Blockchain investigator ZachXBT has revealed that Russian OTC broker Aleksandr (Aleks) Khinkis allegedly laundered over $4.7 million for ransomware groups since July 2025. The funds, involving three suspected ransom payments totaling 796 BTC, were reportedly moved through a single exchange account. The money was transferred cross-chain from Bitcoin to Avalanche and dispersed across multiple addresses. Approximately $16.6 million is currently deposited in Aave and continues to be cashed out. ZachXBT also noted that some related addresses had previously been frozen by Tether due to ransom incidents.