Tracing stolen funds is different from recovering them
The strongest opportunity often appears when an on-chain flow reaches a centralised exchange, casino, payment processor or another custodial service.
Research & analysis3 min
Read the publication
MASTR · 2024–2026
Research & analysis · 3
Archived publication in the author’s original wording. Claims, figures and opinions belong to the date shown; inclusion does not establish them as independently verified facts.
229 · Selected publications · 3/10
Robinhood Chain: looking beneath the headline transaction count
To be honest, Robinhood Chain is not a serious financial network at the moment. Right now it is mostly a fresh liquidity venue being stress-tested by memecoins, bots, volatile pools and speculative volume.
Research & analysis5 min
North Korea-linked theft and the first-half 2026 record
They are organised, patient, funded, technically serious and fully aware that crypto still runs on weak humans, lazy security, rushed integrations and teams that spend more on marketing than on infrastructure hardening.
Research & analysis2 min
Robinhood Chain: permissions, bridges and operational control
I am seeing a huge amount of hype around the Robinhood Chain right now, and it already looks like the first wave of KOLs was paid very well to manufacture attention.
Research & analysis5 min
BonkDAO: an operational failure rather than a chain exploit
Here is a summary of what appears to have happened with #BonkDAO. So you can verify it yourself, here is everything I found:
Research & analysis3 min
ANSEM creator fees and liquidity: what the transfer establishes
That is at least a measurable step in the right direction, and deeper liquidity is obviously better than thin pools where every larger sell turns into chaos.
Research & analysis1 min
ANSEM’s market-making footprint: follow-up questions
Forget the low liquidity and anti-decentralised behaviour, the KOL bootlick shitcoin narrative, the backdoors and the volume bots for a second.
Research & analysis1 min
Crypto Rover’s Trump-linked promotions: archived examples
This is a selection of tweets from the brainrot account @cryptorover where this account praised Trump, $TRUMP, $WLFI, or the extraction machine behind it.
Research & analysis3 min
Ranking chain attention with an explicit proxy model
I tried to rank the major chains using a proxy model instead of pretending there is one perfect public dashboard for X mentions, web reports, on-chain activity, TVL and trading noise combined.
Research & analysis4 min
ANSEM: a market-cap screenshot meets the available pools
ANSEM: a market-cap screenshot meets the available pools. Dated original source, with context and links.
Research & analysis1 min
Crypto breaches and scandals: the first half of 2026
I listed only public bigger incidents, breaches, exploits, scams, fraud buckets and major crypto security scandals below.
Research & analysis14 min
ANSEM wallet behaviour: follow-up to the June 2026 investigation
It looks like a machine. One wallet acts as the trader, creates the movement and routes buys and sells. Is pumpfun behind it? Is the Solana cabal behind it?
Research & analysis4 min
TJR, ANSEM and LUKE: the shared-deployer investigation
This is not some anonymous wallet accidentally touching one ticker. This is the same creator identity repeatedly showing up around recognisable CT names, memes and public figures.
Research & analysis4 min
ANSEM: the original pool-by-pool liquidity map
I pulled together a liquidity map for $ANSEM liquidity pools, since I was already searching for stuff there anyway.
Research & analysis1 min
Coinbase’s AI costs and infrastructure dependencies
I went through Brian Armstrong’s own numbers and the follow-up reporting around Coinbase’s AI costs, and the story is much bigger than “company saves money on tokens.”
Research & analysis3 min
Binance’s MiCA application and the claims circulating on X
This time he is trying to turn Binance withdrawing its MiCA application in Greece into some grand ECB plot to destroy crypto liquidity for a future CBDC.
Research & analysis3 min
Binance: exchange accountability · 24 Jun 2026
Binance users in the Europe, did any of you receive an email from Binance saying they are unable to comply with MiCA by July 1 and that services may therefore be restricted or shut down in your country?
Research & analysis2 min
SecondFi: a wallet rebrand and the incident that followed
SecondFi is the rebranded Yoroi wallet, originally developed by Emurgo, one of Cardano’s founding entities alongside IOG and the Cardano Foundation.
Research & analysis3 min
Prediction-market promotion and manufactured success stories
According to the WSJ, Polymarket allegedly manufactured an illusion of ordinary young people getting rich through fake trades and fake wins.
Research & analysis4 min
Reading MiCA headlines without turning them into rumours
Idiots need to stop turning half understood headlines into propaganda when they clearly do not understand the rules they are screaming about.
Research & analysis3 min
How AI changes the scale and speed of attacks
AI will multiply the scale, speed and precision of attacks, but the ugly truth is that many of these incidents are not some mysterious act of cyber warfare.
Research & analysis3 min
Bots, Cloudflare traffic and the dead-internet debate
Humans are down to 43%. Across all HTTP requests, humans are still ahead with 66%, but the direction is obvious.
Research & analysis1 min
Zcash Orchard: reading the reported vulnerability and its limits
Over the last week, the entire zcash:native narrative was hit by one issue: a critical bug in Orchard, Zcash’s shielded privacy pool.
Research & analysis3 min
Paid promotion · 2 Jun 2026
Andrew Left, the founder of Citron Research, has been found guilty of securities fraud after prosecutors said he used his public influence to move markets through tweets and research calls, then traded around those moves for profit.
Research & analysis2 min