# Public evidence packet

This directory contains the public records behind *The Sovryn Treasury Theft*. It is designed for reporters, investigators, victims, and lawyers who need to verify the dates, money movements, contract changes, public statements, and loss calculations. Private notes, raw address-history caches, unrelated wallets, incidental users, and restricted source media are excluded.

## Start here

- `media-brief.md` gives a short, nontechnical account of the principal findings and the records investigators should obtain.
- `case-chronology.json` places the public promises, treasury movements, contract changes, linked loans, warnings, liquidations, and continuing marketing in time order.
- `curated-transactions.json` lists 27 Exchequer multisig operations without counting intermediate steps twice. The Exchequer multisig is Sovryn's shared treasury wallet at `0x924f…`; three registered owners had to approve an execution.
- `asset-map.json` follows assets from the Exchequer multisig through Rootstock-to-Bitcoin transit wallet D9, the Rootstock-to-Bitcoin bridge, Bitcoin, conversion-and-bridge wallet 8C, and the cross-chain destination shared wallets DD. It values the three Exchequer RBTC transfers at approximately $2.12 million at their respective execution times and values the Exchequer's 1 December 2025 holdings at about $3.20–$3.25 million, including SOV at its on-chain price.
- `dd-bitcoinos-control.json` records the matching Ethereum and BNB Chain DD Safes, their exact five-owner overlap with the official BOS token-owner and allocation Safe family, the recurrent execution quorums, BOS allocation arithmetic, B7 and Sovryn bridge links, direct DD payments, dated funding statements, operational address labels, and intercompany records investigators should obtain.
- `fee-authority-records.json` records who controlled the FeeSharingCollector, the January live claim shutdown, the February 100% withholding change, the official staking promotions, the BTC-price timeline, and the staking revenue stolen from staker claim accounting while the amounts remained under Exchequer-controlled withdrawal authority.
- `staking-exposure-window.json` lists every staking and lock-extension transaction between Sovryn's 12 January 2026 X promotion and Yago's 17 February payout-pause announcement. `staking-exposure-window.md` explains the result and how to reproduce it.
- `loan-records.json` and `snapshots.json` record the four linked February loans, the earlier 2022 legacy loan, liquidation events, remaining unsafe positions, and pinned pool figures.
- `pool-model-inputs.json` contains all 11 active SOV-backed iWRBTC loans at Rootstock block 9,162,594 and the same-block market data used to estimate how much RBTC the pool could recover by selling the SOV collateral. An automated market maker (AMM) is the on-chain exchange pool used for that modeled sale.
- `governance-attribution.json` contains the 70-address set whose first funding path leads through common funding wallet B7, the proof for every path, the addresses' SOV balances and voting power, and the coordinated-control finding.
- `b7-activity-coordination.json` records the shared wallet that funded B7, the rapid wallet-setup session, activity levels for 11 key addresses, coordinated staking sessions, the February withdrawal/loan/restake sequence, and the exact 2022 transfer between the later February borrower and the legacy borrower.
- `loan-value-tracing.json` follows the four February loan payouts, later transfers among the borrower wallets, the 0.236-RBTC payment to USDt0 campaign signer and Exchequer owner-address de169, the later transaction identified in the transaction audit as an RBTC-to-USDt0 swap, and de169's 14,416.901-USDt0 campaign transaction. It also identifies the ledger, swap receipt, authorization, and signer records needed to complete the accounting.
- `actor-attribution.json` assembles the official roles, public statements, code authorship, wallet links, and operational acts tied to Yago, Nahari, and Tyrone, followed by specific records investigators should obtain.
- `visual-exhibits.json` records the file hashes, dimensions, captions, sources, and treatment of the supplied screenshots, the official staking-marketing captures, and the two identified event portraits. The public packet keeps the preservation record while the website supplies contextual images.
- `bitcoinos-claim-records.json` places the categorical bridge claims, direct BOS solicitations, public implementation status, technical findings, and records required for legal attribution in a dated matrix. `bos-launchpad-sale.json` preserves the two completed Origins backend periods and exact sale totals. `bos-presale-wallet-flows.json` reconstructs three linked primary Origins collector generations plus a smaller 60c branch, participant-specific deposit sweeps, downstream routes to Binance, `0x4ad662…`, `0x509201…`, and Sovryn’s Exchequer, plus the official Community Sale vesting ledger. `bos-proceeds-509-trace.json` follows the directly traced collector receipts through `0x509201…`, establishes balance-conservation lower bounds for the Ethereum outflows and labeled exchange routes, and records the conserved BNB Chain lot. Run `verify-bos-presale-wallet-flows.mjs` and `verify-bos-proceeds-509-trace.mjs` to check the source references and arithmetic. `bos-origins-ledger-one-2026-08-21.json` and `bos-origins-ledger-two-2026-08-21.json` preserve the exact API responses; `bos-origins-home-2026-08-21.base64.txt` safely preserves the public homepage response whose embedded metadata identifies the phase periods. Run `verify-bos-launchpad-sale.mjs` to authenticate all three response hashes, reproduce the decimal addition and display rounding, and check continuity and distinct addends. `bitcoinos-trust-model.md` gives the full pinned-code and consensus-semantics analysis; `bitcoinos-trust-model.json` contains its machine-readable propositions, premises, and expected finite-model results. Run `verify-bitcoinos-trust-model.mjs` to reproduce the finite Boolean and threshold arithmetic. `bitcoinos-invalid-proof.patch` and `bitcoinos-invalid-proof.cfg` reproduce an audit-specialized three-state symbolic trace against the project’s TLA+ model. `bitcoinos-excerpts.json` records the short video excerpts and hashes. `sources.json` separately indexes the sale pages, technical records, paid promotion, and dated qualifications. Telegram preserves the dated technical warning and Yago’s response; the code, consensus, tests, and formal analysis independently test the disputed claims.
- `btc-origins-flow.json` reconstructs a high-confidence Origins-style Bitcoin collection topology, its 20.01114355-BTC strict sale-window lower bound into an exact common terminal, and the later 23.13948498-BTC Exchequer route into that same address. `cardano-origins-flow.json` reconstructs 2,440,904.338471 ADA in three high-confidence Origins-style pools, six routes through one relay to a Binance-labeled terminal, the official BOS distributor branch, and the BOS/ADA Minswap liquidity branch. `exchequer-shared-terminal-flow.json` reconciles 508,947.877906 USDT arriving at DD and calculates source-neutral lower bounds for recurring recipients and the exact Ethereum forwarding route previously used after BOS collector receipts. `verify-fund-flows.mjs` checks every published source ID and recomputes the BTC, Cardano, Exchequer, BNB-root, and cross-chain benchmark arithmetic.
- `call-excerpts.json` records the exact call segments, sources, captions, hashes, and publication state. `sources.json` and `exhibit-index.json` provide the source and exhibit indexes.

## Reproduce the published arithmetic

From this directory, run `node reproduce-public-figures.mjs --verify`. The script checks:

- all 27 Exchequer multisig operations, per-asset totals, signer frequencies, the RBTC route, and its $2,122,679.92 transfer-time market valuation from three Coinbase one-minute candle closes;
- the four February loan openings, nine liquidation events, and lender-loss models;
- the FeeSharing ownership, claim-shutdown, and withholding records;
- all 70 B7 funding paths, exact governance totals, and SIP-0085/0088/0089 vote totals; and
- all 11 pool positions and the market-sale recovery calculation at the pinned block; and
- both completed Origins BOS launchpad periods, their exact combined 609,509,366.81050959 BOS `tokensSold` and $4,888,380.29942801134947357397 USD-valued `usdCollected` counters, and the chronology placing the separately sourced Phase 1 result within the first period.

Run `node verify-bos-presale-wallet-flows.mjs` to reproduce the separate sale-wallet arithmetic and source-reference checks: 144 exact canonical-token purchase sweeps across 127 participant deposit addresses; 43 payment-source/vesting-beneficiary matches; the early Binance, middle operations-wallet, direct `0x509201…`, and Rootstock-to-Exchequer route totals; and the 1,162 Community Sale schedules totaling 351,227,296.056466997646462718 BOS.

Run `node verify-bos-proceeds-509-trace.mjs` to reproduce the follow-through arithmetic and source-reference checks: 238,982.489627 USDT/USDC sent directly by two primary reconstructed collector wallets to `0x509201…`; at least 226,480.572473 of that designated lot leaving by 30 November 2025; at least 183,441.682473 entering first-hop routes terminating at publicly labeled Gemini, Kraken, and Coinbase addresses; at least 183,433.939419 necessarily reaching those labeled endpoints after route losses and relay prebalances; and 7,857.87166544 known-collector stablecoin units remaining conserved at the same address on BNB Chain. These scripts verify the published record’s arithmetic and source references; they do not query or authenticate chain history.

Run `node verify-fund-flows.mjs` to reproduce the new cross-chain packet: 20.01527801 BTC in the clean candidate collection topology; a 20.01114355-BTC BOS lower bound and 23.13948498 BTC from the Exchequer reaching the exact same Bitcoin terminal; 2,440,904.338471 ADA in the three Cardano pools; 88,279.775685490680807424 of additional, non-overlapping BNB stablecoin roots; and a $4,169,986.839549 transaction-date VWAP scale benchmark, equal to 85.304060% of Origins' counter. The benchmark uses stablecoins at face value and Kraken daily VWAP for the recovered BTC and ADA roots. It is not Origins order-time accounting, an audited net-proceeds figure, or a legal-purpose finding.

Repository tests separately check the coordinated B7 activity, February loan sequence, 2022 legacy-loan handoff, campaign flow, DD/BOS owner-set equality and execution concentration, source hashes, and the records investigators should obtain.

To rebuild the two smaller model files from the excluded full audit outputs, run `node scripts/generate-public-model-inputs.mjs` from the repository root. To rebuild the activity and value-tracing records, run `node scripts/generate-public-b7-activity.mjs` and `node scripts/generate-public-loan-value-tracing.mjs`. To verify the staking-exposure window against a Rootstock endpoint, run the command in `staking-exposure-window.md`.

Every current-state number is tied to a specific Rootstock block in `snapshots.json` or `asset-map.json`. Values from different blocks should not be combined and presented as one exact snapshot.

## How evidence is labelled

- **On-chain record:** a transaction, contract state, event log, or block-pinned balance.
- **Direct statement:** the speaker's or organization's own published words.
- **Dossier conclusion:** a conclusion drawn from the combined records.
- **Records authorities should compel:** private records needed to identify individual signers, instructions, accounts, and proceeds.

## Audio records

Full source videos and candidate excerpts that have not passed source and caption checks remain outside the public webroot. A call segment is marked `publicReady` only after its complete question and answer, cut boundaries, captions, and source/clip hashes have been checked and recorded.
