{"id":9167,"date":"2026-06-12T03:11:43","date_gmt":"2026-06-12T00:11:43","guid":{"rendered":"https:\/\/handoli.com\/index.php\/2026\/06\/12\/audia6-crypto-laundering-suspects-face-extradition-to-us\/"},"modified":"2026-06-12T03:11:43","modified_gmt":"2026-06-12T00:11:43","slug":"audia6-crypto-laundering-suspects-face-extradition-to-us","status":"publish","type":"post","link":"https:\/\/handoli.com\/index.php\/2026\/06\/12\/audia6-crypto-laundering-suspects-face-extradition-to-us\/","title":{"rendered":"\u2018AudiA6\u2019 crypto laundering suspects face extradition to US"},"content":{"rendered":"<div><\/div>\n<p>The pair behind a $389 million cryptocurrency laundering service dubbed \u201cAudiA6\u201d have been arrested following international investigations between the US, Europol, and 10 other countries.<\/p>\n<p>According to a <a href=\"https:\/\/www.justice.gov\/usao-edpa\/pr\/two-charged-connection-cryptocurrency-money-laundering-service-allegedly-laundered\" target=\"_blank\" rel=\"noreferrer noopener\">press release<\/a> from the US Attorney\u2019s Office, Eastern District of Pennsylvania, both Ruslan Igorevich Tkachuk, 37, Ukrainian, and Alexander Vladimirovich Ledenev, 25, Russian, are residents of Georgia, where they are currently in custody.<\/p>\n<p>The US will be seeking the pair\u2019s extradition, after which they could each face a maximum sentence of 20 years.<\/p>\n<p>Europol <a href=\"https:\/\/www.europol.europa.eu\/media-press\/newsroom\/news\/ransomware-gangs-cut-eur-336-million-audia6-crypto-laundering-pipeline\" target=\"_blank\" rel=\"noreferrer noopener\">called<\/a> the platform the \u201cmost trusted by ransomware gangs and cybercriminal networks\u201d and links it to \u201cover 15 international cybercrime investigations.\u201d<\/p>\n<p>In what is described as a \u201ccoordinated international takedown,\u201d properties were searched, cryptocurrency was frozen, and online infrastructure was targeted, with the organization\u2019s websites replaced by a law enforcement seizure banner.<\/p>\n<figure class=\"wp-block-image size-large\"><a href=\"https:\/\/protos-media.s3.eu-west-2.amazonaws.com\/wp-content\/uploads\/2026\/06\/11161411\/audia6-seizure-scaled.png\" data-lbwps-width=\"2560\" data-lbwps-height=\"1440\" data-lbwps-srcsmall=\"https:\/\/protos-media.s3.eu-west-2.amazonaws.com\/wp-content\/uploads\/2026\/06\/11161411\/audia6-seizure-scaled.png\"><img fetchpriority=\"high\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/protos-media.s3.eu-west-2.amazonaws.com\/wp-content\/uploads\/2026\/06\/11161411\/audia6-seizure-1024x576.png\" alt=\"\" class=\"wp-image-125989\" \/><\/a><figcaption class=\"wp-element-caption\"><em>The websites of AudiA6 and the Dark2Web forum were reportedly replaced with a seizure banner.<\/em><\/figcaption><\/figure>\n<p><em>Read more: <\/em><a href=\"https:\/\/protos.com\/crypto-hack-goes-political-as-grinex-blames-western-special-services\/\" target=\"_blank\" rel=\"noreferrer noopener\"><em>Crypto hack goes political as Grinex blames \u2018Western special services\u2019<\/em><\/a><\/p>\n<p>As well as running AudiA6, the pair allegedly ran the cybercrime forum Dark2Web. On the forum, AudiA6 \u201cexplicitly offers to conceal and disguise\u201d cryptocurrency linked to criminal activity \u201cfor a fee of up to five percent.\u201d<\/p>\n<p>According to US law enforcement\u2019s blockchain analysis, over 10,000 bitcoin (BTC) are estimated to have been deposited into AudiA6 since its launch in 2021.<\/p>\n<p>Of these, almost 400 BTC were deposited directly from illicit sources, with additional funds indirectly linked to illicit activity.<\/p>\n<h2 class=\"wp-block-heading\">KuCoin catches strays<\/h2>\n<p>Prolific blockchain investigator ZachXBT called AudiA6 \u201cone of the top\u201d users of centralized crypto exchange KuCoin where it ran a \u201ccentralized mixing services for cybercriminals.\u201d<\/p>\n<p>He <a href=\"https:\/\/x.com\/zachxbt\/status\/2065063910613619136\" target=\"_blank\" rel=\"noreferrer noopener\">believes<\/a> AudiA6 laundered funds stolen from <a href=\"https:\/\/protos.com\/swissborg-ceo-blames-41m-loss-on-staking-partner-kiln\/\" target=\"_blank\" rel=\"noreferrer noopener\">Swissborg<\/a> last year, and <a href=\"https:\/\/protos.com\/ripple-ceo-chris-larsen-lost-150m-in-xrp-after-lastpass-hack\/\" target=\"_blank\" rel=\"noreferrer noopener\">LastPass users<\/a>, which <a href=\"https:\/\/x.com\/tayvano_\/status\/1696222669832863782\" target=\"_blank\" rel=\"noreferrer noopener\">began<\/a> in December 2022.<\/p>\n<p>In April, the sleuth questioned why Kucoin would \u201callow\u201d the laundering of crypto stolen via a fake Ledger app and from crypto ATM Bitcoin Depot.<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-x wp-block-embed-x\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">C) Want to explain to the community why Kucoin allowed a threat actor to launder $9.5M+ tied to a fake Ledger app via 150+ Kucoin deposit addresses over the past week?<\/p>\n<p>A few days before that another threat actor laundered $3.5M+ from the Bitcoin Depot incident via 25+ Kucoin\u2026 <a href=\"https:\/\/t.co\/vo7jb1rdwu\">pic.twitter.com\/vo7jb1rdwu<\/a><\/p>\n<p>\u2014 ZachXBT (@zachxbt) <a href=\"https:\/\/x.com\/zachxbt\/status\/2044009775546151180?ref_src=twsrc%5Etfw\">April 14, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p><em>Read more: <\/em><a href=\"https:\/\/protos.com\/kucoin-criticized-for-helping-launder-9-5m-from-fake-ledger-app\/\" target=\"_blank\" rel=\"noreferrer noopener\"><em>KuCoin criticized for helping \u2018launder\u2019 $9.5M from fake Ledger app<\/em><\/a><\/p>\n<p>Another blockchain sleuth is similarly critical of KuCoin in its alleged failure to prevent AudiA6\u2019s operations.<\/p>\n<p>SEAL contributor Nick Bax <a href=\"https:\/\/x.com\/bax1337\/status\/2065063186374570416\" target=\"_blank\" rel=\"noreferrer noopener\">claims<\/a> that KuCoin \u201cfacilitated\u201d the laundering of \u201ca very large amount of LastPass stolen funds.\u201d He adds that \u201cin rare cases\u201d the exchange temporarily froze funds, but \u201cwould often release the funds back to the launderers.\u201d<\/p>\n<p>He also <a href=\"https:\/\/x.com\/bax1337\/status\/2065067963439370400\" target=\"_blank\" rel=\"noreferrer noopener\">points out<\/a> that AudiA6 \u201cliterally advertised key sweeping,\u201d the mass draining of crypto from stolen seed phrases, such as from a compromised password manager.<\/p>\n<p><em>Got a tip? Send us an email securely via\u00a0<\/em><a href=\"https:\/\/leaks.protos.com\/\" target=\"_blank\" rel=\"noreferrer noopener\"><em>Protos Leaks<\/em><\/a><em>. For more informed news and investigations, follow us on\u00a0<a href=\"https:\/\/twitter.com\/protos\" target=\"_blank\" rel=\"noreferrer noopener\">X<\/a>,\u00a0<\/em><a href=\"https:\/\/bsky.app\/profile\/protos.com\" target=\"_blank\" rel=\"noreferrer noopener\"><em>Bluesky<\/em><\/a><em>, and\u00a0<\/em><a href=\"https:\/\/news.google.com\/publications\/CAAqJAgKIh5DQklTRUFnTWFnd0tDbkJ5YjNSdmN5NWpiMjBvQUFQAQ\" target=\"_blank\" rel=\"noreferrer noopener\"><em>Google News<\/em><\/a><em>, or subscribe to our\u00a0<\/em><a href=\"https:\/\/youtube.com\/protosmedia\" target=\"_blank\" rel=\"noreferrer noopener\"><em>YouTube<\/em><\/a><em>\u00a0channel.<\/em><\/p>\n<p>The post <a href=\"https:\/\/protos.com\/audia6-crypto-laundering-suspects-face-extradition-to-us\/\">\u2018AudiA6\u2019 crypto laundering suspects face extradition to US<\/a> appeared first on <a href=\"https:\/\/protos.com\/\">Protos<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"<p>The pair behind a $389 million cryptocurrency laundering service dubbed \u201cAudiA6\u201d have been arrested following international investigations between the US, Europol, and 10 other countries. According to a press release from the US Attorney\u2019s Office, Eastern District of Pennsylvania, both Ruslan Igorevich Tkachuk, 37, Ukrainian, and Alexander Vladimirovich Ledenev, 25, Russian, are residents of Georgia, [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":9168,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rop_custom_images_group":[],"rop_custom_messages_group":[],"rop_publish_now":"initial","rop_publish_now_accounts":[],"rop_publish_now_history":[],"rop_publish_now_status":"pending","footnotes":""},"categories":[147],"tags":[],"class_list":["post-9167","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-invest"],"_links":{"self":[{"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/posts\/9167","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/comments?post=9167"}],"version-history":[{"count":0,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/posts\/9167\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/media\/9168"}],"wp:attachment":[{"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/media?parent=9167"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/categories?post=9167"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/handoli.com\/index.php\/wp-json\/wp\/v2\/tags?post=9167"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}