On 19 July 2026, after a post about “cancel culture” and his conflict with AffPapa, Ivanov (@dumay) published two USDT TRC20 wallets in an affiliate chat, and subscribers started sending “donations”. We matched the chat timeline against TRON on-chain data and found five anomalies: transfers to the second wallet before its address was posted, a “donation” sent from Ivanov’s own wallet, a 50,000 USDT circular tranche, and time-amount correlations with deposits via Bybit. Below: an interactive flow map, a breakdown of the anomalies, the full timeline, and tables of all transfers with TronScan links. Click any transfer for transaction details.
Flow map
Anomalies
1. Transfers to wallet #2 before its address was posted. The address TXRM…JST5C appeared in the chat only at 20:51:36, but the first two deposits arrived at 18:31:42 (+7,500) and 18:49:48 (+5,500 from Bybit) — two hours before the announcement. The senders could only have learned the address outside the chat.
2. “Nick’s donation” is Ivanov’s own money. At 18:28:24 wallet #1 sent 7,500 to TAinq…LBst; 3 min 18 s later the same 7,500 moved on to wallet #2. Nick (@NickKustov) posted the sending screenshot as his own donation.
3. The 50,000 loop. At 20:45:21 TTXCW… → #1 (+50,000); 84 seconds later #1 sent the 50,000 back; at 21:45:42 the same 50,000 arrived from TTXCW… at wallet #2. One and the same sum is shown as a “deposit” in both wallets. Pasha D noticed it in the chat: “You keep rolling the same 50k back and forth”.
4. Time-amount correlations with Bybit. #1 → TGRM… 5,500 at 18:45:27, and 4.5 min later Bybit → #2 exactly 5,500; #1 → TQfV… 10,000 at 21:08:03, and 3.5 min later Bybit → #2 exactly 10,000. Consistent with running one’s own funds through an exchange; public on-chain data cannot prove the link — it is a correlation, not proof.
5. Screenshot with the sender blurred. Ivanov posted the “Received: 50,000” push (21:48:24) with the sender blurred out; Vladimir (@vladimir_mircpa) reacted “You could’ve left it visible, I’m not hiding” — a possible attribution of TTXCW…, not confirmed.
Timeline: chat × blockchain
19 July 2026
17:39:05
Ivanov (@dumay) — Post about “cancel culture” and the conflict with AffPapa — the flashmob begins (“cancellation” screenshots attached)
17:59:46
IGOR ALEXEEV (@alexeev_work) — “damn, drop the wallet”
18:00:34
Ivanov (@dumay) — 📢 Posts wallet #1: USDT TRC20: THynghKUhfgqwkvhD4XJX5L9vr6vVdjsNX
18:19:57
+5,000 USDT wallet #1 from TCyyqS…ZQjk · @alexeev_work · IGOR ALEXEEV
18:22:42
IGOR ALEXEEV (@alexeev_work) — TronScan link (tx 36669b…db03): “+ enjoy”
18:28:24
−7,500 USDT wallet #1 to TAinqT…LBst
18:31:42
+7,500 USDT wallet #2 from TAinqT…LBst · @NickKustov · Nick (sender screenshot)
18:36:39
Nick (@NickKustov) — Screenshot “Sent −7,500 USDT → TXRM7N…JST5C, 18:31”: “Chipped in a little for you too, Zhenya!” — address #2 had not yet been posted in the chat
18:45:27
−5,500 USDT wallet #1 to TGRMfH…KdkH
18:49:48
+5,500 USDT wallet #2 from TU4vEr…Pvaa · @vladimir_mircpa · Vladimir (sender screenshot)
18:51:31
Vladimir (@vladimir_mircpa) — TronScan screenshot: Bybit → TXRM… 5,500 USDT: “sent some too, a bit more than Igor” — address #2 had not yet been posted in the chat
18:56:56
Ivanov (@dumay) — “Thanks to everyone who sent me money — no refunds”
19:14:09
−5,000 USDT wallet #2 to TV4AA9…Y1gG · personal wallet TV4AA…
19:18:06
+5,000 USDT wallet #1 from TQii9R…M4FD · @edclick · Edvard Click
19:19:27
Edvard Click (@edclick) — Trust Wallet screenshot −5,000 USDT → THyng…: “I’ll support👍”
19:37:03
+15,000 USDT wallet #1 from TPW6z9…SGL4 · @Ivan_TopX · Ivan (TopX)
19:41:35
Ivan TopX (@Ivan_TopX) — “@dumay sent it right off the bat, check”
19:45:51
Ivanov (@dumay) — TronLink screenshot +15,000 USDT: “Thanks TopX +15000$”
19:46:54
+25,000 USDT wallet #1 from TLaKJG…chGG · @oderzhimiy · Nikita
19:56:25
Nikita (@oderzhimiy) — TronScan link (tx df8577…9c11): “this is for renewing our stream backgrounds for another year”
19:56:50
Ivanov (@dumay) — Screenshot: push “25000 USDT received successfully” (phone in GMT+7, screen shows 23:56)
20:09:42
−40,000 USDT wallet #1 to TV7TqY…s8W3
20:45:21
+50,000 USDT wallet #1 from TTXCWZ…XuMs · unlabeled (TTXCW…)
20:46:45
−50,000 USDT wallet #1 to TTXCWZ…XuMs
20:51:36
Ivanov (@dumay) — 📢 Posts wallet #2: USDT TRC: TXRM7NUP86mst2SpLjVPXDc5qSzV8JST5C — “We continue 🚨”
21:08:03
−10,000 USDT wallet #1 to TQfVwY…RWJz
21:11:30
+10,000 USDT wallet #2 from TU4vEr…Pvaa · @marchenk · Ilya (sender screenshot)
21:13:24
Ivanov (@dumay) — Screenshot: push “Received: 10,000 USDT From TU4vEr…Pvaa” — “Who’s it from?”
21:13:50
Ilya (@marchenk) — TronScan screenshot: Bybit → TXRM… 10,000 USDT: “From Glory ❤️”
21:25:51
−439 USDT wallet #1 to TCxbNf…3jzt
21:45:42
+50,000 USDT wallet #2 from TTXCWZ…XuMs · unlabeled (TTXCW…)
21:48:24
Ivanov (@dumay) — Screenshot: push “Received: 50,000 USDT” (sender blurred) + “439 USDT sent successfully”
21:49:03
Vladimir (@vladimir_mircpa) — “You could’ve left it visible, I’m not hiding)”
21:56:08
Pasha D — “You’re warming the suckers up nicely! Rolling the same 50k back and forth hahaha”
22:00:14
Ivanov (@dumay) — “…today I earned enough for a whole year of living… Love you all, kisses”
All USDT TRC20 transfers
Wallet #1 — THynghKUhfgqwkvhD4XJX5L9vr6vVdjsNX
| Time (GMT+3) | Amount USDT | Counterparty | Label / attribution | Tx |
|---|---|---|---|---|
| 19.07 18:19:57 | +5,000 | TCyyqS…ZQjk | @alexeev_work · IGOR ALEXEEV | 36669bbe… |
| 19.07 18:28:24 | −7,500 +1.5 fee | TAinqT…LBst | — | 879c3350… |
| 19.07 18:45:27 | −5,500 +1.5 fee | TGRMfH…KdkH | — | 3d8f3cc0… |
| 19.07 19:18:06 | +5,000 | TQii9R…M4FD | @edclick · Edvard Click | 88439f65… |
| 19.07 19:37:03 | +15,000 | TPW6z9…SGL4 | @Ivan_TopX · Ivan (TopX) | db1e15a4… |
| 19.07 19:46:54 | +25,000 | TLaKJG…chGG | @oderzhimiy · Nikita | df8577d0… |
| 19.07 20:09:42 | −40,000 +1.5 fee | TV7TqY…s8W3 | — | 0404537e… |
| 19.07 20:45:21 | +50,000 | TTXCWZ…XuMs | unlabeled (TTXCW…) | d869540b… |
| 19.07 20:46:45 | −50,000 +1.5 fee | TTXCWZ…XuMs | — | 1122cf89… |
| 19.07 21:08:03 | −10,000 +1.5 fee | TQfVwY…RWJz | — | aa871aa9… |
| 19.07 21:25:51 | −439 +1.5 fee | TCxbNf…3jzt | — | de9e31aa… |
Wallet #2 — TXRM7NUP86mst2SpLjVPXDc5qSzV8JST5C
| Time (GMT+3) | Amount USDT | Counterparty | Label / attribution | Tx |
|---|---|---|---|---|
| 19.07 18:31:42 | +7,500 | TAinqT…LBst | @NickKustov · Nick (sender screenshot) | f518f372… |
| 19.07 18:49:48 | +5,500 | TU4vEr…Pvaa | @vladimir_mircpa · Vladimir (sender screenshot) | a7351798… |
| 19.07 19:14:09 | −5,000 | TV4AA9…Y1gG | personal wallet TV4AA… | 2d1be9d3… |
| 19.07 21:11:30 | +10,000 | TU4vEr…Pvaa | @marchenk · Ilya (sender screenshot) | 69b69367… |
| 19.07 21:45:42 | +50,000 | TTXCWZ…XuMs | unlabeled (TTXCW…) | b360504e… |
