Golden Finance reports that “On-Chain Detective” ZachXBT posted on X platform revealing that Aleksandr Khinkis, a Russian OTC broker, has been suspected of assisting a ransomware group in laundering over $4.7 million since July 2025 through a single exchange account, involving three ransom payments totaling 796 Bitcoin. The investigation shows that the related funds were bridged from Bitcoin to Avalanche via cross-chain pathways and divided into 75 transfers to his exchange deposit address. Additionally, about $16.6 million is currently stored in Aave, but continues to be withdrawn in batches. ZachXBT pointed out that the suspect frequently operates in Southeast Asia and Australia, and his personal information has appeared multiple times in data breaches, which may complicate law enforcement across jurisdictions. He also urged victims to report relevant addresses promptly to improve freezing efficiency.