Audit log

Every state-changing event for Alexander Vladimirovich Ledenev: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

1. #1publishby system:backfill

   2026-06-27 17:09:30Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 429,278,596

   sig

   42ugdMeuCcpP…xfMpCEENcopyexplorer ↗

   hash

   7zCU4Hg6wq5G…VsZuXTDecopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (16845 B) ▸

   {"actor":"system:backfill","investigation_id":"64487752-3b37-4f4c-8e84-5b7f3893a908","kind":"publish","page_slug":"alexander-vladimirovich-ledenev","published_at":"2026-06-27T17:09:30.559Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Alexander Vladimirovich Ledenev","sections":[{"content":"On or about June 10, 2026, the U.S. Attorney's Office for the Eastern District of Pennsylvania filed a criminal complaint charging Ledenev with two counts: (1) conspiracy to launder monetary instruments, and (2) sting money laundering. These charges arise from his alleged role as a senior member of the AudiA6 cryptocurrency money laundering organization. Each count carries a maximum statutory penalty of 20 years of incarceration. The complaint was unsealed on June 11, 2026, concurrent with the public announcement of his arrest by the U.S. Secret Service and the Department of Justice.","heading":"Criminal Charges","severity":"critical","sources":[{"credibility":1,"name":"DOJ Eastern District of Pennsylvania — Two Charged in Connection With Cryptocurrency Money Laundering Service That Allegedly Laundered Over $389 Million","type":"regulatory","url":"https://www.justice.gov/usao-edpa/pr/two-charged-connection-cryptocurrency-money-laundering-service-allegedly-laundered"},{"credibility":1,"name":"U.S. Secret Service — Two Charged in Connection With Cryptocurrency Money Laundering Service","type":"regulatory","url":"https://www.secretservice.gov/newsroom/releases/2026/06/two-charged-connection-cryptocurrency-money-laundering-service-allegedly"}]},{"content":"According to the criminal complaint, Ledenev is alleged to have been a senior member of the AudiA6 organization who managed both the cryptocurrency money laundering service itself and the Dark2Web cybercrime forum. AudiA6 marketed its services to criminal clients — including ransomware operators and dark web marketplace participants — by explicitly promising to 'conceal and disguise the source of prospective customers' cryptocurrency that would otherwise be traceable to criminal sources' in exchange for a fee of up to five percent of the laundered amount. Ledenev's co-defendant Ruslan Igorevich Tkachuk, 37, a Ukrainian national also resident in Batumi, Georgia, is alleged to have held a parallel senior administrative role. The complaint does not specify a distinct operational division of responsibility between the two defendants.","heading":"Role in AudiA6","severity":"critical","sources":[{"credibility":1,"name":"U.S. Secret Service press release — AudiA6 charges","type":"regulatory","url":"https://www.secretservice.gov/newsroom/releases/2026/06/two-charged-connection-cryptocurrency-money-laundering-service-allegedly"},{"credibility":2,"name":"Decrypt — Authorities Take Down AudiA6 Group That Allegedly Laundered $389 Million in Bitcoin","type":"news_article","url":"https://decrypt.co/370812/authorities-take-down-audia6-allegedly-laundered-389-million-bitcoin"}]},{"content":"AudiA6 launched in 2021 and, according to blockchain analysis conducted by law enforcement, received approximately 10,333 Bitcoin deposited to its wallets through the period of operation — valued at approximately $389,747,417 at the time of the transactions. Of that total, approximately 393.39 BTC (historically valued at approximately $19.2 million) was traced directly to known ransomware organizations, darknet markets, and other cybercrime services. The service charged commissions ranging from approximately 3 to 10 percent of gross transaction volume and marketed itself as capable of reducing the Anti-Money Laundering risk score of transferred funds below 25. Clients were promised 'clean' cryptocurrency in return for 'dirty' cryptocurrency, typically within approximately one hour. The service's obfuscation methodology relied on a network of more than 6,000 Know Your Customer (KYC)-verified money mule accounts, many linked to Russian-speaking intermediaries, to route funds through centralized cryptocurrency exchanges. Telegram channels and proprietary email domains were used to register accounts and coordinate transfers.","heading":"AudiA6 Service Operations and Scale","severity":"critical","sources":[{"credibility":1,"name":"U.S. Secret Service press release — AudiA6 charges","type":"regulatory","url":"https://www.secretservice.gov/newsroom/releases/2026/06/two-charged-connection-cryptocurrency-money-laundering-service-allegedly"},{"credibility":2,"name":"The Hacker News — Europol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs","type":"news_article","url":"https://thehackernews.com/2026/06/europol-disrupts-audia6-crypto.html"},{"credibility":2,"name":"Chainalysis — Global Law Enforcement Dismantles AudiA6 Crypto Laundering Network","type":"research","url":"https://www.chainalysis.com/blog/law-enforcement-dismantles-audia6-laundering-network-june-2026/"}]},{"content":"In addition to the primary laundering service, Ledenev and Tkachuk are alleged to have administered Dark2Web, a dark web cybercrime forum used to advertise AudiA6's services and to connect with prospective criminal clients. The forum served as a marketplace and recruitment channel within the criminal underground. The Dark2Web domain was seized as part of the June 10, 2026 international law enforcement action.","heading":"Dark2Web Cybercrime Forum","severity":"high","sources":[{"credibility":2,"name":"HackRead — Feds Seize AudiA6 and Dark2Web in $389M Crypto Laundering Case","type":"news_article","url":"https://hackread.com/feds-seize-audia6-dark2web-crypto-laundering-case/"},{"credibility":2,"name":"Decrypt — Authorities Take Down AudiA6 Group That Allegedly Laundered $389 Million in Bitcoin","type":"news_article","url":"https://decrypt.co/370812/authorities-take-down-audia6-allegedly-laundered-389-million-bitcoin"}]},{"content":"Blockchain investigators identified at least one high-profile downstream victim whose stolen funds were allegedly laundered through AudiA6. In April 2026, a counterfeit Ledger Live application distributed through the Apple Mac App Store drained approximately $9.5 million in cryptocurrency from approximately 50 victims between April 7 and April 13. On-chain analysis linked the stolen funds — routed through more than 150 KuCoin deposit addresses — to AudiA6 wallets. Three individual victims lost seven-figure amounts of $3.23 million, $2.08 million, and $1.95 million respectively. This incident preceded the June 2026 arrests by approximately two months and is cited by investigators as one documented example of AudiA6's downstream criminal client base.","heading":"Known Victim Incidents","severity":"high","sources":[{"credibility":2,"name":"CoinDesk — Fake Ledger App on the Apple App Store Drained $9.5 Million in Crypto","type":"news_article","url":"https://www.coindesk.com/business/2026/04/14/a-fake-ledger-app-on-the-apple-app-store-just-drained-usd9-5-million-in-crypto"},{"credibility":2,"name":"The Block — Fake Ledger App Apple App Store Crypto Theft Linked to AudiA6","type":"news_article","url":"https://www.theblock.co/post/397388/fake-ledger-app-apple-app-store-crypto-theft-bitcoin-tron-solana-zachxbt"}]},{"content":"Ledenev was arrested in Batumi, Republic of Georgia on June 10, 2026. As of the date of the public announcement (June 11, 2026), he remained in the custody of Georgian authorities. The U.S. Attorney's Office for the Eastern District of Pennsylvania has indicated it will seek Ledenev's extradition to the United States. A co-perpetrator not publicly identified as Ledenev or Tkachuk was separately arrested in Poland in September 2025 pursuant to a red notice issued by prosecutors in Lodz, Poland, suggesting the investigation was underway for some months prior to the June 2026 arrests. Extradition proceedings had not concluded as of the date of this investigation.","heading":"Arrest, Custody, and Extradition Status","severity":"high","sources":[{"credibility":1,"name":"U.S. Secret Service press release — AudiA6 charges","type":"regulatory","url":"https://www.secretservice.gov/newsroom/releases/2026/06/two-charged-connection-cryptocurrency-money-laundering-service-allegedly"},{"credibility":1,"name":"Eurojust — Cryptocurrency money laundering site shut down thanks to coordinated investigation","type":"regulatory","url":"https://www.eurojust.europa.eu/news/cryptocurrency-money-laundering-site-shut-down-thanks-coordinated-investigation"},{"credibility":2,"name":"Protos — AudiA6 crypto laundering suspects face extradition to US","type":"news_article","url":"https://protos.com/audia6-crypto-laundering-suspects-face-extradition-to-us/"}]},{"content":"The takedown of AudiA6 infrastructure on June 10, 2026, was a coordinated multinational action. Participating agencies and jurisdictions included: the U.S. Secret Service Cyber Investigative Section; IRS Criminal Investigation; Europol; Eurojust (coordinating through U.S., Polish, and Georgian liaison desks); and law enforcement partners from Australia, Canada, France, Georgia, Germany, Iceland, Japan, Poland, Switzerland, and the United Kingdom. Eurojust coordinated judicial cooperation across France, Poland, Georgia, and Iceland. The operation resulted in the seizure of 25 domains, more than 30 servers, over 80 vehicles and multiple properties in Georgia, approximately €692,000 in cryptocurrency frozen, and approximately €86,000 in cryptocurrency seized outright. Seized email domains used for KYC mule account registration included designli.pictures, pheontx.eu, smplfy.in, sumato-soft.org, technobrains.dev, and others.","heading":"International Law Enforcement Operation","severity":"medium","sources":[{"credibility":1,"name":"Eurojust — Cryptocurrency money laundering site shut down thanks to coordinated investigation","type":"regulatory","url":"https://www.eurojust.europa.eu/news/cryptocurrency-money-laundering-site-shut-down-thanks-coordinated-investigation"},{"credibility":1,"name":"U.S. Secret Service press release — AudiA6 charges","type":"regulatory","url":"https://www.secretservice.gov/newsroom/releases/2026/06/two-charged-connection-cryptocurrency-money-laundering-service-allegedly"},{"credibility":2,"name":"The Hacker News — Europol Disrupts AudiA6 Crypto Laundering Service","type":"news_article","url":"https://thehackernews.com/2026/06/europol-disrupts-audia6-crypto.html"}]},{"content":"Alexander Vladimirovich Ledenev is described as a Russian national, age 25 at the time of his arrest. He was residing in Batumi, Republic of Georgia. No further publicly verifiable biographical details — including educational background, prior criminal history, or prior public professional affiliations — have been reported by Tier 1 or Tier 2 sources as of this investigation.","heading":"Personal Background","severity":"low","sources":[{"credibility":1,"name":"U.S. Secret Service press release — AudiA6 charges","type":"regulatory","url":"https://www.secretservice.gov/newsroom/releases/2026/06/two-charged-connection-cryptocurrency-money-laundering-service-allegedly"}]}],"sources_used":[{"credibility":1,"name":"DOJ Eastern District of Pennsylvania — Two Charged in Connection With Cryptocurrency Money Laundering Service","type":"regulatory","url":"https://www.justice.gov/usao-edpa/pr/two-charged-connection-cryptocurrency-money-laundering-service-allegedly-laundered"},{"credibility":1,"name":"U.S. Secret Service — Two Charged in Connection With Cryptocurrency Money Laundering Service","type":"regulatory","url":"https://www.secretservice.gov/newsroom/releases/2026/06/two-charged-connection-cryptocurrency-money-laundering-service-allegedly"},{"credibility":1,"name":"Eurojust — Cryptocurrency money laundering site shut down thanks to coordinated investigation","type":"regulatory","url":"https://www.eurojust.europa.eu/news/cryptocurrency-money-laundering-site-shut-down-thanks-coordinated-investigation"},{"credibility":2,"name":"The Hacker News — Europol Disrupts AudiA6 Crypto Laundering Service Used by Ransomware Gangs","type":"news_article","url":"https://thehackernews.com/2026/06/europol-disrupts-audia6-crypto.html"},{"credibility":2,"name":"Decrypt — Authorities Take Down AudiA6 Group That Allegedly Laundered $389 Million in Bitcoin","type":"news_article","url":"https://decrypt.co/370812/authorities-take-down-audia6-allegedly-laundered-389-million-bitcoin"},{"credibility":2,"name":"HackRead — Feds Seize AudiA6 and Dark2Web in $389M Crypto Laundering Case","type":"news_article","url":"https://hackread.com/feds-seize-audia6-dark2web-crypto-laundering-case/"},{"credibility":2,"name":"BleepingComputer — Authorities dismantle AudiA6 ransomware crypto-laundering service","type":"news_article","url":"https://www.bleepingcomputer.com/news/legal/authorities-dismantle-audia6-ransomware-crypto-laundering-service/"},{"credibility":2,"name":"Chainalysis — Global Law Enforcement Dismantles AudiA6 Laundering Network","type":"research","url":"https://www.chainalysis.com/blog/law-enforcement-dismantles-audia6-laundering-network-june-2026/"},{"credibility":2,"name":"CoinDesk — Fake Ledger App on the Apple App Store Drained $9.5 Million in Crypto","type":"news_article","url":"https://www.coindesk.com/business/2026/04/14/a-fake-ledger-app-on-the-apple-app-store-just-drained-usd9-5-million-in-crypto"},{"credibility":2,"name":"The Block — Fake Ledger App Apple App Store Crypto Theft Bitcoin Tron Solana ZachXBT","type":"news_article","url":"https://www.theblock.co/post/397388/fake-ledger-app-apple-app-store-crypto-theft-bitcoin-tron-solana-zachxbt"},{"credibility":2,"name":"Protos — AudiA6 crypto laundering suspects face extradition to US","type":"news_article","url":"https://protos.com/audia6-crypto-laundering-suspects-face-extradition-to-us/"},{"credibility":2,"name":"Cryptopolitan — US to seek extradition of AudiA6 duo over $389M crypto laundering scheme","type":"news_article","url":"https://www.cryptopolitan.com/us-extradition-audia6-duo-crypto-laundering/"}],"summary":"Alexander Vladimirovich Ledenev is a 25-year-old Russian national arrested in Batumi, Republic of Georgia on June 10, 2026, and charged by criminal complaint in the Eastern District of Pennsylvania with conspiracy to launder monetary instruments and sting money laundering. He is alleged to be a senior co-administrator of AudiA6, a cryptocurrency laundering service that processed approximately 10,333 Bitcoin (valued at roughly $389.7 million at transaction time) since its 2021 launch. Ledenev and co-defendant Ruslan Igorevich Tkachuk are currently in Georgian custody pending U.S. extradition proceedings; each faces a maximum sentence of 20 years in federal prison.","timeline":[{"date":"2021-01-01","event":"AudiA6 cryptocurrency laundering service launches. Exact launch date is approximate; the DOJ complaint states the service was operational 'since 2021.'","source":"U.S. Secret Service / DOJ Eastern District of Pennsylvania","source_url":"https://www.secretservice.gov/newsroom/releases/2026/06/two-charged-connection-cryptocurrency-money-laundering-service-allegedly"},{"date":"2025-09-01","event":"An unnamed co-perpetrator in the AudiA6 network is arrested in Poland pursuant to a red notice from the Regional Prosecutor's Office in Lodz. Exact date is approximate.","source":"Eurojust","source_url":"https://www.eurojust.europa.eu/news/cryptocurrency-money-laundering-site-shut-down-thanks-coordinated-investigation"},{"date":"2026-04-07","event":"A counterfeit Ledger Live app on the Apple Mac App Store begins draining victim cryptocurrency wallets. Stolen funds are subsequently traced to AudiA6 laundering wallets via over 150 KuCoin deposit addresses. Approximately $9.5 million stolen from roughly 50 victims through April 13.","source":"CoinDesk / The Block","source_url":"https://www.coindesk.com/business/2026/04/14/a-fake-ledger-app-on-the-apple-app-store-just-drained-usd9-5-million-in-crypto"},{"date":"2026-06-10","event":"Alexander Vladimirovich Ledenev (25) and Ruslan Igorevich Tkachuk (37) are arrested in Batumi, Republic of Georgia. Simultaneously, international law enforcement seizes 25 domains, 30+ servers, 80+ vehicles, and multiple properties. Approximately €692,000 in cryptocurrency is frozen.","source":"U.S. Secret Service / Eurojust","source_url":"https://www.secretservice.gov/newsroom/releases/2026/06/two-charged-connection-cryptocurrency-money-laundering-service-allegedly"},{"date":"2026-06-11","event":"The U.S. Department of Justice and U.S. Secret Service publicly announce the charges and the multinational AudiA6 takedown. Criminal complaint unsealed in the Eastern District of Pennsylvania.","source":"DOJ Eastern District of Pennsylvania","source_url":"https://www.justice.gov/usao-edpa/pr/two-charged-connection-cryptocurrency-money-laundering-service-allegedly-laundered"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision fd06d275-8217-4726-8df6-983ae462df10copy