- Organisation
- community tracker
- Evidence role
- Chain monitor
- Published
- continuously updated
- Source changes
- 18
- Detected differences
- 29
- Unreviewed
- 3
- Copies held
- 30
Second, independent tracker of the same four holding addresses. States the accounting precision the reporting rounded: 1,082.65 BTC drained, 1,082.57 BTC arrived, the difference paid to miners as fees. Cites Galaxy, Coinkite and Block. The page is client-rendered. The empty shell from the first capture is preserved as a capture correction, followed by complete rendered captures. The operator rebuilt the page on 2 August 2026 around a five-wave model, which renamed the section heading this capture previously keyed on. The guard string moved from that heading to "Watched holdings"; "Holding 1" and "Movement feed" are retained because they appear only after the client-side data resolves, so an unrendered shell still fails the check rather than entering the record.
Every check is recorded, including checks that found no text change. A detected edit is therefore bounded between two checks. The publisher's exact save time is not observable from this record. Last checked 2 Aug 2026, 00:59 UTC.
Snapshot and diff bodies for this chain monitor are held in the local evidence archive but withheld from the public site because they can contain victim addresses. Integrity hashes, capture times and reviewed change summaries remain available below.
-
This detected difference has not yet been reviewed for capture noise.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 1192 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
This detected difference has not yet been reviewed for capture noise.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 48 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
This detected difference has not yet been reviewed for capture noise.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 4 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
The operator rebuilt the tracker around a five-wave model: the July 31 entry split into Galaxy Wave 2 and a new Galaxy Wave 3 spanning Jul 31 to Aug 1, the headline total moved from 1,130.09411114 to 1,368.58411114 BTC, consolidated holdings from 1,130.00551671 to 1,160.19028 BTC, and the July 30 heading was renamed from Galaxy fingerprint to Galaxy Wave 1.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 86 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
Only the live fiat conversion changed; the BTC totals, cluster descriptions and movement state were unchanged.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 2 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
The evening-wave description gained a clause noting that the Kelbie vault also occurred on 31 July; the live fiat conversion changed in the same capture.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 4 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
Only the live fiat conversion changed; the BTC totals, cluster descriptions and movement state were unchanged.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 2 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
Only the live fiat conversion changed; the BTC totals, cluster descriptions and movement state were unchanged.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 2 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
The tracked total rose to 1,130.09411114 BTC after a delayed 0.19 BTC victim consolidation joined the Aug 1 hop vault. The tracker also recorded an Ocean block-960511 miner payout that touched the hop address and was peeled off, listing it as a possible lead that it does not count as stolen.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 24 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
The tracker added a 'TOTAL STOLEN' headline of 1,129.90257437 BTC with a four-wave breakdown chart, and raised the balance on watch to 1,130.00551671 BTC after a second UTXO reached the Aug 1 hop vault.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 42 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
The tracked total rose from 1,129.31416148 to 1,129.81397994 BTC, a separate 'Aug 1 hop vault' holding was added to the evening-wave cluster, the risk checklist gained Mk3 5.0.1 to 5.0.3, a seed-origin item and revised passphrase wording, and WizardSardine and Kevin Loaec were added as sources.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 38 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
The tracker restated its movement feed in terms of the reported consolidation only: the earlier outbound spend and unconfirmed hop were removed from the feed, last movement returned to 'Unmoved', and a note was added that later surplus passing through a vault is ignored while the reported balance remains.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 23 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
The tracker added an unconfirmed hop-1 movement of 0.4998206 BTC onward from the followed destination of the evening vault's first outbound spend.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 8 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
The tracker withdrew the Mk4 attribution for the 1 August morning wave, recording the seed as Mk3-origin, removed the 'Mk4 is in scope now' panel, and recorded the first outbound spend of 0.4099166 BTC from the evening vault at 16:33 UTC.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 23 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
The tracker's watched balance rose from 1,129.31416148 BTC to 1,129.6240794 BTC and the evening vault's displayed balance and UTXO count changed, while the reported consolidated figure for that vault stayed at 0.50980268 BTC.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 6 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
The tracker added an 'Aug 1 morning wave' cluster with a new vault address holding 0.33203236 BTC from 16 sweeps, described it as including a reported Mk4 RNG and duress-wallet honeypot attributed to Tomer Strolight while noting the device model is not visible on chain, added an 'Mk4 is in scope now' panel, and changed its headline to a running total.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 33 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
The tracker replaced its likely-exposed paragraph with a per-model vulnerable and fixed version table covering Mk3, Mk4, Mk5, Q and both Edge tracks, and moved the evening vault's block reference from the row label into the cluster description.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 14 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
The tracker rewrote its reader-guidance section against the August 1 advisory and Block's writeup, added a 'beyond the main seed' item covering paper-wallet keys, Seed XOR masks and Key Teleport, clone and Secure Notes material, moved the Galaxy scope figures into the cluster card, and replaced its short source labels with descriptive per-source summaries including CoinDesk and Clay Garrett. Holding 2's UTXO count also changed from one to two.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 48 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
The tracker added a third cluster, an 'Evening wave' of 31 July with its own 0.50980268 BTC vault attributed to Evan Schoenberg, restated every holding at full satoshi precision, and changed its headline from 1,128.56 BTC across two clusters to 1,129.06986038 BTC across three.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 44 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
The monitor changed Holding 1's displayed UTXO count from ten to eleven while its BTC balance and held status remained unchanged.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 2 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
The monitor changed Holding 1's displayed UTXO count from nine to ten while its BTC balance and held status remained unchanged.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 2 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
The monitor changed Holding 1's displayed UTXO count from eight to nine while its BTC balance and held status remained unchanged.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 2 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
The rendered capture again held the monitor's hydrated chain data after the preceding temporary loading-state capture.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 75 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
The rendered capture held the monitor's temporary loading state instead of its hydrated chain data.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 75 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
The monitor changed Holding 1's displayed UTXO count from seven to eight while its BTC balance and held status remained unchanged.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 2 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
The tracker added a separately attributed 45.91 BTC post-scan cluster and changed its headline total; live fiat figures also changed in the same capture.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 107 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
Only live fiat conversions changed; the BTC balances and movement state were unchanged.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 12 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
Only live fiat conversions changed; the BTC balances and movement state were unchanged.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 12 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
The browser capture obtained the rendered tracker after the initial scripted capture held an empty client-side shell.
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 105 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
-
Recovered from the Internet Archive rather than captured by this project. The row records that third-party provenance separately from captures made by this project.
What changed from the previous capture 0 lines
Extracted text as captured
Excerpt only. The complete copy is held offline and backs quotations on this site. The original publication remains the canonical public source.
Each copy above is identified by the SHA-256 of its extracted text, shown beside it, and the diffs are plain unified diffs. To verify a quotation, compare it against the page itself or against the Internet Archive's copies, which are independent of this project.
Complete captures are held offline rather than mirrored here, so this page shows diffs and excerpts. If a quotation is ever disputed, the full copy can be produced. Ask.
The SHA-256 prefixes above identify each held copy without turning this page into a mirror of somebody else's post. Compare a quotation against the original. If the post has since been edited or deleted, ask and the held copy can be produced.