Reading the wallets — XPO casefile:

• Deposit transaction hashes from the claimant wallet to the XPO platform receiving address.
• Forwarding wallets the platform consolidated through — typically two to four hops on the deposit chain (BTC / ETH / USDT-TRC20 / BSC / Polygon / Arbitrum / Optimism / Avalanche).
• Bridge crossings between chains, where the operator moves value into a chain with deeper liquidity ahead of the off-ramp.
• Mixer interactions — Tornado-Cash variants, Sinbad, and the smaller obfuscation services that operators rotate through under regulatory pressure.
• Final off-ramp wallet — the centralised exchange deposit address that received the consolidated funds.

From the lectern — off-ramp identification:

• XPO casefiles end at a centralised exchange — Bybit, KuCoin, OKX, or Gate.io are common; the casefile names the actual deposit address that received the consolidated funds.
• Off-ramp wallet for XPO is matched against compliance and chain-analytics datasets the Professor reads daily.
• Compliance leverage applied to the named off-ramp for XPO — the packet is delivered in compliance-desk format.
• Non-cooperative off-ramps trigger IC3 + state-AG + civil-discovery escalation on the XPO casefile.

Pathway to recovery — what happens after the trail is mapped:

1. Triage on XPO — submission read against a no-go checklist, written go/no-go returned to the claimant inside one business day.
2. Trace on XPO — deposit pathway mapped across chains, captured with chain-of-custody hashes.
3. Identify on XPO — off-ramp endpoint matched to a named exchange counterparty.
4. File the XPO packet — IC3, state AG (where loss meets state thresholds), off-ramp compliance desk, and civil-discovery overlay where dollar value supports it.
5. Follow-through on XPO — the Professor stays on the casefile until a documented next step exists.

What the casefile records — chains and counterparties:

• Deposit + forwarding chains for XPO — Bitcoin, Ethereum, Tron USDT-TRC20, plus the smart-contract chains (BSC, Polygon, Avalanche, Arbitrum, Optimism) that cross via bridges.
• Off-ramps the XPO casefile may resolve to — centralised exchanges that respond to compliance filings.
• Filing pathways on XPO — IC3, state AG, off-ramp compliance, and civil-discovery overlay.

Lines we never cross — by published policy:

• What the Professor will not do on XPO — ask for a seed phrase.
• What the Professor will not do on XPO — request remote-access logins.
• What the Professor will not do on XPO — demand cash up front.
• What the Professor will not do on XPO — promise a guarantee.
• What the Professor will not do on XPO — call you out of the blue.