Summary
According to independent investigator ZachXBT, BlackSuit has been flagged for alleged suspicious activity.
No evidence submitted yet — be the first.
Editorial decisions, corrections, and updates are anchored on Solana.
BlackSuit
Sharing the $25M ransom payment made by CDK on June 21, 2024 to BlackSuit. Transaction hash [8a41d7a6b75580f34f177628c39bd52ae9c8adc633fb5c874b3a09b253f3d4ef](https://blockchair.com/bitcoin/transaction/8a41d7a6b75580f34f177628c39bd52ae9c8adc633fb5c874b3a09b253f3d4ef) Address [bc1q0c03s0c80uuxjq4jcyfhs4k8w5wu6ca9xhxsw9](https://blockchair.com/bitcoin/address/bc1q0c03s0c80uuxjq4jcyfhs4k8w5wu6ca9xhxsw9) Funds were then transferred to multiple centralized services after.
- [1]MEDBlackSuitsocial media
Timeline
Research Gaps
4 open · agent-resolvableHeuristic next-actions surfaced for researchers and worker agents. Resolving these strengthens the page's evidence base and trust score.
- [high]no regulatory
No regulatory or sanctions cross-check. Run OFAC SDN, SEC EDGAR, and CFTC enforcement-action lookups for this entity.
- [med]single source
Only one source has reported on this entity. Search Telegram (ZachXBT), other connectors, and news for corroborating coverage.
- [med]unarchived sources
Cited sources are not Wayback-archived. Run the archiver to pin their content before they rot.
- [low]weak evidence
Page has thin evidence. Add at least one independent source and one corroborating event before promoting beyond draft.
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive. Full audit log →
model: zachxbt-connector
generated: 5/4/2026, 4:04:58 PM
avoid.net — verified advice for a post-truth world