There's something almost ironic about what happened on Thursday. Someone tried to move $120 million quietly using one of crypto's most secretive tools, and ended up causing one of the biggest single‑day price spikes Monero has seen in recent memory.
That's not how laundering is supposed to work.
The Money Appeared Out of Nowhere
It started when a single address on the Tron network received 120.2 million USDT, that's Tether's dollar‑pegged stablecoin, widely used because it moves cheaply and fast on Tron. The funds arrived Thursday and almost immediately began moving.
Onchain investigator ZachXBT picked it up quickly and broadcast his findings on Telegram. What he described was a deliberate, layered attempt to break the money trail, splitting funds across multiple directions in rapid succession.
Monero Became the Weapon of Choice
A large chunk of the funds was used to buy Monero, a privacy‑focused cryptocurrency specifically engineered to conceal sender and receiver identities. Unlike Bitcoin, Monero's transaction records are deliberately obscured, making it the go‑to choice for anyone wanting to vanish funds from public view.
The problem? Monero doesn't trade in huge volumes. So when someone dumps tens of millions into it in one move, the market reacts hard. XMR surged 33% in a matter of hours, jumping from around $330 to an intraday high of $438. By Friday morning in Europe, it had settled around $382, still up roughly 8% on the day, still far above where it started.
The price spike was essentially an alarm bell. You can't buy that much Monero without the market screaming about it.
The Rest Went Into a Deliberate Maze
The funds that didn't go into Monero were scattered across multiple destinations in a pattern that ZachXBT described as consistent with money laundering. More than $12 million was traced to deposit addresses at KuCoin. Around $8 million went into instant swap services, platforms that convert one crypto into another quickly and typically without identity verification requirements.
Another $8 million crossed blockchains entirely. Using a cross‑chain tool called Near Intents, money was moved from Tron onto both the Bitcoin and Ethereum networks, a technique designed to multiply the complexity of tracing funds and make recovery practically impossible.
Tether Came Down Hard
Despite the layering, Tether acted. The company holds the ability to blacklist specific USDT wallet addresses, effectively freezing any tokens held there. According to ZachXBT, Tether froze an address connected to this operation holding 72 million USDT. Once blacklisted, those funds cannot be transferred or cashed out.
It's a significant intervention, $72 million frozen in a single address is not a small move. It also suggests Tether drew the same conclusion as ZachXBT: this bore all the hallmarks of an attempt to launder illicit funds.
Where Did the Money Come From?
That question is still unanswered. The origin of the initial $120 million has not been publicly identified, and it's unclear who was behind the operation.
What is clear is that the combination of a privacy coin surge, scattered instant swaps, cross‑chain hops, and a large stablecoin freeze paints a picture that's hard to interpret any other way. This wasn't a trade. It was a cover operation, and it didn't go unnoticed.
