════════════════════════════════════════════════════════════════════════
  IOTA THEFT INVESTIGATION — EVIDENCE REPORT
  Generated: November 15, 2026
  Timestamp: 2026-11-15T01:08:12.071Z
════════════════════════════════════════════════════════════════════════

This report contains on-chain evidence of a systematic IOTA
cryptocurrency theft affecting 777 wallets. All data is sourced
from the public IOTA blockchain and can be independently verified
using the IOTAScan block explorer (https://iotascan.com).

  IMPORTANT — DATA ACCURACY NOTICE:
  • Only 4 cases are individually confirmed with verified tx hashes.
  • The "726+ victims" figure is an ESTIMATE based on automated
    pattern analysis (victim scoring heuristic, score >= 70).
  • Known thief-network intermediaries are excluded from the victim
    count to prevent double-counting, but false positives may remain.
  • Exchange totals are computed from on-chain transaction scanning
    when available, with static fallbacks when the API is unreachable.

────────────────────────────────────────────────────────────────────────
  1. SUMMARY
────────────────────────────────────────────────────────────────────────

  Confirmed cases:      4
  Likely victims:       726+
  Total stolen:         14,144,895 IOTA
  Sent to Binance:      0 IOTA
  Sent to KuCoin:       0 IOTA
  Sent to OKX:          692,219 IOTA
  Drain period:         Jun 2025 – Jun 2026
  Aggregator processed: 46,511,975 IOTA

────────────────────────────────────────────────────────────────────────
  2. CONFIRMED VICTIM CASES
────────────────────────────────────────────────────────────────────────

  Case: Case #1
  Status: CONFIRMED
  Address: 0x749974e5709607bbdd2ede919c120b47625cc011e312d55239e8db5701a8dc99
  Amount Stolen: 337,539 IOTA
  Date: 2025-09-17
  Theft TX: 4HsjhTeTxSSwEmPYLAnhS9zGWooA6p34JVNg6k36VznC
  Explorer: https://iotascan.com/mainnet/tx/4HsjhTeTxSSwEmPYLAnhS9zGWooA6p34JVNg6k36VznC
  Aggregator: 0x91c7ab819ff916133e71eedf69ca12a2f7ebca6b8e38795bd35c36a39e0a2bbd
  Notes: 337,539 IOTA moved across multiple transactions: 332,472 IOTA in main drain (Sep 17), +4,084 IOTA unstaked via Swirl Protocol (Sep 22), +983 IOTA remaining balance drained (Nov 4). All funds routed through flagged addresses to aggregator, then to KuCoin and Binance.

  Case: Case #2
  Status: CONFIRMED
  Address: 0x16f121780cb83cec0dedd0e63c4a30d1ae85b979544182e5ffd51aa12d3a8002
  Amount Stolen: 3,055.52 IOTA
  Date: 2025-12-17
  Theft TX: DnhgLYHMLNkf57aFCCH8RZ6zvL68x66y4eGoBfPkcnrG
  Explorer: https://iotascan.com/mainnet/tx/DnhgLYHMLNkf57aFCCH8RZ6zvL68x66y4eGoBfPkcnrG
  Intermediate: 0x4e44d8c0608958937321801a90a4e71a1e957a57081ec10aa8a50490f030218e
  Aggregator: 0x91c7ab819ff916133e71eedf69ca12a2f7ebca6b8e38795bd35c36a39e0a2bbd
  Notes: Reported ~6,000 IOTA moved. On-chain tracing confirmed 3,055.52 IOTA routed to same aggregator as Case #1.

  Case: Case #3
  Status: CONFIRMED
  Address: 0x41efed618bf8e8c3350edb6f42fbc6b1cdb5745c25ac364232be3530a046217d
  Amount Stolen: 46,500 IOTA
  Date: 2026-03-05
  Intermediate: 0xae45f51347384c5574fb30e72617afa0558641f0e388e6cf43ff4a8eeb2157ad
  Aggregator: 0x91c7ab819ff916133e71eedf69ca12a2f7ebca6b8e38795bd35c36a39e0a2bbd
  Notes: ~46,500 IOTA drained ~5 Mar 2026 (traced publicly by IF mods). Source 0x41ef → relay 0xae45 → main aggregator. Source and relay both verified 0 balance on-chain 2026-06-29.

  Case: Case #4
  Status: CONFIRMED
  Address: 0xe66d4f19b7159759bae0a26500c5dd4bd77029302c54255b710ee6f438a38b4a
  Amount Stolen: 943,615 IOTA
  Date: 2026-06-04
  Theft TX: GgoVXU2hWQUwJEeTtugr4xZCn1WLuK9kccMYyokYeDNr
  Explorer: https://iotascan.com/mainnet/tx/GgoVXU2hWQUwJEeTtugr4xZCn1WLuK9kccMYyokYeDNr
  Intermediate: 0x2078792827cf7ae6d8a55d71cd3d3eb40d68c9ae53e2d56ca43e00e78260a22f
  Aggregator: 0x91c7ab819ff916133e71eedf69ca12a2f7ebca6b8e38795bd35c36a39e0a2bbd
  Notes: PROVISIONAL amount. Forensic trace (victim's team, Book1.xlsx) attributed 943,615 IOTA to this victim across two main-aggregator outputs (50,167 → Binance feeder; 893,448 → Cream/Ankr/TokenLabs staking via 0xef45), both flagged 'comingled funds from different sources'. The origin wallet 0xe66d drained ~4.36M total on 3-4 Jun 2026, but ~3.25M of that went direct to KuCoin with no client attribution, so it is NOT counted here pending victim confirmation that 0xe66d is solely their wallet. Origin + relays verified 0 balance on-chain 2026-06-29.

────────────────────────────────────────────────────────────────────────
  3. KEY ADDRESSES (with current balances)
────────────────────────────────────────────────────────────────────────

  Main Aggregator (laundering hub):
  Main Aggregator (398K)
    Address: 0x91c7ab819ff916133e71eedf69ca12a2f7ebca6b8e38795bd35c36a39e0a2bbd
    Balance: 75,027.741 IOTA (live at time of report)
    Explorer: https://iotascan.com/mainnet/account/0x91c7ab819ff916133e71eedf69ca12a2f7ebca6b8e38795bd35c36a39e0a2bbd

  Binance Feeder:
  Binance Feeder
    Address: 0x03a26b0e17b47ab7244ccc48e137523cc4d49bcec1eee15323b8f540dd1c62fb
    Balance: 0.001 IOTA (live at time of report)
    Explorer: https://iotascan.com/mainnet/account/0x03a26b0e17b47ab7244ccc48e137523cc4d49bcec1eee15323b8f540dd1c62fb

  Staking Wallet:
  Staking Wallet
    Address: 0xb3df753351b41758b9b9ff12bd4c7b73934382076b60430c7df2d8d1f2564b1f
    Balance: 0 IOTA (live at time of report)
    Explorer: https://iotascan.com/mainnet/account/0xb3df753351b41758b9b9ff12bd4c7b73934382076b60430c7df2d8d1f2564b1f

  L2 Split Addresses:
  L2-Split-1
    Address: 0xc292a1a08e31aa72781ab140e142876aeb0d0b71f9867d4ccf33f091d18e17af
    Balance: 0 IOTA (live at time of report)
    Explorer: https://iotascan.com/mainnet/account/0xc292a1a08e31aa72781ab140e142876aeb0d0b71f9867d4ccf33f091d18e17af

  L2-Split-2
    Address: 0xe9198e55bcf3332bf57746de0b62a1fe65bb806be0c4b57663ec7f8694fbbf01
    Balance: 0 IOTA (live at time of report)
    Explorer: https://iotascan.com/mainnet/account/0xe9198e55bcf3332bf57746de0b62a1fe65bb806be0c4b57663ec7f8694fbbf01

  L2-Split-3
    Address: 0x76e68420e91381ded15e3ee08d17317a608b1ff12e79d0068439ecaed27a4c3a
    Balance: 0 IOTA (live at time of report)
    Explorer: https://iotascan.com/mainnet/account/0x76e68420e91381ded15e3ee08d17317a608b1ff12e79d0068439ecaed27a4c3a

  L2-Split-4
    Address: 0x7a8a8528961baea2b14a72acd44d10b2801b4fec204613d78bbb643e3883f706
    Balance: 0 IOTA (live at time of report)
    Explorer: https://iotascan.com/mainnet/account/0x7a8a8528961baea2b14a72acd44d10b2801b4fec204613d78bbb643e3883f706

  L2-Split-5
    Address: 0x45dcbd7157f68c230c5b3ce380a86818fa553fcc2f261752a6a9154276944373
    Balance: 0 IOTA (live at time of report)
    Explorer: https://iotascan.com/mainnet/account/0x45dcbd7157f68c230c5b3ce380a86818fa553fcc2f261752a6a9154276944373

  L2-Split-6 (0x1dbe)
    Address: 0x1dbe27c296b3abbe1b5fb63d7cab869ab2c85005f1764c622545b62cdcc4b848
    Balance: 1,339.826 IOTA (live at time of report)
    Explorer: https://iotascan.com/mainnet/account/0x1dbe27c296b3abbe1b5fb63d7cab869ab2c85005f1764c622545b62cdcc4b848

  L2-Split-7 (0x102b)
    Address: 0x102b11bdd2370b26144f6ccbe11cb0be066641d236e19435e3cedc91a09e9594
    Balance: 0 IOTA (live at time of report)
    Explorer: https://iotascan.com/mainnet/account/0x102b11bdd2370b26144f6ccbe11cb0be066641d236e19435e3cedc91a09e9594

  L2-Split-8 (0x3df7)
    Address: 0x3df73ec3230b8685d0c63399412c5a99d94e3a3f286b21ffaf18a5ab016b8149
    Balance: 10.123 IOTA (live at time of report)
    Explorer: https://iotascan.com/mainnet/account/0x3df73ec3230b8685d0c63399412c5a99d94e3a3f286b21ffaf18a5ab016b8149

  L2-Split-9 (0xcf4c)
    Address: 0xcf4c7b567e36425b435a2807b518623df5819b336df44b4eadc5a8701da80c00
    Balance: 2.265 IOTA (live at time of report)
    Explorer: https://iotascan.com/mainnet/account/0xcf4c7b567e36425b435a2807b518623df5819b336df44b4eadc5a8701da80c00

  Relay 0xae45 (Case #3)
    Address: 0xae45f51347384c5574fb30e72617afa0558641f0e388e6cf43ff4a8eeb2157ad
    Balance: 0 IOTA (live at time of report)
    Explorer: https://iotascan.com/mainnet/account/0xae45f51347384c5574fb30e72617afa0558641f0e388e6cf43ff4a8eeb2157ad

  Relay 0xdfba (Case #4)
    Address: 0xdfba02d164a8a8e91475a607ac4545f670b0df9e496897eb8f90c7635756e493
    Balance: 0 IOTA (live at time of report)
    Explorer: https://iotascan.com/mainnet/account/0xdfba02d164a8a8e91475a607ac4545f670b0df9e496897eb8f90c7635756e493

  Relay 0xae38 (Case #4)
    Address: 0xae381a2d67aa5f6601c130d5de2d1ae2b79a7641ea9514aa78f51c2ad947dd97
    Balance: 0 IOTA (live at time of report)
    Explorer: https://iotascan.com/mainnet/account/0xae381a2d67aa5f6601c130d5de2d1ae2b79a7641ea9514aa78f51c2ad947dd97

  Relay 0xa844 (Case #4)
    Address: 0xa844388c990818844679459594b2f5a1165ab761002ce077d2bdb5d11f960730
    Balance: 0.049 IOTA (live at time of report)
    Explorer: https://iotascan.com/mainnet/account/0xa844388c990818844679459594b2f5a1165ab761002ce077d2bdb5d11f960730

  Relay 0x2078 (Case #4)
    Address: 0x2078792827cf7ae6d8a55d71cd3d3eb40d68c9ae53e2d56ca43e00e78260a22f
    Balance: 0.723 IOTA (live at time of report)
    Explorer: https://iotascan.com/mainnet/account/0x2078792827cf7ae6d8a55d71cd3d3eb40d68c9ae53e2d56ca43e00e78260a22f

  Relay 0x5e03 (Case #4)
    Address: 0x5e03e5ff929b90674ca71d265ee8407bd9a061dad5b7b52adb2beb7f3d09e858
    Balance: 0 IOTA (live at time of report)
    Explorer: https://iotascan.com/mainnet/account/0x5e03e5ff929b90674ca71d265ee8407bd9a061dad5b7b52adb2beb7f3d09e858

  Relay 0xae47 (Case #4)
    Address: 0xae47f1c6a903b6bbcfd85d8d8bf7df0a52b01e8bb5f963d57e3981c54bc252c1
    Balance: 0.097 IOTA (live at time of report)
    Explorer: https://iotascan.com/mainnet/account/0xae47f1c6a903b6bbcfd85d8d8bf7df0a52b01e8bb5f963d57e3981c54bc252c1

  Relay 0xe373 (Case #4)
    Address: 0xe3738ed7bb27322dbb3d88c85155bf1016cfe9365382235bcfb869893879b58d
    Balance: 0 IOTA (live at time of report)
    Explorer: https://iotascan.com/mainnet/account/0xe3738ed7bb27322dbb3d88c85155bf1016cfe9365382235bcfb869893879b58d

  Exchange Wallets (destinations):
  KuCoin Hot Wallet
    Address: 0x96af1639b31210ff22641fb2e19085a4fae0a5c6d8a282b9452208427cd04f9f
    Explorer: https://iotascan.com/mainnet/account/0x96af1639b31210ff22641fb2e19085a4fae0a5c6d8a282b9452208427cd04f9f

  KuCoin 1
    Address: 0xc2e0c96a5d1139af04516650328b4b087522c1f6c2d51f665a45967d4c2caee1
    Explorer: https://iotascan.com/mainnet/account/0xc2e0c96a5d1139af04516650328b4b087522c1f6c2d51f665a45967d4c2caee1

  Binance
    Address: 0x5b8bc6d08c969775fea5bb15a712cbfad696cda1c6fb1354f4262f356dc40d7a
    Explorer: https://iotascan.com/mainnet/account/0x5b8bc6d08c969775fea5bb15a712cbfad696cda1c6fb1354f4262f356dc40d7a

  Binance Deposit
    Address: 0x1732a708e949037f1f49c3fc920832bb420704aabc659e195ad6763e23c8d9be
    Explorer: https://iotascan.com/mainnet/account/0x1732a708e949037f1f49c3fc920832bb420704aabc659e195ad6763e23c8d9be

  Bitfinex
    Address: 0x291b3142bc9df9f658cd96e2bdafa93f9948d0aca9baa99077ee630a6fe92c84
    Explorer: https://iotascan.com/mainnet/account/0x291b3142bc9df9f658cd96e2bdafa93f9948d0aca9baa99077ee630a6fe92c84

  OKX
    Address: 0x2ab07ce8498aa3c556fc1dbcbbba8ce40bcec7296e2aafbe5832592db046e9bd
    Explorer: https://iotascan.com/mainnet/account/0x2ab07ce8498aa3c556fc1dbcbbba8ce40bcec7296e2aafbe5832592db046e9bd

  BitMart
    Address: 0x71bf9097f3403a37ef5b8795287692db98ba71850c8f95dee5ba53f7ab6ec3dc
    Explorer: https://iotascan.com/mainnet/account/0x71bf9097f3403a37ef5b8795287692db98ba71850c8f95dee5ba53f7ab6ec3dc

  KuCoin Feeder Addresses:
  KuCoin Intermediary
    Address: 0x47020bacae58c6fb213b5342b3237d356b630f90550dc18e3824502a88a9bfc3
    Balance: 1.451 IOTA (live at time of report)
    Explorer: https://iotascan.com/mainnet/account/0x47020bacae58c6fb213b5342b3237d356b630f90550dc18e3824502a88a9bfc3

  KuCoin Feeder 1
    Address: 0x13e0bee27b0a1a47dda56dcaa904f47ba9f48f17e8ba5c06290f424081f665c0
    Balance: 0.776 IOTA (live at time of report)
    Explorer: https://iotascan.com/mainnet/account/0x13e0bee27b0a1a47dda56dcaa904f47ba9f48f17e8ba5c06290f424081f665c0

  KuCoin Feeder 2
    Address: 0x07324e8d94934f96d9d75301bbfba6f44ef19196b0657bcf99ff3e6f94d622d0
    Balance: 0.825 IOTA (live at time of report)
    Explorer: https://iotascan.com/mainnet/account/0x07324e8d94934f96d9d75301bbfba6f44ef19196b0657bcf99ff3e6f94d622d0

  KuCoin Feeder 3
    Address: 0x36cc553ef3f467a8290f5dfb94f45724620784e1ce960aa26593714c9f7f7119
    Balance: 2.134 IOTA (live at time of report)
    Explorer: https://iotascan.com/mainnet/account/0x36cc553ef3f467a8290f5dfb94f45724620784e1ce960aa26593714c9f7f7119

  KuCoin Passthrough
    Address: 0x339c139620240e4d5297b144389845491507a0624b47f680b0539bb63e9a5e95
    Balance: 1.067 IOTA (live at time of report)
    Explorer: https://iotascan.com/mainnet/account/0x339c139620240e4d5297b144389845491507a0624b47f680b0539bb63e9a5e95

────────────────────────────────────────────────────────────────────────
  4. TIMELINE OF EVENTS
────────────────────────────────────────────────────────────────────────

  [2025-06-23] Earliest addresses drained
    The network begins draining IOTA wallets. Over the following months, hundreds of addresses will be affected.

  [2025-09-08] Mass drain event
    Large cluster of addresses drained on a single day — suggests automated exploit.

  [2025-09-17] Case #1 — 337,539 IOTA drained
    332,472 IOTA drained in main event, plus 4,084 IOTA unstaked and 983 IOTA swept later.
    TX: https://iotascan.com/mainnet/tx/4HsjhTeTxSSwEmPYLAnhS9zGWooA6p34JVNg6k36VznC
    Amount: 337,539 IOTA

  [2025-09-17] Case #1 funds split into 5 addresses
    Funds immediately split: 159K, 55K, 53K, 35K, 30K IOTA across 5 L2 wallets.

  [2025-09-17] 52,500 IOTA deposited to KuCoin
    19,999.95 + 32,499.95 IOTA from Case #1 deposited to KuCoin from L2 split path.
    TX: https://iotascan.com/mainnet/tx/DR5RXTpi1SBjb479m6e8jpWDvALfxehDgkfoTMx3BsZ9
    Amount: 52,500 IOTA

  [2025-09-22] Unstake & move 4,084 IOTA from Case #1 wallet
    Subject (still controlling Case #1's compromised wallet) unstakes time-locked staking positions (+209.82 + 3,859.68 IOTA) via Swirl Protocol, then sends 4,084.5 IOTA to flagged address → aggregator → staking.
    TX: https://iotascan.com/mainnet/tx/7NSaL8VD6BMhpkVLcZetzHPsrgfsbCEVGoZN4aw3wpFd
    Amount: 4,084.5 IOTA

  [2025-09-22] Case #1 funds flow to aggregator
    L2 splits drip-feed ~169,000 IOTA to the main aggregator address (0x91c7ab81...) over 5 weeks (Sep 22 – Oct 30), joining funds from 725+ other addresses matching drain patterns.
    Amount: 169,000 IOTA

  [2025-09-22] 10 IOTA gas returned to helper → KuCoin
    10 IOTA gas money returned to helper address (0x05bf0d81...), which was used to fund unstaking operations on the compromised wallet. Helper address later sends funds to KuCoin.
    TX: https://iotascan.com/mainnet/tx/VEnRZnWtnVC8J7VvArr6k9LD6hY7eUi35jtdACnFvcL
    Amount: 10 IOTA

  [2025-11-04] Remaining 982.97 IOTA drained → Binance
    Subject (still controlling Case #1's wallet) collects remaining balance (airdrops + residual) and sends 982.97 IOTA to flagged address → intermediaries → Binance hot wallet.
    TX: https://iotascan.com/mainnet/tx/ADSVaHEnsh5V6Vo2EGypyyiavEyeoYMApbffdftk5bBf
    Amount: 982.97 IOTA

  [2025-12-17] Case #2 — 3,055 IOTA drained
    Second confirmed case. 3,055.52 IOTA drained and routed through intermediate address to the same aggregator.
    TX: https://iotascan.com/mainnet/tx/DnhgLYHMLNkf57aFCCH8RZ6zvL68x66y4eGoBfPkcnrG
    Amount: 3,055.52 IOTA

  [2025-12-31] 86,428 IOTA → Binance
    Aggregator sends batch to Binance via feeder address.
    TX: https://iotascan.com/mainnet/tx/FsX3X24w3qXfyve2DyhH44yEMe8ykC8nGJUqaHTtaH9E
    Amount: 86,428 IOTA

  [2026-01-01] 109,344 IOTA → Binance
    New year exchange deposits continue.
    TX: https://iotascan.com/mainnet/tx/BTwfcSx6rGvoTabeDQRxuB3fBcWiyuxbv6o6WUz86MJG
    Amount: 109,344 IOTA

  [2026-01-18] 78,447 IOTA → Binance
    Aggregator → feeder → Binance hot wallet.
    TX: https://iotascan.com/mainnet/tx/Dj7BTRV9euvY96tUzbA3xxn9DMohTkg1AsCr9Z8mezo6
    Amount: 78,447 IOTA

  [2026-01-20] 102,092 IOTA → Binance
    Continuing daily Binance deposits.
    TX: https://iotascan.com/mainnet/tx/3kfvuZJs5gfsqETU4riDpZeAitwtXAbmvUoeUKi9C9Ji
    Amount: 102,092 IOTA

  [2026-01-21] 100,183 IOTA → Binance
    Batched exchange deposit.
    TX: https://iotascan.com/mainnet/tx/FWx9pnupoi8pyJuNbu2W46UT9D8w7yjtunr3o79yqD2n
    Amount: 100,183 IOTA

  [2026-01-22] 109,478 IOTA → Binance
    Continued routing.
    TX: https://iotascan.com/mainnet/tx/2z8B7yiGgjjd2rXczT4o24iHcxTTjG899rcwRFgkqiwD
    Amount: 109,478 IOTA

  [2026-01-23] 265,242 IOTA → Binance (3 txs)
    Three deposits in one day: 100K + 73.3K + 91.9K IOTA.
    TX: https://iotascan.com/mainnet/tx/6Fk94peyh7Nz9F3VkV9sCLL2dhF2nj9umhn8DSHXFc9N
    Amount: 265,242 IOTA

  [2026-01-25] Police report filed
    Formal complaint submitted to police with on-chain evidence.

  [2026-01-26] 80,946 IOTA → Staking
    Aggregator moves funds to staking wallet — funds also being staked for rewards.
    TX: https://iotascan.com/mainnet/tx/BCpHfj2kvKEwPeiKyevrtctRwvZPNp7KXvPMLm8aRzax
    Amount: 80,946 IOTA

  [2026-02-10] 2,071 IOTA → KuCoin path
    Aggregator sends 2,071 IOTA to KuCoin intermediary (0x47020bac...). Part of ongoing small-batch routing.
    TX: https://iotascan.com/mainnet/tx/7RXj2GMbWeJy7bxrYLQLWSKtUbjYjsjsZGTQaE6Y3RQD
    Amount: 2,071 IOTA

  [2026-02-12] 72,561 IOTA → Binance
    Fresh routing activity detected: aggregator → Binance feeder → Binance hot wallet.
    TX: https://iotascan.com/mainnet/tx/87Q3A64Ls4DhCcH1iQAre7HfQvPdHrDcoxGzbvvgPjDZ
    Amount: 72,561 IOTA

  [2026-02-13] 4,063 IOTA → KuCoin path
    Aggregator sends 4,063 IOTA to KuCoin intermediary (0x47020bac...). Continued small-batch KuCoin deposits.
    TX: https://iotascan.com/mainnet/tx/97zEm65aMLHE679o
    Amount: 4,063 IOTA

  [2026-02-16] Alert triggered — new movement
    +410 IOTA received into aggregator, then 1,034 IOTA sent to KuCoin path. Network still active.
    TX: https://iotascan.com/mainnet/tx/7EV8d1ixpXKMo3dZHkR8JHpjyVP5FPb5M5FVKxN9vEYd
    Amount: 1,034 IOTA

  [2026-02-17] Police report updated
    Updated police report with Binance, KuCoin, and OKX evidence: Binance (9,009,841 IOTA via feeder, 83 txs), KuCoin (996,668 IOTA via 4 feeders), OKX (692,219 IOTA via aggregator). Investigation ongoing.

────────────────────────────────────────────────────────────────────────
  5. FUND FLOW SUMMARY
────────────────────────────────────────────────────────────────────────

  Victim Wallets
       ↓
  Thief (L1) — single hop
       ↓
  L2 Splits (5 addresses) — obfuscation layer
       ↓
  Main Aggregator — consolidates from 777 addresses
       ↓
  ┌────────────────┬────────────────┬────────────────┬────────────────┐
  │  Binance       │  KuCoin        │  OKX           │  Staking       │
  │  0 IOTA        │  0 IOTA        │  692K IOTA     │  399K+ IOTA    │
  │  (83 txs)      │  (4 feeders)   │  (IOTAScan)    │  (validators)  │
  └────────────────┴────────────────┴────────────────┴────────────────┘

────────────────────────────────────────────────────────────────────────
  6. HOW TO VERIFY
────────────────────────────────────────────────────────────────────────

  All data in this report can be independently verified:

  1. Visit https://iotascan.com
  2. Search for any address or transaction hash listed above
  3. Confirm the balance changes and fund flows match this report

  IOTA Indexer API (programmatic verification):
  POST https://indexer.mainnet.iota.cafe/
  Method: iotax_queryTransactionBlocks
  Method: iotax_getBalance

════════════════════════════════════════════════════════════════════════
  END OF EVIDENCE REPORT
  Generated by IOTA Heist Investigation Dashboard
  2026-11-15T01:08:12.071Z
════════════════════════════════════════════════════════════════════════