According to the leakers, the database exposes an assembly-line fraud scheme involving a central deposit platform, its own in-house chat app, 138 closed manipulation groups, and 246 payment routing channels tied to TRC-20 USDT wallets. Whenever a platform reached its extraction peak, operators staged exit scams claiming system maintenance or cyber attacks, after which syndicate team leaders herded tens of thousands of victims onto subsequent sister platforms to harvest them repeatedly.
While the syndicate has been using dedicated lines in Cambodia to freeze large withdrawals and execute final sweeps on closing platforms, the hackers say the breach captured complete records for 123 core operators, over 9,000 promotional team leaders, and 324 money-laundering bank accounts, and that more details on staff will keep coming out. None of these figures have been independently verified.
