***USE BLOCKCHAIN.COM TO ANSWER THE QUESTIONS***

***ASSUME THE SMALLER TRANSACTION VALUE IS THE CHANGE ADDRESS FOR ALL QUESTIONS THAT ASK YOU TO IDENTIFY CHANGE***
 

Coinbase Account Hack Case Study

On November 30, 2021, a victim reported that their Coinbase account was hacked. The victim advised that the suspects converted over $20,000 of Ethereum and Solano into Bitcoin and then executed dozens of transfers in the amount of $100.  The victim advised that the suspect sent most funds to the following address:

              bc1qp2vjk39ajxwy5uh7xq6yr0gtgzhlkgk7xdecg9

Answer the following questions:

a. Why would the victim convert Ethereum and Solano to Bitcoin?

b. Why would the suspect conduct transfers in $100 increments?

c. Using blockchain.com trace to suspect’s address to until you think you have reached an exchange or mixing service.

               NOTE: Start with the below transaction hash and follow the hops

               221f7ad96d2c89aca0e72c2a7b39ea87518feb3c592fff962e340d530af01d0e

               NOTE: The smaller amount will be the changed address for this case

If you positively identified a possible exchange, document the exchange name, last four of the transaction hash, the target address, and the exchange deposit address that you would use to prepare a legal process to the exchange for account information. Ensure that you can articulate exactly why you believe there is probable cause that the victim's cryptocurrency was sent to the exchange that you identified.

CLICK THE BELOW LINK TO VIEW A VIDEO DEMONSTRATION OF THE TRACE IF NEEDED.

https://vimeo.com/1122911813?share=copy#t=0