BTC $64,224.76 +0.16%
ETH $1,868.76 +0.58%
BNB $568.12 +0.68%
XRP $1.09 +0.70%
SOL $74.33 +1.02%
TRX $0.3306 +0.01%
DOGE $0.0722 +4.84%
ADA $0.1639 +0.40%
BCH $209.20 -0.14%
LINK $8.36 +0.43%
HYPE $57.97 +1.07%
AAVE $91.30 -2.14%
SUI $0.7112 +0.13%
XLM $0.1778 +0.15%
ZEC $485.19 -1.38%
BTC $64,224.76 +0.16%
ETH $1,868.76 +0.58%
BNB $568.12 +0.68%
XRP $1.09 +0.70%
SOL $74.33 +1.02%
TRX $0.3306 +0.01%
DOGE $0.0722 +4.84%
ADA $0.1639 +0.40%
BCH $209.20 -0.14%
LINK $8.36 +0.43%
HYPE $57.97 +1.07%
AAVE $91.30 -2.14%
SUI $0.7112 +0.13%
XLM $0.1778 +0.15%
ZEC $485.19 -1.38%

rato

All
Article
Flash

The EU sanctions "the most active ransomware operator in history" Stern, involved in over 300 million dollars in ransom inflow

The United States, the European Union, and the United Kingdom jointly announced sanctions against a group involving state-level hacker organizations, cybercrime gangs, and their infrastructure providers. The targets are accused of causing billions of dollars in losses to global businesses, critical infrastructure, and government agencies. Among the most notable is the EU's sanction against the Russian cybercriminal Vitaly Nikolayevich Kovalev (alias "Stern").The EU has identified Stern as one of the core managers of the notorious Trickbot Group ransomware organization, which includes several high-risk ransomware variants such as Conti ransomware and Ryuk. On-chain analysis shows that wallet addresses associated with Stern have received over $300 million in ransom payments, potentially making him the "largest confirmed ransomware operator" to date. According to analysis, the $300 million only represents the profits obtained by Stern personally, and the overall illegal income of the Trickbot group may be much higher.On-chain fund flows indicate that Stern has had transactional connections with multiple ransomware ecosystems, including Ryuk, Conti, Diavol, Karakurt, Royal, and Quantum. Investigations show that Stern plays a role similar to "CEO" within the Trickbot organization, responsible for budget management, personnel recruitment, infrastructure procurement, and attack planning.

The Supreme Procuratorate issued a document: Systematically breaking through the threefold dilemma of using virtual currency for money laundering regulation in criminal law

According to a report by the Procuratorial Daily, researchers from the People's Procuratorate of Yuhu District, Xiangtan City, Hunan Province, and the Law School of Xiangtan University have jointly written an article proposing a systematic response plan to the regulatory dilemmas of money laundering crimes using virtual currency. The article points out that current judicial practice faces three major dilemmas: first, Article 191 of the Criminal Law limits money laundering crimes to seven types of upstream crimes, resulting in many cases being treated as "concealment crimes"; second, methods such as mixers, privacy coins, and cross-chain transfers lead to fragmented evidence chains, making traditional investigative methods difficult to penetrate; third, conflicts in the legal attributes of virtual currency, a vacuum in procedural rules, and barriers to cross-border cooperation make it difficult to recover assets.In response, the article suggests promoting "dual investigations for one case," establishing the principle of self-authentication of blockchain data, constructing a tiered standard of proof, and establishing a national-level custody and disposal platform for involved virtual currencies, while actively promoting the signing of special agreements for international criminal justice assistance in virtual currency crimes.

Key progress in the Qian Zhiming 60,000 Bitcoin case: Lantian Ge Rui enters through the litigation administrator, and the dispute over the applicability of Chinese and British law is in direct confrontation

According to Caixin, the case involving 60,000 bitcoins belonging to Qian Zhimin held a three-day hearing from July 7 to 9, 2026. Blue Sky Ge Rui Company officially joined the battle for bitcoin rights through the litigation administrator. The bitcoin dispute has transformed from a "two-party confrontation" into a "three-party competition": 1. The UK prosecution (DPP) claims that the assets should be recovered by the state; 2. The Chinese victims assert that they have property rights to the bitcoins that can be traced and have significantly appreciated in value; 3. The litigation administrator representing Blue Sky Ge Rui Company argues that the bitcoins are substitute assets formed after Qian Zhimin misappropriated company funds.It is reported that the estimated value of the bitcoins involved in the case is about 427,000 yuan each as of July this year, a 152-fold increase from the purchase price when Qian Zhimin acquired them in 2014 (2,815 yuan each). If the applicant can successfully assert their property rights to the relevant bitcoin assets, the amount they can recover will not be limited to the original investment loss but can also extend to the appreciation gains of the bitcoins. The litigation administrator representing Blue Sky Ge Rui Company believes that the bitcoins in question are essentially transformed from misappropriated company property, and the company has the right to trace them and assert property rights.Meanwhile, the Director of the UK Crown Prosecution Service (DPP) continues to insist that Chinese law should apply, while the leading law firm representing individual victims has proposed four complementary legal arguments to avoid the victims' claims being entirely dismissed due to any single legal pathway: 1. Bitcoin in the UK should be governed by UK law; 2. The investment contract is a scam, and upon cancellation, the rights revert to the victims; 3. The tracing mechanisms under POCA Sections 305 and 306 should also apply to the victims; 4. A "mixed structure" should break the binary choice between Chinese and UK law.

The Shanghai procuratorate in China has cracked a cross-border virtual currency exchange case, with the amount involved exceeding 200 million yuan

According to the disclosure from the People's Procuratorate of Jing'an District, Shanghai, recently, the court prosecuted a certain Li for suspected illegal business operations in a criminal gang that used virtual currency for cross-border money laundering and illegal foreign exchange. On June 10, the case was heard in court and a verdict was announced on the spot, marking a conclusion to a series of illegal business operations spanning three years and involving over 200 million yuan. In July 2024, the State Administration of Foreign Exchange discovered abnormal clues regarding Company Z using virtual currency to transfer assets for domestic clients during routine monitoring, and subsequently referred the case to the public security authorities for handling.Investigations revealed that Company Z was registered overseas in 2019, promoting itself under the guise of a "private bank" and developing a virtual banking app to create a facade of legitimacy, but it had not obtained the necessary foreign exchange business operation license in China and was essentially engaged in illegal foreign exchange activities. The gang targeted high-net-worth individuals with funding needs for overseas property purchases, immigration, and studying abroad, using intermediaries to attract clients, with customer managers, traders, and customer service personnel facilitating the currency exchange process. Clients purchased virtual currency from virtual currency exchangers with renminbi and transferred it to Company Z's overseas virtual wallet, after which the gang exchanged the virtual currency for foreign currency abroad and transferred it to the clients' designated overseas accounts. There was no actual cross-border flow of funds; instead, settlements were made through domestic and foreign capital pools, with Company Z charging a 3% currency exchange service fee and paying intermediaries a 0.5% commission.A total of nine individuals have been brought to justice in this case, while one main suspect is still under investigation. After review, the relevant personnel collectively violated national laws by illegally buying and selling foreign exchange, disrupting financial order, and the circumstances were serious or particularly serious, warranting criminal liability for illegal business operations. The court sentenced five individuals, including Gao and Li, to prison terms ranging from six years to two years and six months, and imposed fines ranging from 1.5 million yuan to 300,000 yuan; for Chen, Huang, and four others, due to lighter criminal circumstances, relatively smaller amounts involved, and voluntary confession, the procuratorial authority made a decision of relative non-prosecution according to the law.

CoinUp responds to recent market rumors: Zhu Pan is not the operator of the platform, and the volatility of CPX mainly comes from concentrated selling pressure in the market

According to official news from CoinUp, regarding recent market discussions about CoinUp and CPX, CoinUp stated that Zhu Pan is not the operator of the CoinUp platform and does not participate in the core operations of the platform; his role is solely as a project party for a project launched on the CoinUp platform.CoinUp also expressed gratitude to users, the community, and the media for their attention and supervision of CPX. In response to the recent significant short-term price fluctuations of the CPX/USDT trading pair, the platform previously announced that this fluctuation was mainly due to concentrated selling pressure from the market, and the specific reasons are currently under further investigation and verification, with updates to be provided in a timely manner based on the progress of the investigation.CoinUp emphasized that after a comprehensive security check of the platform, it has not suffered from hacker attacks, data breaches, or system vulnerabilities; the wallet system, account system, and asset custody are all in a secure and controllable state. The platform's recharge, withdrawal, and trading functions are operating normally, user assets are secure, and account data is complete, with no reported losses of user assets.CoinUp stated that it will continue to improve its risk control monitoring mechanisms, maintain market trading order, and advise users to rely on official channel information, view market fluctuations rationally, and pay attention to controlling trading risks.

The Qingdao procuratorate clarifies the property nature of virtual currency in a case involving the theft of 107 bitcoins

According to Shandong Legal News, a Bitcoin theft case prosecuted by the Li Cang District Prosecutor's Office in Qingdao has been sentenced. The defendant, Zhang, was sentenced to 10 years and 9 months in prison for theft and fined 100,000 yuan.In the early hours of a certain day in 2024, the virtual currency wallet of the victim, Feng, was quietly accessed, and 107 Bitcoins were transferred, equivalent to over 22.54 million yuan at the market price on that day. It was found that Feng had entrusted an acquaintance, Zhang, to assist with the operation. During the process of registering the wallet on behalf of Feng, Zhang obtained the mnemonic phrase, and after multiple attempts in the early morning, he cracked the wallet and transferred the Bitcoins. After being apprehended, Zhang claimed that his actions were a "protective takeover" to prevent the Bitcoins from being stolen by others. The prosecution traced the funds and found that the stolen Bitcoins were transferred multiple times and exchanged for over 660,000 yuan, exposing his lies.The prosecution determined that Bitcoin has economic value and exclusive control, meeting the core characteristics of "property" in criminal law, and can be the object of theft. The actual proceeds from the sale of the stolen Bitcoins, amounting to over 660,000 yuan, were used as the basis for the theft amount. After the defendant appealed, in November 2025, the Qingdao Intermediate People's Court ruled to dismiss the appeal and upheld the original sentence. This case is a typical example of Qingdao's legal punishment of crimes in the virtual currency field, clearly conveying the judicial stance: activities related to virtual currency must be conducted within the legal framework, and stealing others' virtual property also constitutes a crime.

THORChain has released a recovery plan for the attack incident, and voting for node operators has begun

THORChain has released its fourth update regarding the attack incident on May 15, and the proposal ADR028 has been announced, with voting for node operators now open.According to the recovery plan, the protocol will first absorb losses through its own liquidity, with the remaining portion to be shared by synthetic asset holders; the specific distribution ratio of the two is still under evaluation. The protocol's own liquidity will be reduced to zero, and will be gradually replenished through system revenue. This plan will not issue or sell RUNE, nor will it dilute any holders.On the technical side, GG20 will be temporarily retained and has completed patch upgrades. Trading will resume after the vulnerabilities are fixed and node rotation is successfully conducted, with a future release pace that is slower and more security-conscious. Innocent nodes located in the same vault as the attacker will be protected, while the attacker nodes will be fully confiscated. The recovered RUNE will be paired with the recovered assets, and any excess will be destroyed.The protocol also offers a white hat bounty to the attacker to recover funds; if some are returned, the recovery plan will be adjusted proportionally. THORChain remains neutral and permissionless, and there will be no review of the attacker's Swap transactions after trading resumes. Node operators are currently voting on the proposal direction, and the numbers in the ADR are only indicative, with adjustments to be made through Mimir later.
app_icon
ChainCatcher Building the Web3 world with innovations.