alleged threat actor also attacks Sportsbet betting platform around the same time, stealing over $2.9 million; ZachXBT reports funds were commingled with BTCTurk proceeds.

22 June 2024

Address 0x327a81d0d128db8886d265be73c9fdda97194f30 begins transferring approximately 1.96 million AVAX (~$54.2M) to Coinbase, Binance, Gate.io, and THORChain.

22 June 2024

ZachXBT's timing analysis identifies 587.75 BTC (~$38.1M) withdrawn from Coinbase and 122.66 BTC (~$7.95M) withdrawn from Binance, correlated with AVAX deposits from this address; total estimated BTC extraction: ~$45.96M.

22 June 2024

AVAX price drops approximately 10% to a 6-month low under $25 as market reacts to the large AVAX sell-off associated with the hack.

23 June 2024

Binance announces it has frozen over $5.3 million in funds associated with the BTCTurk hack following cooperation with investigation.

Provenance & Audit Trail

Decision Log

  • #2rescore+27Recorded on Solana ✓10/10/2026, 6:40:05 PM
    slot 455358256 · hash 5YoGeJ8m1vBUWsEtE1MDnWVcB5o7zBSpPfq7mLBp4HKv
  • #1publishRecorded on Solana ✓5/19/2026, 2:32:59 AM
    slot 420680198 · hash HAyk2rNx3WWa8gUPiUaGDvwSPDeEsLuMoox5jfyNX169

This investigation is cryptographically anchored to the Solana blockchain (2 decisions).

model: claude-sonnet

generated: 5/4/2026, 4:04:56 PM

last updated: 10/10/2026, 6:40:05 PM

5 views

avoid.net — verified advice for a post-truth world