Tracing $450,000: A Dallas Pig Butchering Investigation
The Incident Overview
In late 2025, a DFW-based victim was targeted by a sophisticated investment syndicate utilizing the "HGRPE" trading application. The victim was induced to transfer a total of $450,000 through a combination of bank wires and high-volume cryptocurrency withdrawals from Coinbase.
Technical Evidence Extraction
Rollan Forensics was retained to audit the movement of 8.1095 ETH (approx. $17,000) that was withdrawn to a suspect non-custodial wallet. Our primary objective was to bypass the scammer's "layering" attempts to find a KYC-verified off-ramp.
[ HOP 1 ]: 0xF6c957... (Suspect L1 Wallet)
[ HOP 2 ]: Consolidation Cluster #422
[ FINAL ]: Off-ramp positive match: Binance.com Hot Wallet 20
The "Smoking Gun" Analysis
By utilizing proprietary on-chain heuristics, we tracked the stolen assets as they moved through multiple consolidation wallets. Unlike "recovery scammers" who promise to hack the blockchain, our lab focused on the Exchanges.
We successfully identified that the perpetrator moved the funds to a KYC-verified account at Binance. This provides the victim's legal counsel with a direct target for a criminal subpoena.
Outcome for the Victim
The resulting Forensic Evidence Report was prepared for the FBI IC3 and local Dallas Law Enforcement. It provided the exact transaction hashes and destination IPs needed for the issuance of a Subpoena Duces Tecum to Binance Holdings Ltd.