A client was one of many users of a fast-growing new exchange that, almost overnight, stopped processing withdrawals while still showing balances on screen. It was an exit scam in progress.
What we found. Individual complaints rarely move quickly. But on-chain, an exit scam leaves a shared fingerprint: many victim deposits flowing into a small set of consolidation wallets, then out through bridges and off-ramps on a predictable schedule.
What we did. We aggregated deposits from dozens of affected users, mapped the consolidation wallets, and traced the operator funds across a bridge to two off-ramps. The result was a single network map showing exactly how and where the operator was cashing out.
The outcome. We shared the consolidated intelligence with the receiving exchanges and gave the affected users a coordinated, documented evidence package to submit together to law enforcement. A unified, evidence-led filing from many victims carries far more weight than the same number of isolated reports.
The takeaway. Scale is a weapon that cuts both ways. The same pattern that lets an operator steal from many people at once is the pattern that, properly mapped, exposes them. If you are caught in a suspected exit scam, organized evidence beats a lone complaint.
Client and identifying details have been anonymized to protect confidentiality. CryptoCISO does not guarantee recovery; outcomes depend on the specific facts of each case.