Co-Insecure Part 1

Coinsecure’s update about the incident shared on 13 April 2018 that mentions the bitcoin address to which hacked btc were sent:

https://blockchair.com/bitcoin/outputs?q=recipient(1BaEJquitskdXcTj53Uy6PuUtJ5a8ETWpA)&s=spending_transaction_id(asc),time(asc)#

There are lot of transactions involved in this and I checked few of them which had links to darknet mixers like Bitcoin Fog, exchanges like Huobi, Binance, Bitfinex, Poloniex however they are too complex and will take time for me to analyze each of them.

I will start with easy to analyze transactions and cover the rest in other parts of this research.

Tx: 661ad2dd5527d1fe387d7473224e1d1269b5423451a7fd420c7a75ff56718920

~28 BTC spent in which most of the inputs are from
1BaEJquitskdXcTj53Uy6PuUtJ5a8ETWpA

Following the bigger amounts spent this reached to Huobi exchange address

A

B

Conclusion:

16QKc9QC7wQoMyhf2DjWfSYapvLTsktWe4 can be a hot wallet on huobi exchange where BTC is received from 1FwnyfBQzghs51xBvTkFEZkveyhmAm1JpT and 15iPcoKVkJKNxJN9k99k5iR5PYBZ4CpoQE in A and B in the last part before going to Huobi cold storage.

I started expanding the transactions and following inputs and outputs from here: https://oxt.me/graph/transaction/tiid/1678702430

This analysis most probably wont be helpful to trace anyone because none of these huobi addresses mentioned above look active in 2019 and funds would have already moved out of Huobi long back. Hopefully I will find some other transaction which may be helpful.