Gate News reports that on March 25, on-chain investigator ZachXBT disclosed on X platform that Russian OTC broker Aleksandr Khinkis has been suspected of assisting a ransomware group in laundering over $4.7 million since July 2025 through a single exchange account, involving three ransom payments totaling 796 Bitcoin. The investigation shows that the related funds were bridged from Bitcoin to Avalanche via cross-chain pathways and divided into 75 transfers into his exchange deposit addresses. Additionally, about $16.6 million is currently stored in Aave but is being gradually withdrawn and cashed out. ZachXBT pointed out that the suspect frequently operates in Southeast Asia and Australia, and his personal information has appeared multiple times in data breaches, which may complicate law enforcement across jurisdictions. ZachXBT urges victims to report relevant addresses promptly to improve freezing efficiency.