BTC-e → WEX Successor Chain

Evidentiary Pillars : BTC-e/WEX Continuity

Operator Profiles (Full Roster)

Disputed Assessments

Single Source The entire FSB-expropriation account rests on one underlying investigation: Bilyuchenko's testimony to Russian investigators plus BBC-obtained audio recordings authenticated by forensic experts (BBC Russian Service, Andrey Zakharov, Nov 2019). It is widely re-reported (Meduza, Moscow Times, OCCRP, CoinDesk) but never independently confirmed by any Western government or blockchain-forensics attribution. Malofeev denies everything. The on-chain outflow of ~30,000 BTC and ~700,000 LTC in April 2018 is itself verifiable; the FSB destination is not.

Analyst Inference Chainalysis's description of the November 2022 movement as "the largest withdrawal by BTC-e's controllers since April 2018" independently confirms that major operator-controlled outflows occurred in April 2018, consistent with, but not proof of, the BBC account's timing.

Exchange Mechanics

Confirmed Centralized spot exchange: BTC, LTC, and altcoins against USD, RUB, and EUR, with internal "code" instruments (transferable balance codes) that functioned as a bearer-value layer popular with cash-out brokers. Users could buy, sell, and store largely anonymously; accounts required only a username, password, and email address. [DOJ 2017, FinCEN]

Confirmed WEX replicated the product set one-for-one at launch, including trading pairs and the token-for-frozen-balance mechanism. [CoinDesk 2017]

KYC/AML : Stated Policy vs. Observed Behavior

Fiat Rail Analysis (Mandatory)

Confirmed No conventional named banking relationships are documented for BTC-e; that absence was structural, not an intelligence gap in the ordinary sense. Fiat moved through shell companies and third-party processors rather than exchange-named bank accounts. The one hard documented fiat reservoir: Canton Business Corporation balances of ~USD $89.68M (plus AUD/RUB/GBP) held at FXOpen / XP Solutions Limited (New Zealand/Australia), restrained under a Dec 2019 NDCA warrant, subject of the June 2020 NZ Police NZ$140M restraint (largest in NZ Police history), and claimed again in the 2025 U.S. forfeiture complaint. [NZ Police, DOJ complaint 2025]

Credible Czech bank accounts of Nano ABC LP appear as additional defendant property in the 2025 complaint, indicating a further European fiat holding channel. [DOJ complaint 2025, Dynamis]

Licensing and Regulatory Standing

Confirmed No license in any jurisdiction at any time. FinCEN treated BTC-e as a foreign-located MSB doing U.S. business without registration; no EU/UK authorization existed for Always Efficient LLP, which filed dormant-style accounts under nominee officers until they resigned in September 2017. [FinCEN, Companies House]

Domains and Hosting

Platform Continuity and Codebase

Confirmed WEX reproduced BTC-e's interface, feature set, and trading pairs and imported the customer database wholesale : the clearest platform-level continuity indicator in the lineage. [CoinDesk 2017, BBC]

Post-Disruption Resilience Assessment

Volume Estimates by Source

Three-Phase On-Chain Flow

Phase 1 : Receipt

Confirmed Documented criminal inflows per the 2025 forfeiture complaint: at least $68.3M from darknet marketplaces, $14.0M from fraud shops, $10.3M from ransomware perpetrators, $20.0M from virtual currency mixers, and $8.25M from the Mt. Gox hack. FinCEN separately traced 300,000+ Mt. Gox-stolen BTC and $3M+ in ransomware payments (CryptoLocker, Locky). [DOJ complaint 2025, FinCEN 2017]

Phase 2 : Layering

Confirmed Internal anonymity by design: no-KYC accounts, internal balance codes transferable between users, and commingling in exchange-controlled wallets. The three Mt. Gox-fed accounts ("Vamnedam", "Grmbit", "Petr") operated inside the exchange the operators themselves controlled : laundering into one's own institution. [SDNY indictment, FinCEN]

Phase 3 : Extraction

Confirmed Fiat exit through shell-held accounts (FXOpen/XP Solutions NZ/AU, Czech Nano ABC LP) and third-party cash-out brokers; 95% of tracked ransomware ransoms exited to fiat here before July 2017. [DOJ complaint, Black Hat 2017 study]

Post-Seizure Wallet Movements (Treasury Continuity)

Seized and Contested Assets

Confirmed U.S. civil forfeiture (D.D.C. 1:25-cv-02085, filed June 30, 2025): ~925.94 BTC, ~4,036.92 ETH, ~2,249.25 LTC, ~33.04 DASH, plus NMC/NVC/PPC seized Aug 2017; the 929.5 BTC moved July 31, 2017; ~485,705 ETH; FXOpen/XP Solutions balances (~$89.68M USD equivalent); Czech Nano ABC LP accounts. Claims deadline passed Sept 2, 2025; contested by multiple individual claimants and by Mt. Gox trustee Nobuaki Kobayashi (claim filed Aug 20, 2025). Litigation active as of June 2026. [CourtListener, Dynamis, forfeiturelawfirm.com]

Confirmed New Zealand: NZ$140M restrained June 2020 (largest NZ Police restraint ever); March 2023 High Court found reasonable grounds Vinnik unlawfully benefited; no final forfeiture order located; the same fund pool is claimed in the U.S. case. [NZ Police, NZ Herald]

Geographic Patterns

Confirmed Russian-language interface and support with global reach: 1M+ users worldwide, RUB pairs, and a cash-out broker ecosystem concentrated in Russia/CIS. The 95% ransomware figure demonstrates BTC-e functioned as the global cash-out chokepoint of its era, not merely a regional venue. [DOJ, Black Hat 2017]

BTC-e Period : Evidence of Absence

• What a nexus would look like: hosting inside Russia, tip-offs ahead of Western action, tasking of the platform for state operations. None is documented. BTC-e hosted its core infrastructure in the United States, the single decision that enabled its destruction : inconsistent with state operational guidance. Confirmed (absence)
• All disruption was Western (U.S. seizure, Greek arrest, FinCEN penalty). No Russian enforcement against BTC-e while it operated. Confirmed

WEX Phase and Aftermath : Elevation Indicators

• Alleged FSB extraction of ~$450M from WEX (April 2018), per Bilyuchenko's testimony and BBC-authenticated audio implicating Malofeev's circle and serving FSB officers "Igor" and "Grigori". Credible Single Source
• The planned successor "Vladex" was explicitly pitched as regulated infrastructure to "protect the financial and economic sovereignty of the Russian Federation" : state-aligned by design, though never launched. Credible [Meduza/BBC]
• Post-hoc protection: Russia filed competing extradition requests for Vinnik (2017 to 2020), traded Fogel to repatriate him (Feb 2025), and keeps Bilyuchenko domestically prosecuted but unextradited; the MVD declined WEX victims' request to freeze moving funds (2021); the Supreme Court erased the 18B RUB civil claim (2025). Confirmed (swap, non-extradition) / Credible (court actions)
• April 2024: Kommersant reported MVD cyber-unit officer Georgy Satyukov charged in absentia over ~5B RUB in crypto bribes for "patronizing" WEX : direct krysha allegation from Russia's own record. Credible Single Source

Negative Evidence : Against Direct Control

• No document names any Russian state body as operator or owner of BTC-e or WEX at any point. Confirmed
• The alleged 2018 FSB action was expropriation from the operators, implying the state did not control the platform beforehand. Analyst Inference

Jurisdictional Separation (Mandatory)

Criminal Cases

Regulatory and Financial Actions

Post-Disruption Reconstitution Assessment (Mandatory)

Two-tier model applied to all entries. Tier 1 : Transaction confidence: how confident are we that funds transited this exchange from/to the entity? Tier 2 : Facilitation assessment: characterization of the exchange's role (Active facilitation / Structural enablement / Incidental processing). These are independent assessments and must not be collapsed.

Market Position and Displacement

Confirmed BTC-e's 2017 seizure displaced its volume first into WEX (briefly the largest Russian-language exchange), then, after WEX's 2018 collapse, diffusely across the Russian-language exchange ecosystem. Garantex, founded 2019, filled the same market niche without organizational inheritance. The niche has never since been vacant: BTC-e → WEX → (gap) → Garantex → Grinex → post-Garantex network. [CoinDesk, Elliptic, TRM]

Disruption Impact

Current Status

BTC-e brand: Defunct since July 2017. WEX brand: Defunct since late 2018. Reconstitution as a platform: None since 2018. Confirmed

Residual operator capability: Active wallet control, with ~$694M moved October 2025 and follow-on sales into 2026. Asset recovery: contested civil forfeiture active in D.D.C.; NZ restraint unresolved; Mt. Gox trustee competing for the same assets. Credible

Intelligence Gaps

[June 2026] D.D.C. forfeiture case remains active; last known filing June 3, 2026. No dispositive ruling. [CourtListener]

[Spring 2026] Vinnik appears at Blockchain Forum 2026 in Moscow, claiming BTC-e cold-wallet holdings remained "outside the perimeter seized by the FBI" and urging former users into the U.S. claims process. Single Source [Cryptopolitan]

[Late 2025] Russian Supreme Court overturns the 18 billion ruble (~$221M) civil claim against Bilyuchenko, closing the main domestic recovery avenue for WEX victims. Credible [Cryptopolitan, crypto trade press]

[October 2025] Dormant wallet linked by analysts to Bilyuchenko moves ~6,500 BTC (~$694M); ~$114M in follow-on sales reported into 2026. Credible [Coinspeaker, CoinDesk/Yahoo]

[August 2025] Mt. Gox trustee Nobuaki Kobayashi files a verified claim to BTC-e forfeiture assets (Aug 20); claims deadline expires Sept 2. [Court record via forfeiturelawfirm.com]

[June to July 2025] DOJ files civil forfeiture (June 30). Poland extradites Vasilyev to the U.S. (late June); Russian Embassy demands consular updates (July). [DOJ, TASS, Cryptonews]

1. DOJ NDCA: Russian National And Bitcoin Exchange Charged In 21-Count Indictment : July 26, 2017
2. FinCEN: Fines BTC-e Virtual Currency Exchange $110 Million : July 2017
3. FinCEN: Assessment of Civil Money Penalty, BTC-E a/k/a Canton Business Corporation and Alexander Vinnik
4. DOJ: BTC-e Operator Pleads Guilty to Money Laundering Conspiracy : May 2024
5. DOJ: Russian Nationals Charged With Hacking One Cryptocurrency Exchange and Illicitly Operating Another (Bilyuchenko/Verner) : June 9, 2023
6. DOJ: Foreign National Charged (Klimenka / Soft-FX) : February 2024
7. CourtListener: United States v. BTC-e, 3:16-cr-00227 (N.D. Cal.)
8. CourtListener: U.S. v. All Virtual Currency Held in the BTC-e Operating Wallets, 1:25-cv-02085 (D.D.C.)
9. Civil Forfeiture Complaint (June 30, 2025), full text PDF
10. Dynamis LLP: Defending Cryptocurrency Seizures : the BTC-e Forfeiture Complaint
11. Sammis Law Firm: Victims of the BTC-e Seizure for Forfeiture (asset schedule, claims process)
12. Mt. Gox Trustee Claims BTC-e Assets Contain Stolen Bitcoin : August 2025
13. CoinDesk: Meet WEX: Bitcoin Exchange Launches for BTC-e Users, With BTC-e Design : September 15, 2017
14. BBC Russian Service (Zakharov): How $450M disappeared from the WEX exchange into an "FSB fund" : November 2019
15. Meduza: Crypto-corruption (English summary of the BBC WEX investigation)
16. Moscow Times: Russia's FSB Linked to $450M Bitcoin Disappearance
17. OCCRP: Russian Agents Suspected of Cleaning Out Bitcoin Exchange Platform
18. Quadriga Initiative: WEX case study (launch, collapse, Khavchenko sale, Vasilyev webinar)
19. Chainalysis: Key Crypto Moments From 2022 (BTC-e 10,000 BTC movement, Reactor graph)
20. CoinDesk: Bitcoin Wallet of the Failed BTC-e Exchange Wakes Up : November 23, 2022
21. Bitcoin.com News: 10,000 BTC Withdrawn From Wallet of Defunct Crypto Exchange WEX
22. CoinDesk: Bitcoin From Defunct BTC-e on the Move Again (Crystal) : March 2023
23. Bursztein et al.: Tracking Ransomware End to End (Black Hat USA 2017; Google/Chainalysis/UCSD/NYU)
24. BleepingComputer: 95% of All Ransomware Payments Were Cashed Out via BTC-e
25. NZ Police: NZ Police restrains $140 million in international investigation : June 2020
26. UK Companies House: Always Efficient LLP (OC394172), officers and PSC records
27. U.S. Secret Service: Alleged Russian Cryptocurrency Money Launderer Extradited : August 2022
28. CoinDesk: U.S. to Release Jailed BTC-e Operator Vinnik in Russia Prisoner Swap : February 2025
29. TASS: Ex-head of WEX crypto exchange Vasilyev extradited to U.S. : June 29, 2025
30. Cryptopolitan: Russian Supreme Court overturns 18B ruble claim against Bilyuchenko : late 2025
31. Coinspeaker: Dormant Bitcoin Wallet Linked to BTC-e Founder Moves $694M : October 2025
32. Cryptopolitan: Vinnik claims BTC-e cold-wallet crypto was never seized (Blockchain Forum 2026)
33. WizSec (Kim Nilsson): Breaking open the MtGox case : July 2017
34. Wikipedia: BTC-e

Profile produced using open-source intelligence. Confidence labels applied per schema: CONFIRMED (multiple independent sources), CREDIBLE (single strong source or multiple weaker sources), ANALYST INFERENCE (logical extrapolation from confirmed facts). All volume figures cited with source and methodology; figures from different vendors are not averaged. Two-tier connected entity model applied throughout Section 09.