AudiA6
Summary
AudiA6 was a professional cryptocurrency mixing and laundering service that operated from 2021 until its dismantlement on June 10, 2026, in a coordinated international law enforcement operation. The service processed approximately 10,333 Bitcoin — valued at roughly $389 million at the time of transactions — for ransomware groups, darknet market operators, and other cybercriminals, charging commissions of 3–10%. Two alleged operators, Ruslan Igorevich Tkachuk (Ukrainian, 37) and Alexander Vladimirovich Ledenev (Russian, 25), were arrested in Batumi, Georgia, and face U.S. federal charges in the Eastern District of Pennsylvania carrying up to 20 years in prison each.
Connected Entities
1 entities · 10 linked investigationsTimeline(10 events)
2021-01-01
AudiA6 cryptocurrency mixing service launched, beginning to accept deposits from criminal clients on darknet forums including Dark2Web.
TRM Labs / The Hacker News2022-12-01
First documented U.S. law enforcement undercover transaction with AudiA6 conducted, initiating the covert investigation phase.
Philadelphia Inquirer2023-01-01
AudiA6 transaction volume peaks. Blockchain analysis later shows this as the service's highest-volume year before declining through 2024-2025.
TRM Labs2025-09-01
Polish Police (CBZC) arrest a Ukrainian national linked to AudiA6 money laundering activities, initiating the chain of evidence that leads to the primary operators.
Help Net Security2025-09-01
TRM Labs identifies approximately $7 million in LastPass-stolen funds flowing from Wasabi Wallet through AudiA6, demonstrating forensic traceability.
TRM Labs2026-04-01
Undercover investigators submit $5,000 in Bitcoin to AudiA6 and are charged a $300 fee; a separate transaction of $5,100 is charged a $400 fee.
Philadelphia Inquirer2026-05-01
Final documented undercover transaction with AudiA6 conducted by U.S. investigators ahead of the coordinated takedown.
Philadelphia Inquirer2026-06-10
Coordinated international takedown executed: Ruslan Igorevich Tkachuk and Alexander Vladimirovich Ledenev arrested in Batumi, Georgia. 25 domains seized, 30+ servers taken offline, 80+ vehicles and multiple properties confiscated. EUR 692,000 in cryptocurrency frozen.
BleepingComputer / Help Net Security2026-06-11
U.S. Attorney's Office for the Eastern District of Pennsylvania publicly announces federal charges against Tkachuk and Ledenev. DOJ, Europol, and partner agencies hold joint announcement. Seizure banners placed on AudiA6 and Dark2Web websites.
Philadelphia Inquirer / The Hacker News2026-06-13
U.S. Attorney's Office confirms it will seek extradition of both defendants from Georgia to the Eastern District of Pennsylvania. Both remain in Georgian custody.
CryptopolitanDecision Log
- hash: 41Ld8pG8Wr2TVgkmskVzmEhXLZ5rLUVXLH8ARAPSeu63
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-6
generated: 6/14/2026, 2:18:47 PM
last updated: 6/14/2026, 2:18:58 PM
avoid.net — verified advice for a post-truth world