Bitcoin was not hacked, wallet was seized. Here are the transactions mapped.

Edit: Added link to affidavit and the bitcoin.com article were I found it.

Affidavit https://storage.courtlistener.com/recap/gov.uscourts.cand.379840/gov.uscourts.cand.379840.1.0.pdf

News article https://news.bitcoin.com/fbi-agent-recovers-private-key-2-3m-bitcoin-paid-colonial-pipeline-hackers/

Ransom Wallet address 15JFh88FcE4WL6qeMLgX5VEAFCbRXjc9fr https://blockchair.com/bitcoin/address/15JFh88FcE4WL6qeMLgX5VEAFCbRXjc9fr

The 75.00050000 BTC at the ransom address 15JFh88FcE4WL6qeMLgX5VEAFCbRXjc9fr is broken up. Address 15JFh88FcE4WL6qeMLgX5VEAFCbRXjc9fr sends 0.00001693 BTC to address bc1q7eqww9dmm9p48hx5yz5gcvmncu65w43wfytpsf Address 15JFh88FcE4WL6qeMLgX5VEAFCbRXjc9fr sends 75.00034246 BTC to address 1DToN8Q6y31TGAz75Df729Bnujk6Xg7q5X

The 75.00034246 BTC at address 1DToN8Q6y31TGAz75Df729Bnujk6Xg7q5X is broken up. Address 1DToN8Q6y31TGAz75Df729Bnujk6Xg7q5X sends 0.00006748 BTC to address 15XrovaEjw4QVa5ytth9NcwPhx6etKycsm Address 1DToN8Q6y31TGAz75Df729Bnujk6Xg7q5X sends 74.99998307 BTC to back to address bc1q7eqww9dmm9p48hx5yz5gcvmncu65w43wfytpsf

The 75.00034246 BTC at address bc1q7eqww9dmm9p48hx5yz5gcvmncu65w43wfytpsf is broken up. Address bc1q7eqww9dmm9p48hx5yz5gcvmncu65w43wfytpsf sends 63.74998561 BTC to address bc1qxu83k5qkj8kcqdqqenwzn7khcw4llfykeqwg45 Address bc1q7eqww9dmm9p48hx5yz5gcvmncu65w43wfytpsf sends 11.24962019 BTC to address bc1qu57hnxf0c65fsdd5kewcsfeag6sljgfhz99zwt

Address bc1qxu83k5qkj8kcqdqqenwzn7khcw4llfykeqwg45 sends 63.70000000 BTC to address 3EYkxQSUv2KcuRTnHQA8tNuG7S2pKcdNxB

txid/hash: daf38c7b38eb0a587cf843f47000d5c294affb4f56017370ad48c5147f5e69d9 2021-05-28 03:06 UTC Time frame and amounts match the diagram provided to news.bitcoin.com by Blockchain Intelligence Group.

This txid contains the 63.7 btc transaction from 3EYkxQSUv2KcuRTnHQA8tNuG7S2pKcdNxB to wallet address bc1qq2euq8pw950klpjcawuy4uj39ym43hs6cfsegq which was subject to the seizure warrant issued. https://blockchair.com/bitcoin/address/bc1qq2euq8pw950klpjcawuy4uj39ym43hs6cfsegq

pic of warrant https://twitter.com/JordanSchachtel/status/1401996717394960389

If anyone has access to some nice api's pretty sure we will know which custodial service owned this address.

submitted by /u/meatloaf-toaster
[link] [comments]

source https://www.reddit.com/r/btc/comments/nv8kko/bitcoin_was_not_hacked_wallet_was_seized_here_are/