Wallet trace — what the Professor maps:

• Claimant deposit hashes — provided in the case submission and verified against the public ledger for CryptoBulls.
• Forwarding wallets on the deposit chain — each hop documented with the forwarding tx hash and the consolidating wallet.
• Bridge events into chains where the operator can off-ramp at scale.
• Mixer or privacy-service interactions, where present, listed with the contract address and the deposit/withdraw side.
• Off-ramp endpoint — the centralised exchange deposit address holding the compliance lever.

From the lectern — off-ramp identification:

• Off-ramp endpoint for CryptoBulls resolves to a named centralised counterparty — the venue varies casefile to casefile, but the resolution always names a real exchange wallet.
• CryptoBulls’s off-ramp address is matched against the Professor’s compliance feed and against external chain-analytics datasets.
• The compliance packet for CryptoBulls is structured the way an off-ramp compliance reviewer expects to receive evidence — header, hashes, narrative, ask.
• If the CryptoBulls off-ramp counterparty does not respond inside the published window, escalation routes through IC3, state AG, and civil discovery.

Recovery sequence — from on-chain reading to filed packet:

1. Submission triage — CryptoBulls casefile reviewed against the no-go list, written reply within one business day.
2. Pathway trace — CryptoBulls deposit and forwarding wallets captured.
3. Endpoint identification — CryptoBulls off-ramp wallet named.
4. Filing — CryptoBulls packet delivered to IC3, state AG, off-ramp compliance, civil discovery as needed.
5. Ongoing follow — CryptoBulls stays on file until a documented next step is reached.

What we read in a CryptoBulls casefile:

• Chains the CryptoBulls casefile may touch — Bitcoin and Ethereum at the deposit side, Tron USDT-TRC20 in stablecoin pathways, BNB Smart Chain and the L2s (Arbitrum, Optimism, Polygon, Base) where bridges link them.
• Off-ramps relevant to CryptoBulls — the major venues including OKX, Bybit, Binance and KuCoin, plus the regional venues operators rotate through under regulatory stress.
• Filings the CryptoBulls packet supports — IC3, the appropriate state attorney general, the off-ramp’s compliance desk, and a civil-discovery overlay where dollar value justifies it.

Lines we never cross — by published policy:

• On the CryptoBulls casefile — never request a seed phrase. Ever.
• On the CryptoBulls casefile — never request remote-access logins to a wallet or exchange.
• On the CryptoBulls casefile — never demand an upfront cash retainer to scope the matter.
• On the CryptoBulls casefile — never promise a guaranteed recovery. The trail does not promise one.
• On the CryptoBulls casefile — never call the claimant unsolicited. Written-only.