On the X platform, ZachXBT, a blockchain investigator, revealed that Russian over-the-counter (OTC) broker Aleksandr Khinkis is suspected of assisting a ransomware group in laundering over $4.7 million since July 2025 through a single exchange account, involving three ransom payments totaling 796 bitcoins. The investigation shows that the funds were bridged from Bitcoin to Avalanche via cross-chain methods and transferred to his exchange deposit address in 75 separate transactions. Additionally, approximately $16.6 million is currently deposited into Aave but is being continuously withdrawn in batches. ZachXBT points out that the suspect frequently operates in Southeast Asia and Australia, and his personal information has appeared in multiple data breaches. The cross-jurisdictional nature of the case may increase the difficulty of law enforcement, and he urges victims to report relevant addresses promptly to improve the efficiency of asset freezing.