{"id":55128,"date":"2021-12-23T15:33:06","date_gmt":"2021-12-23T13:33:06","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=55128"},"modified":"2025-09-03T23:49:48","modified_gmt":"2025-09-03T20:49:48","slug":"part-of-the-bitcoins-from-a-wallet-calling-itself-wexs-miner-moved-to-binance","status":"publish","type":"post","link":"https:\/\/u1f987.com\/en\/part-of-the-bitcoins-from-a-wallet-calling-itself-wexs-miner-moved-to-binance\/","title":{"rendered":"Part of the bitcoins from a wallet calling itself WEX\u2019s &#8216;miner&#8217; moved to Binance"},"content":{"rendered":"<p>Outgoing transactions from the address belonging to the extortionist demanding 120 BTC on behalf of the \u201cWEX exchange client\u201d lead to wallets of several trading platforms with mandatory user verification. About this <a href=\"https:\/\/t.me\/mendeleevshina\/29\">\u0441\u043e\u043e\u0431\u0449\u0438\u043b<\/a> CEO Indefibank Sergey \u041c\u0435\u043d\u0434\u0435\u043b\u0435\u0435\u0432 in his Telegram channel.<\/p>\n<p><a href=\"https:\/\/www.blockchain.com\/ru\/btc\/address\/1L8yxmvqGeaKGC64VzkBG9FJTP48RqeSct\">\u041e\u0434\u0438\u043d \u0438\u0437 \u0430\u0434\u0440\u0435\u0441\u043e\u0432<\/a> \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0438\u0442 \u0431\u0438\u0440\u0436\u0435 Binance. \u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u041c\u0435\u043d\u0434\u0435\u043b\u0435\u0435\u0432\u0430, \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043c\u043e\u0447\u044c \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u043c \u043f\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u044f\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043b\u0438\u0447\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430.<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u00ab\u0423\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0442\u044c, [\u0447\u0442\u043e \u0432\u0441\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0434\u043e \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043f\u043e\u043f\u0430\u0434\u0430\u043d\u0438\u044f \u043d\u0430 Binance \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0438\u0442 Costya Ransom], \u043a\u043e\u043d\u0435\u0447\u043d\u043e, \u043d\u0435\u043b\u044c\u0437\u044f. \u041d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0432 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430 \u0430\u0434\u0440\u0435\u0441\u0430 \u043d\u0430 Binance, \u0443 \u043d\u0435\u0433\u043e \u043c\u043e\u0436\u043d\u043e \u0443\u0437\u043d\u0430\u0442\u044c, \u043a\u0442\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u043b \u0435\u043c\u0443 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0438 \u0447\u0442\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0432\u0437\u0430\u043c\u0435\u043d. \u042d\u0442\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u0430 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f, \u0442\u0435\u043c \u0431\u043e\u043b\u0435\u0435 \u0447\u0442\u043e \u0442\u0430\u043c \u043d\u0435 20 \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u043e\u0432, \u0430 \u0432\u0441\u0435\u0433\u043e \u043f\u044f\u0442\u044c\u00bb, \u2013 \u0443\u0442\u043e\u0447\u043d\u0438\u043b \u043e\u043d \u0432 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 ForkLog.<\/p>\n<\/blockquote>\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"247\" src=\"https:\/\/u1f987.com\/wp-content\/uploads\/2021-12-23-18.08.26-1024x247.png\" alt=\"\u0427\u0430\u0441\u0442\u044c \u0431\u0438\u0442\u043a\u043e\u0438\u043d\u043e\u0432 \u0441 \u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0430 \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0441\u0435\u0431\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u043c WEX \u00ab\u043c\u0438\u043d\u0435\u0440\u0430\u00bb \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u043d\u0430 Binance\" class=\"wp-image-159963\" srcset=\"https:\/\/u1f987.com\/wp-content\/uploads\/2021-12-23-18.08.26-1024x247.png 1024w, https:\/\/u1f987.com\/wp-content\/uploads\/2021-12-23-18.08.26-300x72.png 300w, https:\/\/u1f987.com\/wp-content\/uploads\/2021-12-23-18.08.26-768x185.png 768w, https:\/\/u1f987.com\/wp-content\/uploads\/2021-12-23-18.08.26-1536x370.png 1536w, https:\/\/u1f987.com\/wp-content\/uploads\/2021-12-23-18.08.26-2048x494.png 2048w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption>Data: Crystal Blockchain.<\/figcaption><\/figure>\n<div class=\"wp-block-text-wrappers-update-2 article_update\"><time class=\"gtb_text-wrappers_update_time\">23 December 2021 | 19:48<\/time><span class=\"gtb_text-wrappers_update_head\">Update: <\/span><\/p>\n<p>Crystal Blockchain&#8217;s head of product Kirill Chihrazde in a ForkLog interview said that the specified address sends all transactions to Binance&#8217;s hot wallet.<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u00ab\u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0435 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u043e, \u0447\u0442\u043e \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0434\u0430\u0440\u043a\u043d\u0435\u0442-\u043e\u0431\u043c\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0435\u0433\u043e \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0434\u0435\u043f\u043e\u0437\u0438\u0442\u043d\u043e\u0433\u043e \u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0430 \u043d\u0430 \u0431\u0438\u0440\u0436\u0435. \u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u0446\u0435\u043f\u043e\u0447\u043a\u0438, \u0438\u0434\u0443\u0449\u0435\u0439 \u0441 \u0430\u0434\u0440\u0435\u0441\u0430 Costya Ransom, \u0435\u0441\u0442\u044c \u043c\u0435\u043b\u043a\u0438\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 \u0441 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u043f\u0430\u0442\u0442\u0435\u0440\u043d\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u0443\u0442 \u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043e\u0431\u043c\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438\u00bb, \u2013 \u0434\u043e\u0431\u0430\u0432\u0438\u043b \u043e\u043d.<\/p>\n<\/blockquote>\n<p>\u0410\u043d\u0430\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 <a href=\"https:\/\/vivigle.com\/BitWallet\/wallet?address=1L8yxmvqGeaKGC64VzkBG9FJTP48RqeSct\">\u0443\u043f\u043e\u043c\u0438\u043d\u0430\u044e\u0442<\/a> \u044d\u0442\u043e\u0442 \u0430\u0434\u0440\u0435\u0441, \u043a\u0430\u043a \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0439 Binance.<\/p>\n<\/div>\n<p>\u0420\u0435\u0434\u0430\u043a\u0446\u0438\u044f \u0437\u0430\u043f\u0440\u043e\u0441\u0438\u043b\u0430 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 \u0443 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0435\u0439 Binance, \u043d\u043e \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0442\u0432\u0435\u0442.<\/p>\n<p>\u041f\u043e\u043c\u0438\u043c\u043e \u044d\u0442\u043e\u0433\u043e, \u0447\u0430\u0441\u0442\u044c \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0441 \u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0430 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f \u0447\u0435\u0440\u0435\u0437 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0442\u0440\u0430\u043d\u0437\u0430\u043a\u0446\u0438\u0439 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u043d\u0430 \u0431\u0438\u0440\u0436\u0430\u0445 Kraken \u0438 Kucoin. \u041c\u0435\u043d\u0434\u0435\u043b\u0435\u0435\u0432 \u0434\u043e\u0431\u0430\u0432\u0438\u043b, \u0447\u0442\u043e \u044d\u0442\u0438\u043c \u0442\u043e\u0440\u0433\u043e\u0432\u044b\u043c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u043c \u043f\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u0438 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u043b\u0436\u043d\u044b \u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441\u044b, \u0445\u043e\u0442\u044f \u00ab\u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u0442\u0430\u043c \u0434\u043b\u0438\u043d\u043d\u0435\u0435 \u0438 \u0441\u0432\u044f\u0437\u0438 \u043d\u0435 \u0442\u0430\u043a \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u044b\u00bb.<\/p>\n<p>\u0413\u043e\u0432\u043e\u0440\u044f \u043e \u0442\u043e\u043c, \u043a\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0441\u0442\u043e\u044f\u0442\u044c \u0437\u0430 \u0441\u0435\u0440\u0438\u0435\u0439 \u043b\u043e\u0436\u043d\u044b\u0445 \u043c\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0439, \u044d\u043a\u0441\u043f\u0435\u0440\u0442 \u0443\u0442\u043e\u0447\u043d\u0438\u043b, \u0447\u0442\u043e \u043d\u0435 \u0432\u0435\u0440\u0438\u0442 \u043d\u0438 \u0432 \u043e\u0434\u043d\u0443 \u0438\u0437 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043a \u0440\u0430\u0441\u0441\u044b\u043b\u043a\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u0438\u0447\u0430\u0441\u0442\u0435\u043d \u043a\u0430\u043a \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0439 \u043a\u043b\u0438\u0435\u043d\u0442 WEX \u0438\u0437 \u041a\u0438\u0435\u0432\u0430, \u0442\u0430\u043a \u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044f \u041a\u043e\u043d\u0441\u0442\u0430\u043d\u0442\u0438\u043d\u0430 \u041c\u0430\u043b\u043e\u0444\u0435\u0435\u0432\u0430.<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u00ab\u042f \u043d\u0435 \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e \u043c\u044b\u0441\u043b\u0438, \u0447\u0442\u043e \u043a \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u043c\u0443 \u0431\u0440\u0435\u0434\u0443 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0445\u043e\u0442\u044c \u043a\u0430\u043a-\u0442\u043e \u043f\u0440\u0438\u0447\u0430\u0441\u0442\u0435\u043d \u041a\u043e\u043d\u0441\u0442\u0430\u043d\u0442\u0438\u043d, \u043d\u043e \u044f \u043d\u0435 \u0432\u0435\u0440\u044e \u0438 \u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 WEX, \u0438\u0445 \u0441\u043f\u0438\u0441\u043a\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b \u0438 \u0435\u0433\u043e \u0431\u044b \u043c\u043e\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e \u0432\u044b\u0447\u0438\u0441\u043b\u0438\u043b\u0438. \u0413\u043e\u0440\u0430\u0437\u0434\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0435\u0435 \u0442\u043e, \u043f\u043e\u0447\u0435\u043c\u0443 \u043c\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u043b\u0438\u0441\u044c? \u0427\u0442\u043e \u0441 \u0443\u0433\u043e\u043b\u043e\u0432\u043d\u044b\u043c \u0434\u0435\u043b\u043e\u043c? \u0421\u0432\u044f\u0437\u0430\u043d\u043e \u043b\u0438 \u043e\u043d\u043e \u0441 \u0434\u0435\u043b\u043e\u043c \u043f\u043e \u0441\u0430\u043c\u043e\u043c\u0443 WEX \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435 \u041c\u0412\u0414 \u0420\u0424? \u042d\u0442\u043e \u044f \u0434\u0430\u0436\u0435 \u043d\u0435 \u0441\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u044e, \u043a\u0443\u0434\u0430 \u0434\u0435\u043b\u0430\u0441\u044c \u043a\u0440\u0438\u043f\u0442\u0430 \u043d\u0430 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u044b \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432\u00bb, \u2013 \u043e\u0431\u044a\u044f\u0441\u043d\u0438\u043b \u041c\u0435\u043d\u0434\u0435\u043b\u0435\u0435\u0432.<\/p>\n<\/blockquote>\n<p>\u0421 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043d\u0430 \u043a\u043e\u0448\u0435\u043b\u0435\u043a \u00ab\u043c\u0438\u043d\u0435\u0440\u0430\u00bb \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u043b\u043e 0,11 BTC (\u0447\u0443\u0442\u044c \u0431\u043e\u043b\u0435\u0435 $5300 \u043d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442). \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u043f\u043e\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u0435 \u0434\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0438\u044e\u043d\u0435\u043c 2021 \u0433\u043e\u0434\u0430.<\/p>\n<p>Back in November 2019, a series of false bomb threats began in Russia, shortly after a BBC investigation into possible involvement of entrepreneur Konstantin Malofeyev and FSB officers in the theft of users&#8217; funds from the WEX exchange (the successor to BTC-e) totalling $450 million. An unknown \u201cminer\u201d demanded 120 BTC stolen from the exchange.<\/p>\n<p>To curb the miner&#8217;s activity, Roskomnadzor, at the FSB&#8217;s request, blocked StartMail and ProtonMail, which he used to send messages. ProtonMail later conducted its own investigation and removed accounts linked to the attacker.<\/p>\n<p>After that, the miner switched to various disposable-email services.<\/p>\n<p>In November, the Investigative Department of the Russian Interior Ministry refused to block funds totaling 10 016 ETH for WEX clients <a href=\"https:\/\/u1f987.com\/en\/news\/russias-interior-ministry-says-blocking-of-10016-eth-from-the-wex-exchange-was-premature\"> which had been withdrawn from the platform\u2019s wallet in September.<\/p>\n<p>Follow ForkLog&#8217;s bitcoin news on our Telegram \u2014 cryptocurrency news, prices and analysis.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Outgoing transactions from the address belonging to the extortionist demanding 120 BTC on behalf of the \u201cWEX exchange client\u201d lead to wallets of several trading platforms with mandatory user verification. One of the addresses belongs to Binance.<\/p>\n","protected":false},"author":1,"featured_media":55129,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[1350,1154,27],"class_list":["post-55128","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-btc-e-wex","tag-crimes","tag-russia"],"aioseo_notices":[],"amp_enabled":true,"views":"16","promo_type":"1","layout_type":"1","short_excerpt":"","is_update":"","_links":{"self":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/55128","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/comments?post=55128"}],"version-history":[{"count":1,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/55128\/revisions"}],"predecessor-version":[{"id":55130,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/posts\/55128\/revisions\/55130"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media\/55129"}],"wp:attachment":[{"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/media?parent=55128"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/categories?post=55128"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/u1f987.com\/en\/wp-json\/wp\/v2\/tags?post=55128"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}