Wallet trace — what the Professor maps:

• Deposit transaction hashes from the claimant wallet to the Grayscale Group platform receiving address.
• Forwarding wallets the platform consolidated through — typically two to four hops on the deposit chain (BTC / ETH / USDT-TRC20 / BSC / Polygon / Arbitrum / Optimism / Avalanche).
• Bridge crossings between chains, where the operator moves value into a chain with deeper liquidity ahead of the off-ramp.
• Mixer interactions — Tornado-Cash variants, Sinbad, and the smaller obfuscation services that operators rotate through under regulatory pressure.
• Final off-ramp wallet — the centralised exchange deposit address that received the consolidated funds.

Off-ramp reading — exchange counterparty for Grayscale Group:

• Grayscale Group casefiles end at a centralised exchange — Bybit, KuCoin, OKX, or Gate.io are common; the casefile names the actual deposit address that received the consolidated funds.
• Off-ramp wallet for Grayscale Group is matched against compliance and chain-analytics datasets the Professor reads daily.
• Compliance leverage applied to the named off-ramp for Grayscale Group — the packet is delivered in compliance-desk format.
• Non-cooperative off-ramps trigger IC3 + state-AG + civil-discovery escalation on the Grayscale Group casefile.

How a Grayscale Group casefile becomes a regulator-ready filing:

1. Submission triage — Grayscale Group casefile reviewed against the no-go list, written reply within one business day.
2. Pathway trace — Grayscale Group deposit and forwarding wallets captured.
3. Endpoint identification — Grayscale Group off-ramp wallet named.
4. Filing — Grayscale Group packet delivered to IC3, state AG, off-ramp compliance, civil discovery as needed.
5. Ongoing follow — Grayscale Group stays on file until a documented next step is reached.

What we read in a Grayscale Group casefile:

• Chains tracked on Grayscale Group — Bitcoin and Ethereum at the deposit side; Tron USDT-TRC20 and BSC at the consolidation side; bridges crossed where the operator chases liquidity.
• Off-ramps tracked on Grayscale Group — named exchange counterparties with public compliance contacts.
• Filings supported on Grayscale Group — IC3, state AG, off-ramp compliance, civil discovery — selected by the dollar value and the off-ramp’s responsiveness.

Lines we never cross — by published policy:

• Boundary on Grayscale Group — seed phrases are off-limits.
• Boundary on Grayscale Group — remote logins are off-limits.
• Boundary on Grayscale Group — upfront cash retainers are off-limits.
• Boundary on Grayscale Group — guaranteed-recovery promises are off-limits.
• Boundary on Grayscale Group — unsolicited outbound contact is off-limits.