The annotation reads, wallet trace:

• Initial deposit hashes to the Kistoss receiving address at kistoss.org.
• Hop-by-hop forwarding wallets across the deposit chain, captured with chain of custody hashes.
• Cross-chain bridge events that move value into the chain where liquidity supports the eventual off-ramp.
• Obfuscation events through mixer contracts and privacy services.
• Centralised-exchange off-ramp wallets, the named counterparty that holds compliance leverage.

How a Kistoss casefile becomes a evidence filing:

1. Triage on Kistoss, submission read against a no-go checklist, written go/no-go returned to the claimant inside one business day.
2. Trace on Kistoss, deposit pathway mapped across chains, captured with chain of custody hashes.
3. Identify on Kistoss, off-ramp endpoint matched to a named exchange counterparty.
4. File the Kistoss packet, IC3, state AG (where loss meets state thresholds), off-ramp compliance desk, and civil-discovery overlay where dollar value supports it.
5. Follow-through on Kistoss, the Professor stays on the casefile until a documented next step exists.

Reading-list, chains and exchanges in scope:

• Deposit-side chains in Kistoss casefiles, typically the major chains (BTC, ETH) and the high-throughput stablecoin chains (Tron USDT, BSC USDT), with bridge crossings noted.
• Off-ramps named in Kistoss packets, centralised exchanges that accept regulator-grade compliance filings.
• Filing options on Kistoss, IC3 (US), state AG, off-ramp compliance desk, civil-discovery KYC where the dollar value warrants it.