Video wird geladen...
Video konnte nicht geladen werden
A Telegram scam dev known as Kehon8 (formerly Honke8) sells scam website templates to over 145k subscribers. CBEX used his website design for their operation. The centralized exchanges used by the CBEX team may be intermediaries to hide fund flows, and likely make use of KYC-purchased accounts sold on... show more
24,084 Aufrufe • vor 1 Jahr •via X (Twitter)
13 Kommentare

Here are a few of those energy provider addresses: TYMZdfff9RzDbszgivGkpioHSxLE9Km8mJ TNn41mXch49gjJ6XeAgAgfBCipG2Z5UGB6 TDUXCBVPmhEDN3Zgtc6WmiyH7CQLU7f3n1 THKmu36cUpMz48WTvPiNBeXgfdP22HJTT1 Victims’ funds were first routed through these: TWZ9GGUtiDoK5yC1xb1ToHdoJM6GTcUECF TA7E8YZy1sh8K7rn5TaShHJ3t6LbQTmG7y TGTCxCxM5tcu6D287X6Q43Y3RsGRYyYE21 Afterward, funds were sent through intermediaries, bridged to Ethereum, and obfuscated.

Three outcomes after bridging: -Sent to centralized exchanges (CEXes) -Bridged back to TRON via new wallets -Swapped to the decentralized stablecoin USDD

Wallets Traced Frame 1: I traced one wallet that held $3.2M in USDT & USDD. The last activity was 24 days ago until yesterday, when $2.9M was swapped and distributed across multiple wallets. It now holds $353K in USDD. Frame 2: Another traced wallet still holds $1.9M USDD. Frame 3: About $1M was sent to centralized exchanges. Frame 4: $5.7M from three wallets was distributed to OKX, Bitget, and HTX.

These are just a few of the funds I was able to trace for now. There are more inflows and outflows across different wallets, and I will track and trace more as the investigation continues. Not all funds are from CBEX or PCEX — there are other Ponzi websites run by the same syndicate targeting other regions. (More later.)

They use one bridge wallet frequently: TPwezUWpEGmFBENNWJHwXHRG1D2NCEEt5s I contacted @okx and @bitgetglobal : OKX said they can’t help unless the victims reach out themselves — even after I offered to intermediate (most victims lack technical knowledge). Meanwhile, @okx was recently charged with money laundering. @HTX_Global (formerly Huobi) has faced multiple fraud allegations and barely responds to similar reports. Okx said individuals should contact them. If you deposited to cbex or PCEX, send a message to @OKXHelpDesk as requested by them. lol I'm still in contact with Bitget and hoping for support.

Some EVM Wallets Used: 0x0D51e3B408a3EB81eD145BB6b6751e253fcED38c 0x2717c41C7547acB2144BFB1b1F947F1A6F6691F2 0x9fbeBFf1C2FFF3A58FF25338Ca7bE4Bbd3C83622 0xDE4d79160152DE3C34F0d04c56Ae7f447cBb2903 0xC0Db4248ffeA3C1dc632Ba7e90866B7dA9004a3F 0x5326f5efa87ba7ddda8ff5df51d1e1bfd7381b52 0x656101388914942284ad3deb6904ce95e448e900 … and more

Two days before CBEX disabled withdrawals, I reported the platform to @SECNigeria via ReportGov. They acknowledged the report and said to await a response. 5 days later — no reply. I also contacted @Tether_to , asking if they could freeze $1.9M in USDT before it was moved. They responded quickly but said they need involvement from local authorities, which I understand. Still, a shoutout to Tether for responding and providing leads.

During my research, I uncovered another Ponzi website linked to CBEX called LWEX ( target to Slovakiaz and Hungary. It shut down early this month. I found a report on Facebook and observed similar operations and money movement patterns as with CBEX. I recovered the website using the Wayback Machine — it has the same interface as CBEX and PCEX.

About the fraudsters I found wallets linked to Huione Pay, a payment/exchange platform in Southeast Asia. According to an article by @elliptic , Huione Pay is a subsidiary of Huione Group and operates a darknet marketplace on Telegram called Huione Guarantee (now “Haowang Guarantee”). On this platform: Scammers sell fake crypto investment website templates. AI face-swap tools and telecom services are also sold. Users must be verified before joining groups — new

This is the same design as CBEX. Huione International Payments, part of Huione Pay, acts as a merchant on this network — helping scammers launder funds globally. Over 100 Telegram groups are linked to Huione Guarantee — offering illegal services like: KYC-bypassing exchange accounts Money laundering USDT “black market” services

Local involvement While investigating, I discovered several CBEX Telegram groups managed by Nigerians who actively promoted the platform. Many of them claimed to know the people behind CBEX, using that trust to earn referral bonuses and lure in more victims. Some used fake screenshots showing fake deposits ($20k, $8k, etc.) to lure others in. Upon tracing the transactions, I discovered they were simply moving funds between Bybit and MEXC — no actual CBEX deposits. This is a criminal offense under Nigeria’s Advance Fee Fraud Act Section 1(1).

🚀 Don't gamble with your portfolio! Use our advanced hybrid quant risk tool using on/off-chain data and make informed decisions. 📈 Acess to 1000+ charts for your crypto journey. 📚Join our Premium Telegram for daily alerts. 📊+21 projects supported. 🏗️ Beginners and experts.

@threadreaderapp unroll
