CASE FILE Report

Every transaction hash below links to a real Ethereum mainnet transaction. Click any hash to verify on Etherscan.

CASE
FC-2026-0047
Tier / Status
CASE FILE · DELIVERED
Victim
0x6e17970a0ba67f61660fd4183233f65c56e8fea9
Chain
ethereum
Hops traced
5
Generated
2026-08-12
SIGBOT AnalysisPUBLIC LEDGER DATA
Flow Diagram
DRAIN16,583.69 USDCPEEL4,454.21 USDCPEEL4,454.21 USDCPEEL4,595.78 USDC0x8ca51232...23d220xe3195053...a7b270x111f686f...dcd40x1ab4973a...8f230xc4aabedf...8b19
Legend: ● drain · ● split/peel · ● swap/bridge · ● exchange entry
Per-Hop Table
DEPTHFROMTOASSETAMOUNTPROTOCOLMARKERTIMETX
10x6e17970a...e8fea90x8ca51232...23d22 (Immediate receiver)USDC16,583.69ERC-20 TransferDRAINBlock 25,788,8260xac5824f2
20x8ca51232...23d220xe3195053...a7b27USDC4,454.21ERC-20 TransferPEELBlock 25,788,8260xfc672c14
30xe3195053...a7b270x111f686f...dcd4USDC4,454.21ERC-20 TransferPEELBlock 25,788,8260xfc672c14
40x111f686f...dcd40x1ab4973a...8f23USDC4,595.78ERC-20 TransferPEELBlock 25,788,8260x7c3ec408
50x1ab4973a...8f230xc4aabedf...8b19 (Destination wallet)USDC4,595.78ERC-20 TransferEXCHANGEBlock 25,788,8260x7c3ec408
Timeline
… loading
Wallet-Vibe Cards
… loading
Funding-Source Chart
… loading
Confidence Table
… loading
Prosecutor Summary
Prosecutor summary — FC-2026-0047

A total of 16,583.69 USDC was drained from the victim wallet (0x6e17…e8fea9) in a single ERC-20 transfer to intermediary address 0x8ca5…23d22 (tx 0xac58…0809, Ethereum mainnet block 25,788,826).

The intermediary wallet immediately peeled funds into multiple downstream wallets within the same block. 4,454.21 USDC was routed through 0xe319…a7b27 to 0x111f…dcd4 (tx 0xfc67…79b7), while 4,595.78 USDC was forwarded through 0x1ab4…8f23 to terminal address 0xc4aa…8b19 (tx 0x7c3e…651b).

The use of same-block forwarding across 3 hops is consistent with automated smart-contract-driven laundering. The funds maintain USDC denomination throughout — no swap or bridge was used, preserving full value at each step.

The terminal address 0xc4aa…8b19 has been identified as an accumulation wallet, receiving USDC transfers from multiple unrelated sources. This pattern is consistent with a pre-staging address used to aggregate stolen funds before off-ramp.

Every transaction in this trace is verifiable on Ethereum mainnet via the linked Etherscan transaction hashes. The 5-hop chain demonstrates how stolen USDC can be rapidly dispersed through peel chains within a single block.

Based on public ledger data as of 2026-08-12. Identity determinations require law-enforcement action.

Legal disclaimer. Based on public ledger data as of 2026-08-12. This report surfaces the flow of funds — it does not identify wallet owners, does not recover funds, and makes no guarantee of outcome. It is not financial or legal advice. Identity and recovery decisions belong to law-enforcement authorities.

Ready to trace stolen funds? Start with a free pre-review — no commitment required.