Skip to main content
Sign in

AudiA6 Crypto Laundering Network

avoid.net/audia6-crypto-laundering-network→0/100·95% conf.
[VERIFIED]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·c6R7dT…duKM

Summary

AudiA6 was a professional cryptocurrency money laundering service allegedly operating from 2021 through 2025, accused of processing approximately $389.7 million (EUR 336 million) in illicit funds for ransomware gangs and other cybercriminals. The service also administered the Dark2Web dark web cybercrime forum. A US-led international law enforcement operation dismantled AudiA6's infrastructure on June 10, 2026, and two alleged operators were arrested in Batumi, Georgia and charged by the US Department of Justice.

Connected Entities

1 entities · 10 linked investigations
Organizations
□AudiA6 Crypto Laundering Network
Relationships
    Also appears in
    Saga EVM Blockchain·32Mach-O Man Malware Campaign (Lazarus / Chollima)·0Trenton Richard Johnston·2Q2 2026 DeFi Record Hack Wave·0Luiz Carlos Capuci Jr.·0debank.auction·0Interpol Operation First Light 2026 — $123M Romance Scam Crypto Network·0Shunda Park Scam Compound·0Ledger·58Indonesia Pig Butchering Syndicate — Live Model Operation (2025-2026)·0
    Have evidence about AudiA6 Crypto Laundering Network?

    Timeline(7 events)

    1 January 2021

    AudiA6 cryptocurrency laundering service alleged to have launched operations, according to DOJ and on-chain analytics.

    US Secret Service / TRM Labs

    1 January 2022

    AudiA6 begins receiving illicit funds traceable to the 2022 LastPass data breach, according to later TRM Labs on-chain analysis.

    TRM Labs

    1 September 2025

    Polish police arrest one Ukrainian suspect in connection with a related AudiA6 investigation, providing an early investigative lead.

    Help Net Security / The Hacker News

    1 December 2025

    TRM Labs traces approximately $7 million in stolen LastPass funds from Wasabi Wallet to AudiA6 wallets using cluster-level demixing and timing analysis.

    TRM Labs

    10 June 2026

    Coordinated international law enforcement operation dismantles AudiA6. Ruslan Igorevich Tkachuk (37) and Alexander Vladimirovich Ledenev (25) are arrested in Batumi, Georgia. Over 30 servers seized, 25 domains taken down, 80+ vehicles seized, Telegram accounts blocked, and cryptocurrency assets frozen.

    DOJ / US Secret Service / Europol

    11 June 2026

    DOJ files criminal complaint in Eastern District of Pennsylvania. Europol and Chainalysis publish operational details. Seizure banners placed on AudiA6 and Dark2Web infrastructure.

    DOJ EDPA / Chainalysis / Europol

    12 June 2026

    Europol, Help Net Security, The Hacker News, and other outlets publish comprehensive coverage. TRM Labs identifies 20 distinct ransomware groups as AudiA6 customers.

    TRM Labs / Help Net Security
    Provenance & Audit Trail
    Anchored on SolanaVerify on-chain

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain (3 events). 0 of 12 cited source URLs have an Internet Archive snapshot.

    full audit log →version history →

    model: claude-sonnet-4-6

    generated: 9/1/2026, 11:52:56 PM

    last updated: 9/2/2026, 12:35:53 AM

    avoid.net — verified advice for a post-truth world