Wallet trace, what the Professor maps:

• Claimant deposit hashes, provided in the case submission and verified against the public ledger for CryptoBulls.
• Forwarding wallets on the deposit chain, each hop documented with the forwarding tx hash and the consolidating wallet.
• Bridge events into chains where the operator can off-ramp at scale.
• Mixer or privacy-service interactions, where present, listed with the contract address and the deposit/withdraw side.
• Off-ramp endpoint, the centralised exchange deposit address holding the compliance lever.

From the lectern, off-ramp identification:

• Off-ramp endpoint for CryptoBulls resolves to a named centralised counterparty, the venue varies casefile to casefile, but the resolution always names a real exchange wallet.
• CryptoBulls’s off-ramp address is matched against the Professor’s compliance feed and against external chain-analytics datasets.
• The compliance packet for CryptoBulls is structured the way an off-ramp compliance reviewer expects to receive evidence, header, hashes, narrative, ask.
• If the CryptoBulls off-ramp counterparty does not respond inside the published window, escalation routes through IC3, state AG, and civil discovery.

Recovery sequence, from on-chain reading to filed packet:

1. Submission triage, CryptoBulls casefile reviewed against the no-go list, written reply within one business day.
2. Pathway trace, CryptoBulls deposit and forwarding wallets captured.
3. Endpoint identification, CryptoBulls off-ramp wallet named.
4. Filing, CryptoBulls packet delivered to IC3, state AG, off-ramp compliance, civil discovery as needed.
5. Ongoing follow, CryptoBulls stays on file until a documented next step is reached.

What we read in a CryptoBulls casefile:

• Chains the CryptoBulls casefile may touch, Bitcoin and Ethereum at the deposit side, Tron USDT-TRC20 in stablecoin pathways, BNB Smart Chain and the L2s (Arbitrum, Optimism, Polygon, Base) where bridges link them.
• Off-ramps relevant to CryptoBulls, the major venues including OKX, Bybit, Binance and KuCoin, plus the regional venues operators rotate through under regulatory stress.
• Filings the CryptoBulls packet supports, IC3, the appropriate state attorney general, the off-ramp’s compliance desk, and a civil-discovery overlay where dollar value justifies it.

Lines we never cross, by published policy:

• On the CryptoBulls casefile, never request a seed phrase. Ever.
• On the CryptoBulls casefile, never request remote-access logins to a wallet or exchange.
• On the CryptoBulls casefile, never demand an upfront cash retainer to scope the matter.
• On the CryptoBulls casefile, never promise a guaranteed recovery. The trail does not promise one.
• On the CryptoBulls casefile, never call the claimant unsolicited. Written-only.