[
  {
    "utc": "2020-11-20T15:58:45Z/2020-11-20T19:20:19Z",
    "event": "A shared wallet requiring two of three owner approvals sent 5.90 RBTC to common funding wallet B7",
    "significance": "The transfers identify the shared wallet that funded B7 and the approving wallet addresses. Obtain account, signer, device, and instruction records to identify the people behind those approvals.",
    "kind": "on-chain"
  },
  {
    "utc": "2021-02-05",
    "event": "B7 funded a rapid setup batch of linked wallets",
    "significance": "Ten newly used wallets sent their first outgoing transaction directly back to B7 73–380 seconds after B7 funded them. The timing and common destination establish a centrally directed setup session.",
    "kind": "on-chain conclusion"
  },
  {
    "utc": "2021-10-15T09:12:51Z",
    "event": "The Exchequer multisig held both FeeSharing administrative powers",
    "significance": "The power to replace the FeeSharing code and the power to operate it remained with the Exchequer multisig at 0x924f. No later transfer of either power to a Bitocracy-controlled delayed-execution contract was found in the contract history.",
    "kind": "on-chain"
  },
  {
    "utc": "2022-02-03T21:11:28Z",
    "event": "Legacy borrower wallet 8D51, first funded through B7, opened the SOV-backed RBTC loan",
    "significance": "After later collateral additions and 16 liquidations, this earlier loan remained active, unsafe, and deeply undercollateralized at the pinned August 2026 snapshot. It shows that the linked lending pattern began four years before the February 2026 loans.",
    "kind": "on-chain"
  },
  {
    "utc": "2022-06-13T01:54:59Z/2022-06-13T01:59:56Z",
    "event": "February borrower wallet 4f39 transferred exactly 385,915.40625 SOV to legacy borrower wallet 8D51, which put the full amount into three loans",
    "significance": "The exact amount moved from the later February borrower to the legacy borrower and into the loans within 4 minutes 57 seconds, directly linking their operations.",
    "kind": "on-chain conclusion"
  },
  {
    "utc": "2024-05-02",
    "event": "A project Discord account displayed as Tyrone supplied the address of conversion-and-bridge wallet 8C during a live bridge session",
    "significance": "Same-day public BOB transactions match the address, tokens, small test amounts, failure and retry, and final transfers shown in the conversation. Obtain the native Discord account and message records to authenticate the account and preserve the full exchange.",
    "kind": "direct on-chain"
  },
  {
    "utc": "2024-06-18/2024-06-20",
    "event": "Yago publicly described BitcoinOS as separately funded and said Sovryn had not funded its development",
    "significance": "Yago wrote that Sovryn had not funded BitcoinOS, called the developer team self-funded, described separate contributors and funding, and said Sovryn's treasury was not being requested. He repeated the current-funding distinction on Community Call 63.",
    "kind": "direct"
  },
  {
    "utc": "2024-07-02",
    "event": "Yago described the value and fundraising contribution contemplated for Sovryn's 10% BOS allocation",
    "significance": "Yago said that, for Sovryn to receive 10%, it would need to invest between $5 million and $100 million in value or provide in-kind value to that degree; he also said Sovryn was expected to engage actively in raising BOS funds. This is a contemporaneous qualification to the June separation statements.",
    "kind": "direct"
  },
  {
    "utc": "2024-11-04/2024-11-07",
    "event": "Official Sovryn records acknowledged substantial BitcoinOS contributions and continuing investment",
    "significance": "SIP-0083 said Sovryn had contributed incubation, design, research, development, testing, communications, and community engagement throughout BitcoinOS development and committed further technical, audit, interface, marketing, infrastructure, and network-operation resources. Yago then called Sovryn a significant BitcoinOS participant.",
    "kind": "direct"
  },
  {
    "utc": "2025-03-03/2025-10-22",
    "event": "The completed BOS launchpad sale recorded about $4.89 million in Origins' USD-valued amount-collected counter",
    "significance": "Origins' two contiguous completed backend periods record 609,509,366.81050959 BOS in tokensSold and $4,888,380.29942801134947357397 in the USD-valued usdCollected field across accepted crypto assets. Public-chain reconstruction identifies non-overlapping stablecoin roots plus high-confidence Bitcoin and Cardano collection candidates. Stablecoin face value and transaction-date Kraken daily VWAP for 20.01527801 BTC and 2,440,904.338471 ADA produce a $4,169,986.839549 scale benchmark, or 85.304060% of the counter. This is not Origins order-time accounting or an audited net-proceeds figure; complete order, rate, refund, allocation, exchange, banking, and Fireblocks records remain required.",
    "kind": "direct conclusion"
  },
  {
    "utc": "2025-05-12T16:43:49Z/2025-05-13T06:33:26Z",
    "event": "High-confidence Bitcoin and Cardano Origins candidates rotated collectors in synchronized batches",
    "significance": "Seven Cardano consolidation batches and the Bitcoin collector-A consolidation occurred within 16–23 minutes on 12 May. On 13 May, the main Cardano and Bitcoin rollovers landed at successor collectors 5 minutes 15 seconds apart, and their residual transfers followed 6 minutes 48 seconds apart. Sale timing, unique-deposit topology, official BOS-recipient crossmatches on Cardano, and this independent timing fingerprint support common Origins infrastructure attribution; they do not identify a natural-person controller.",
    "kind": "on-chain conclusion compel"
  },
  {
    "utc": "2025-08-27T22:06:11Z/2025-10-23T19:19:55Z",
    "event": "The candidate BOS Bitcoin collector deposited into the terminal later used by the Exchequer route",
    "significance": "Eight deposits totaling 20.09750539 BTC reached one exact terminal address. Conservation through the candidate collection pool establishes a 20.01114355-BTC sale-window lower bound, or 20.01094355 BTC after excluding both test transfers. The Origins or Fireblocks vault-to-address inventory is needed to make the candidate mapping first-party-confirmed.",
    "kind": "on-chain conclusion compel"
  },
  {
    "utc": "2025-10-22T21:45:11Z/2025-10-22T21:49:11Z",
    "event": "Long-running Sovryn operations key 0x509201…AbD6 provisioned three later DD/BOS owner keys",
    "significance": "The key first-funded 0x5C07…96C2, 0xe31c…67C6, and 0x59c4…ed0F with consecutive Ethereum nonces inside four minutes. The following day 8C used those addresses in the five-owner set for the official BOS token-owner and allocation Safes.",
    "kind": "on-chain conclusion"
  },
  {
    "utc": "2025-10-23",
    "event": "8C deployed the official BOS token-owner and allocation Safe family with one five-key control set",
    "significance": "The token-owner Safe and the allocation Safes used the exact five owner addresses later installed on DD. Net initial allocation balances reconcile BitcoinOS's published 32% ecosystem and 35% founding-entity buckets.",
    "kind": "on-chain conclusion"
  },
  {
    "utc": "2025-10-23T02:01:54Z/2025-10-23T19:46:12Z",
    "event": "The fully reconciled third Cardano sale collector funded the official BOS distributor",
    "significance": "The collector sent 8,000 ADA through a relay that forwarded 7,998.83 ADA to the official BOS Cardano distributor. The same collector's exact root, fee, and outflow ledger reconciles to zero; the public chain establishes this use but not its internal accounting category or authorization.",
    "kind": "on-chain conclusion compel"
  },
  {
    "utc": "2025-10-29",
    "event": "The BOS token began live trading",
    "significance": "Address 8C created the cross-chain DD shared wallets 15 days later, and Exchequer multisig asset movements began 36 days later. Obtain Sovryn/BitcoinOS allocation, proceeds, and related-party records for this period.",
    "kind": "direct"
  },
  {
    "utc": "2025-11-13T08:55:32Z",
    "event": "8C created the DD shared wallet on BNB Chain, requiring two of five owner approvals",
    "significance": "The same address created a matching Ethereum shared wallet 63 seconds later with the same five owners and two-signature requirement.",
    "kind": "on-chain"
  },
  {
    "utc": "2025-11-13T08:56:35Z",
    "event": "8C created the matching DD shared wallet on Ethereum",
    "significance": "The Ethereum and BNB Chain DD shared wallets had the same owner list and two-signature requirement, later received assets routed from the Exchequer multisig, and reused the exact five-owner set from the official BOS token-owner and allocation Safe family. The same two keys approved all 14 observed Ethereum DD executions.",
    "kind": "on-chain conclusion"
  },
  {
    "utc": "2025-11-14T18:53:11Z/2025-11-14T20:29:59Z",
    "event": "Two reconstructed BOS sale collectors transferred stablecoins, WBTC, and ETH directly to 0x509201…AbD6",
    "significance": "Collector 0x1160…f08C sent 204,103.50752 USDT, 30,056.588245 USDC, and 3.605528140408725578 ETH. Middle collector FeD3 sent 2,798.276966 USDT, 2,024.116896 USDC, 0.001 WBTC, and 1.196003859314349906 ETH in the same consolidation window. Their sale function is established by exact participant-deposit sweeps, linked gas infrastructure, official vesting-beneficiary matches, cutover timing, collector succession, and published stage-price corroboration. The recipient address already links B7, Sovryn's official Ethereum bridge, DD, and the official BOS Safe family.",
    "kind": "on-chain conclusion"
  },
  {
    "utc": "2025-11-20T00:00:00Z/2025-11-25T23:59:59Z",
    "event": "0x509201 sent 200,000 USDT into a Gemini forwarding route that deposited the exact amount at Gemini 4",
    "significance": "Before the BOS collector receipts, 0x509201 held only 49,536.080261 USDT. With no material intervening USDT inflow, balance conservation establishes that at least 150,463.919739 of the 200,000-USDT Gemini deposit came from the designated collector lot. The bounded minimum entering first-hop routes that terminate at publicly labeled Gemini, Kraken, and Coinbase addresses is 183,441.682473; after route losses and relay prebalances, at least 183,433.939419 necessarily reached those labeled exchange endpoints.",
    "kind": "on-chain conclusion compel"
  },
  {
    "utc": "2025-11-26T10:02:39Z",
    "event": "The same BOS collector sent swept participant RBTC into Sovryn's Exchequer multisig",
    "significance": "Eleven participant-specific Rootstock deposit addresses swept 0.02222114 RBTC into 0x1160…f08C, and every identified payer matched a later Community Sale vesting beneficiary. The collector then sent 0.02221978958 RBTC, net of onward transaction gas, into Sovryn's 0x924f… Exchequer. This is a direct BOS-presale-proceeds route into Sovryn's treasury and requires intercompany source-and-use reconciliation.",
    "kind": "on-chain conclusion compel"
  },
  {
    "utc": "2025-12-01T08:13:44Z",
    "event": "The Exchequer multisig held about $3.20 million of gross on-chain assets",
    "significance": "At Rootstock block 8,265,000, a realized-output method valued non-SOV holdings at about $2.663 million and 5.07 million SOV at about $536,947 using Sovryn's on-chain reference price. A separate same-time price check reached $3.250 million. These figures value gross assets before unidentified liabilities or off-chain accounts.",
    "kind": "on-chain conclusion"
  },
  {
    "utc": "2025-12-04/2026-01-24",
    "event": "Twenty-seven material Exchequer multisig operations moved treasury assets",
    "significance": "The non-double-counted ledger records 24 primary exits and three final BNB bridge executions. Three executions sent 23.146420437622064715 RBTC out of the Exchequer, worth an estimated $2,122,679.92 in total using the one-minute Coinbase BTC-USD candle close containing each execution. The FeeSharing deployment/submission wallet and Exchequer signer at 0xfEE171…4a9e7e approved all 27. Tyrone's official deployment record later names this same wallet as its sender. Only four of the eight historical Exchequer owner addresses approved any operation in this set.",
    "kind": "on-chain"
  },
  {
    "utc": "2025-12-07T12:47:10Z/2026-01-27T09:27:38Z",
    "event": "All three Exchequer-derived Bitcoin releases reached the exact earlier BOS-candidate terminal",
    "significance": "After Rootstock-to-Bitcoin bridge and Bitcoin fees, three releases delivered 23.13948498 BTC into the exact address previously used by the high-confidence BOS Bitcoin candidate. OKLink labels the terminal Gemini, while BitInfoCharts labels a recurring downstream consolidator OKEx. The address reuse is exact; venue, credited customer, beneficial owner, purpose, trades, withdrawals, and fiat proceeds require private records.",
    "kind": "on-chain conclusion compel"
  },
  {
    "utc": "2025-12-10T16:00:23Z/2025-12-16T11:09:16Z",
    "event": "Cardano sale infrastructure and mint-derived BOS funded a Minswap BOS/ADA liquidity position",
    "significance": "The third Cardano collector sent 277,396.064793 ADA to a purpose-created controller. A mint-derived reserve sent 36,670,452 BOS to the same address. The controller placed 277,394.921276 ADA and 36,652,194.91 BOS into an order that increased the Minswap V2 pool reserves by 277,392.171276 ADA and 36,652,194.91 BOS. All 30,314,501,400,595 returned LP units remained in an unspent controller output at the research cutoff; the controller's human identity and authorization remain unresolved.",
    "kind": "on-chain conclusion compel"
  },
  {
    "utc": "2025-12-10T20:37:10Z/2025-12-24T14:15:00Z",
    "event": "Treasury-linked DLLR was converted to ZUSD and redeemed through Zero against borrower collateral",
    "significance": "Five Exchequer transfers sent 569,214.338262406014287924 DLLR to conversion wallet 8C. That wallet made five matching DLLR-to-ZUSD calls and eleven successful Zero redeemCollateral calls before five follow-on transfers returned 6.22808069 RBTC to the Exchequer. Zero redemptions reduce borrower debt but also remove the oracle-priced RBTC equivalent, forcing a reduction in Bitcoin collateral exposure at the redeemer's chosen time. Because 8C held commingled balances and the successful calls exceeded the identified treasury DLLR input, not every redeemed unit or returned satoshi can be assigned solely to the Exchequer funds.",
    "kind": "on-chain conclusion"
  },
  {
    "utc": "2026-01-12T14:21:12.445Z",
    "event": "Sovryn's official X account told readers to stake SOV for BTC and USD income",
    "significance": "The post said, “Stake SOV right now to earn up to 21.37% APR BTC and USD.” The preserved official embed response and screenshot record the solicitation and its timestamp.",
    "kind": "direct"
  },
  {
    "utc": "2026-01-12T14:21:13Z/2026-02-17T14:10:15Z",
    "event": "Wallets staked SOV and lengthened existing locks during the promotion-to-notice period",
    "significance": "Fifteen addresses directly added 111,068.401210397869611600 SOV in 24 transactions. Twenty addresses lengthened locks on 9,962,956.414443993903912496 SOV in 27 transactions. Individual victim files can join these transactions to dated evidence of promotion exposure, purchase and staking decisions, and loss.",
    "kind": "on-chain"
  },
  {
    "utc": "2026-01-12T17:55:47Z/2026-01-13T13:36:23Z",
    "event": "DD sent Exchequer-attributed funds through the exact BOS-linked Ethereum forwarding route",
    "significance": "DD sent 100,000 USDT to the same e1d4 proxy used after BOS collector receipts; the proxy forwarded the exact amount to the publicly labeled Gemini 4 gateway. The January route's standalone Exchequer-origin lower bound is 66,644.658655 USDT. Exchange records are required to identify the credited customer, trades, withdrawals, and beneficial owner.",
    "kind": "on-chain conclusion compel"
  },
  {
    "utc": "2026-01-28T15:29:19Z/2026-01-30T14:11:53Z",
    "event": "Tyrone-authored code shut down principal fee claims on live Rootstock mainnet",
    "significance": "The FeeSharing deployment/submission wallet and Exchequer signer at 0xfEE171…4a9e7e deployed the code and submitted the request to the Exchequer multisig, and enough Exchequer owners approved it. Tyrone's official deployment record names this wallet as its sender. The live shutdown lasted 44 hours 20 minutes and began before the larger 29 January BTC decline. Yago later cited the recent BTC decline when justifying the February change that stole staker fee rights.",
    "kind": "direct on-chain"
  },
  {
    "utc": "2026-02-09T06:37:57Z",
    "event": "Archived staking-page HTML records a Webflow Last Published timestamp",
    "significance": "The preserved HTML begins with Webflow metadata dated after the January claim shutdown and before Yago's 17 February notice. Webflow revision, approval, and account logs should identify the exact page version and approvers behind that publication event.",
    "kind": "direct"
  },
  {
    "utc": "2026-02-16T23:29:43Z/2026-02-17T01:22:07Z",
    "event": "Seven B7-funded wallets withdrew 10,048,901.290470 SOV from staking",
    "significance": "The withdrawals occurred in 1 hour 52 minutes 24 seconds. Four of those seven wallets then opened the February loans.",
    "kind": "on-chain"
  },
  {
    "utc": "2026-02-17T01:19:47Z/2026-02-17T01:34:59Z",
    "event": "Four linked wallets opened SOV-backed RBTC loans within 15 minutes 12 seconds",
    "significance": "The loans paid a total of 1.465 RBTC from the lender pool to the borrower wallets and added risk from selling illiquid SOV collateral in a liquidation.",
    "kind": "on-chain"
  },
  {
    "utc": "2026-02-17T14:10:17.288Z",
    "event": "Yago announced the RBTC and ZUSD payout pause and the revenue change this dossier identifies as theft",
    "significance": "The announcement came 12 hours 35 minutes after the last linked loan opened. It said the change would follow the next payout; the Exchequer multisig still held the contract powers needed to carry it out.",
    "kind": "direct"
  },
  {
    "utc": "2026-02-19T13:21:55Z",
    "event": "The FeeSharing deployment/submission wallet at 0xfEE171…4a9e7e submitted the 100%-withholding change",
    "significance": "A Tyrone-authored deployment commit identifies 0xfEE171…4a9e7e as the sender. That wallet deployed the replacement code and submitted the Exchequer multisig upgrade, RBTC withholding, and ZUSD withholding actions within 3 minutes 16 seconds.",
    "kind": "direct on-chain"
  },
  {
    "utc": "2026-02-25T11:25:46Z/2026-02-25T11:44:51Z",
    "event": "The Exchequer multisig activated 100% withholding for RBTC and ZUSD",
    "significance": "Enough Exchequer owners approved the replacement code, and the 0xfEE171…4a9e7e deployment wallet executed both token additions. Staker claim entries for these fees stopped before any Bitocracy vote.",
    "kind": "on-chain"
  },
  {
    "utc": "2026-02-28",
    "event": "Six linked wallets staked 6,986,586.650819 SOV within 43 minutes 16 seconds",
    "significance": "Three wallets that had not borrowed restaked their exact withdrawn amounts. Nearly all stakes used the same 16 February 2029 lock target.",
    "kind": "on-chain"
  },
  {
    "utc": "2026-03-08T18:27:00Z",
    "event": "Public Disclosure #2 warned that the linked loans threatened RBTC lenders",
    "significance": "The notice identified all four loan transactions, asked Yago and Nahari to close the loans, and requested safer SOV-collateral rules.",
    "kind": "direct"
  },
  {
    "utc": "2026-03-20",
    "event": "B7-funded voting power defeated the SIP-0088 recovery proposals",
    "significance": "Five B7-first-funded wallets cast all 62,572,733.758251524367271838 votes against the executable proposals to reverse the fee change and transfer FeeSharing control to Bitocracy.",
    "kind": "on-chain"
  },
  {
    "utc": "2026-03-23T16:52:19.326Z",
    "event": "Yago sponsored a proposal to ratify the already executed staking-revenue theft",
    "significance": "SIP-0089 was expressly presented as approval and formalization after the operational decision and contract change had already occurred.",
    "kind": "direct"
  },
  {
    "utc": "2026-03-27",
    "event": "Yago acknowledged BOS-on-behalf-of-Sovryn payments and then denied fund mingling",
    "significance": "At 35:03 on Community Call 73, Yago said BOS had paid some funds on Sovryn's behalf and that they needed year-end consolidation. At 44:42, asked whether Sovryn was mingling funds with BOS, he answered 'No.' The DD/BOS shared-control and payment record requires the intercompany ledger, payment mapping, invoices, approvals, and reconciliation supporting both statements.",
    "kind": "direct conclusion compel"
  },
  {
    "utc": "2026-03-30T15:55:23Z/2026-03-30T18:07:59Z",
    "event": "DD funds passed through 0x509201 and a sibling forwarding proxy to the same Ethereum terminal",
    "significance": "DD sent 120,000 USDT to 0x509201, which exchanged that amount through Curve for 119,923.264180 USDC and then sent 122,000 USDC through sibling proxy f6c8 to the same 5f65 terminal, drawing on a pre-existing USDC balance for the difference. Allocating DD's maximum other funds only once across the January and March routes and deducting maximum March dilution establishes a joint 133,809.640217-unit Exchequer-origin lower bound at the terminal. Across all DD outflows, at least 411,750.640097 nominal stablecoin units reached either that terminal or recurring recipient wallets. These are gross-arrival lower bounds, not unique dollars or proof of purpose.",
    "kind": "on-chain conclusion compel"
  },
  {
    "utc": "2026-07-07T15:41:07Z/2026-07-16",
    "event": "Borrower-cluster value reached the wallet that later funded a Sovryn USDt0 campaign",
    "significance": "February borrower and later hub B493 sent 0.236 RBTC to campaign signer de169, a registered owner-address of the 0x924f Exchequer multisig, which remains the current guardian of both Governor contracts. De169 later sent the transaction identified in the transaction audit as an RBTC-to-USDt0 swap and signed the 14,416.901-USDt0 Merkl campaign transaction. Merkl's official opportunity page identifies Sovryn as the protocol, Rootstock as the chain, an approximately 14,000-USDt0 reward pool, and a Deposit link to Sovryn's market-making dapp. Obtain the swap receipt, full account ledger, campaign authorization, and signer records to complete the source-of-funds accounting.",
    "kind": "on-chain direct conclusion"
  },
  {
    "utc": "2026-08-16",
    "event": "Nine liquidation events struck three February loans",
    "significance": "Liquidators repaid 0.354492913324945733 WRBTC and seized 1,571,209.004300532849 SOV. All four February positions remained active and unsafe at the following audit snapshot.",
    "kind": "on-chain"
  },
  {
    "utc": "2026-08-18T17:41:35Z",
    "event": "The pinned lender-pool snapshot showed all 11 active SOV-backed loans unsafe",
    "significance": "At Rootstock block 9,162,594, selling all SOV collateral through the on-chain exchange pool produced a modeled 4.044086930453946278-RBTC lender shortfall.",
    "kind": "on-chain conclusion"
  },
  {
    "utc": "2026-08-20T19:52:12.143Z",
    "event": "Sovryn's live staking page continued to advertise BTC rewards and SOV purchases",
    "significance": "The official page displayed “up to 20% APR,” “Rewards in BTC,” “Payouts in BTC,” and a “Buy SOV” button months after the 100% RBTC and ZUSD withholding action. The page HTML, screenshots, capture time, and hashes are preserved.",
    "kind": "direct"
  }
]