On-chain reading — wallet flow for Cipher Capital:

• Initial deposit hashes to the Cipher Capital receiving address at ciphercapital.net.
• Hop-by-hop forwarding wallets across the deposit chain, captured with chain-of-custody hashes.
• Cross-chain bridge events that move value into the chain where liquidity supports the eventual off-ramp.
• Obfuscation events through mixer contracts and privacy services.
• Centralised-exchange off-ramp wallets — the named counterparty that holds compliance leverage.

From the lectern — off-ramp identification:

• Off-ramp endpoint for Cipher Capital resolves to a named centralised counterparty — the venue varies casefile to casefile, but the resolution always names a real exchange wallet.
• Cipher Capital’s off-ramp address is matched against the Professor’s compliance feed and against external chain-analytics datasets.
• The compliance packet for Cipher Capital is structured the way an off-ramp compliance reviewer expects to receive evidence — header, hashes, narrative, ask.
• If the Cipher Capital off-ramp counterparty does not respond inside the published window, escalation routes through IC3, state AG, and civil discovery.

The Professor’s recovery note for Cipher Capital:

1. Submission triage — Cipher Capital casefile reviewed against the no-go list, written reply within one business day.
2. Pathway trace — Cipher Capital deposit and forwarding wallets captured.
3. Endpoint identification — Cipher Capital off-ramp wallet named.
4. Filing — Cipher Capital packet delivered to IC3, state AG, off-ramp compliance, civil discovery as needed.
5. Ongoing follow — Cipher Capital stays on file until a documented next step is reached.

What the on-chain reading covers:

• Chains tracked on Cipher Capital — Bitcoin and Ethereum at the deposit side; Tron USDT-TRC20 and BSC at the consolidation side; bridges crossed where the operator chases liquidity.
• Off-ramps tracked on Cipher Capital — named exchange counterparties with public compliance contacts.
• Filings supported on Cipher Capital — IC3, state AG, off-ramp compliance, civil discovery — selected by the dollar value and the off-ramp’s responsiveness.

What the Professor will never do — by policy:

• What the Professor will not do on Cipher Capital — ask for a seed phrase.
• What the Professor will not do on Cipher Capital — request remote-access logins.
• What the Professor will not do on Cipher Capital — demand cash up front.
• What the Professor will not do on Cipher Capital — promise a guarantee.
• What the Professor will not do on Cipher Capital — call you out of the blue.