Skip to main content
Sign in

0x327a81d0d128db8886d265be73c9fdda97194f30

avoid.net/0x327a81d0d128db8886d265be73c9fdda97194f30→5/100·100% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:blockchain-forensics][src:zachxbt-flagged][src:ethereum][src:etherscan][src:zachxbt]
anchored·2X6ytv…Srp1

Summary

Avalanche C-Chain address 0x327a81d0d128db8886d265be73c9fdda97194f30 was flagged by on-chain investigator ZachXBT in June 2024 as the primary launderer for the BTCTurk exchange hack, having transferred approximately 1.96 million AVAX (valued at ~$54.2 million) to Coinbase, Binance, Gate.io, and THORChain. ZachXBT's timing analysis linked subsequent BTC withdrawals of approximately $45.96 million to the same threat actor, who was also allegedly responsible for a concurrent $2.9 million theft from Sportsbet. The address currently holds negligible funds, consistent with successful laundering of proceeds.

Connected Entities

1 entities
Organizations
□0x327a81d0d128db8886d265be73c9fdda97194f30
Relationships
    Have evidence about 0x327a81d0d128db8886d265be73c9fdda97194f30?

    Timeline(6 events)

    2024-06-22

    BTCTurk exchange suffers cyberattack compromising ten hot wallets; estimated $48–55 million stolen across multiple blockchains.

    2024-06-22

    Alleged threat actor also attacks Sportsbet betting platform around the same time, stealing over $2.9 million; ZachXBT reports funds were commingled with BTCTurk proceeds.

    2024-06-22

    Address 0x327a81d0d128db8886d265be73c9fdda97194f30 begins transferring approximately 1.96 million AVAX (~$54.2M) to Coinbase, Binance, Gate.io, and THORChain.

    2024-06-22

    ZachXBT's timing analysis identifies 587.75 BTC (~$38.1M) withdrawn from Coinbase and 122.66 BTC (~$7.95M) withdrawn from Binance, correlated with AVAX deposits from this address; total estimated BTC extraction: ~$45.96M.

    2024-06-22

    AVAX price drops approximately 10% to a 6-month low under $25 as market reacts to the large AVAX sell-off associated with the hack.

    2024-06-23

    Binance announces it has frozen over $5.3 million in funds associated with the BTCTurk hack following cooperation with investigation.

    Provenance & Audit Trail
    Anchored on SolanaVerify on-chainsrc:blockchain-forensicssrc:zachxbt-flaggedsrc:ethereumsrc:etherscansrc:zachxbt

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.

    full audit log →version history →

    model: claude-sonnet

    generated: 5/4/2026, 4:04:56 PM

    last updated: 5/26/2026, 4:11:13 AM

    avoid.net — verified advice for a post-truth world