Other blackmail report VR-0E90FB07

Type

Theft

Reported as

Other blackmail

Chain

ethereum

Reported by

DenysInvestigator

Incident date

Apr 20, 2026

Published

Sep 9, 2026

What happened

Second violent robbery in the same ZachXBT investigation, published 24 August 2026. On 20 April 2026 multiple attackers targeted a victim in France, tied them up and threatened them until they surrendered ~$110K in crypto. The stolen funds went to 0x3000d2A2ef9Bd8b614b368408768a6e25Bf4dE0F. Laundering path per ZachXBT: the funds were bridged to Ethereum and ~46 ETH (~$107K) was laundered through a Kucoin deposit address. Timing analysis on the matching Kucoin withdrawal identified 0x5fb7194CC893CdC8339fA1bD7E8B52cDB3d3d075, which then consolidated with proceeds from the first robbery. Both addresses in this report belong to the same operation: - 0x3000d2A2ef9Bd8b614b368408768a6e25Bf4dE0F — theft address, received the stolen funds directly - 0x5fb7194CC893CdC8339fA1bD7E8B52cDB3d3d075 — received the Kucoin withdrawal after laundering The investigation attributes both April 2026 robberies to a French actor operating as M1llionz / RichMilly666, $667K taken across the two incidents. The first robbery (17 April, ~7.2 BTC) is filed separately as VR-5B01D18E. ZachXBT's work led to a $93K Tether freeze tied to the case. Category note: physical coercion, not an online scam. The form has no category for robbery or extortion under physical threat, so this is filed under the closest available option (other blackmail). Source: ZachXBT thread, https://x.com/zachxbt/status/2091858014236295170 (posts 4/ and 5/ name these addresses). Filed by PublicAML from public reporting, not by a victim.

Addresses named in this report

• 0x3000d2A2ef9Bd8b614b368408768a6e25Bf4dE0F
• 0x5fb7194CC893CdC8339fA1bD7E8B52cDB3d3d075

Named here and believe it is wrong? Open the address page above and use the flag on the assessment. Every dispute is read.