AudiA6 Crypto Laundering Network
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·c6R7dT…duKMSummary
AudiA6 was a professional cryptocurrency money laundering service allegedly operating from 2021 through 2025, accused of processing approximately $389.7 million (EUR 336 million) in illicit funds for ransomware gangs and other cybercriminals. The service also administered the Dark2Web dark web cybercrime forum. A US-led international law enforcement operation dismantled AudiA6's infrastructure on June 10, 2026, and two alleged operators were arrested in Batumi, Georgia and charged by the US Department of Justice.
Connected Entities
8 entities · 60 linked investigations- Ruslan Igorevich Tkachuk→mentioned with→AudiA6(70%)
- Ruslan Igorevich Tkachuk→mentioned with→Dark2Web(70%)
- Ruslan Igorevich Tkachuk→mentioned with→Bitcoin(60%)
- Alexander Vladimirovich Ledenev→mentioned with→Dark2Web(70%)
- Alexander Vladimirovich Ledenev→mentioned with→AudiA6(80%)
- Alexander Vladimirovich Ledenev→mentioned with→Bitcoin(65%)
- AudiA6→mentioned with→Bitcoin(70%)
- AudiA6→mentioned with→LastPass(65%)
- AudiA6→mentioned with→Dark2Web(70%)
- LastPass→mentioned with→Bitcoin(70%)
- + 16 more
Connected Through
7 shared actors · 480 investigationsDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- ♦Bitcointoken
- □AudiA6organization
- □LastPassorganization
- □Dark2Weborganization
Timeline(7 events)
1 January 2021
AudiA6 cryptocurrency laundering service alleged to have launched operations, according to DOJ and on-chain analytics.
US Secret Service / TRM Labs1 January 2022
AudiA6 begins receiving illicit funds traceable to the 2022 LastPass data breach, according to later TRM Labs on-chain analysis.
TRM Labs1 September 2025
Polish police arrest one Ukrainian suspect in connection with a related AudiA6 investigation, providing an early investigative lead.
Help Net Security / The Hacker News1 December 2025
TRM Labs traces approximately $7 million in stolen LastPass funds from Wasabi Wallet to AudiA6 wallets using cluster-level demixing and timing analysis.
TRM Labs10 June 2026
Coordinated international law enforcement operation dismantles AudiA6. Ruslan Igorevich Tkachuk (37) and Alexander Vladimirovich Ledenev (25) are arrested in Batumi, Georgia. Over 30 servers seized, 25 domains taken down, 80+ vehicles seized, Telegram accounts blocked, and cryptocurrency assets frozen.
DOJ / US Secret Service / Europol11 June 2026
DOJ files criminal complaint in Eastern District of Pennsylvania. Europol and Chainalysis publish operational details. Seizure banners placed on AudiA6 and Dark2Web infrastructure.
DOJ EDPA / Chainalysis / Europol12 June 2026
Europol, Help Net Security, The Hacker News, and other outlets publish comprehensive coverage. TRM Labs identifies 20 distinct ransomware groups as AudiA6 customers.
TRM Labs / Help Net SecurityDecision Log
- slot 445504648 · hash HdUwNB9ZemVNtAc63tYXVetBx2GiSmLiKnAhN4mS1Jih
- slot 443561128 · hash DX8gZNrf6uwXGMMcRfFkwtw8ZQX7JhKRTFU553sx8HUy
- slot 443561100 · hash 4ywZXn9S2kr8e8HNhcqCYNJc71Essh7pS1jgwxHYRBVb
- slot 443552857 · hash 3BLGRBsuKkJJzSf3P5JXcQtPBKhtJv1zr31oyAJrrPac
This investigation is cryptographically anchored to the Solana blockchain (4 decisions). 11 of 12 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 9/1/2026, 11:52:56 PM
last updated: 9/2/2026, 12:35:54 AM
6 viewsavoid.net — verified advice for a post-truth world